CVE-2024-23807 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2024-23807 Interim 1 8 2025-02-16T01:35:45Z current 2024-02-20T00:09:05Z 2025-02-16T01:35:45Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2024-23807 The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DTDs. Users are recommended to upgrade to version 3.2.5 which fixes the issue, or mitigate the issue by disabling DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable. This issue has been disclosed before as CVE-2018-1311, but unfortunately that advisory incorrectly stated the issue would be fixed in version 3.2.3 or 3.2.4. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 12 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 libxerces-c-3_1 libxerces-c-3_1-32bit libxerces-c-3_2 libxerces-c-devel xerces-c libxerces-c-3_1 as a component of SUSE CaaS Platform 4.0 libxerces-c-devel as a component of SUSE CaaS Platform 4.0 xerces-c as a component of SUSE CaaS Platform 4.0 libxerces-c-3_1 as a component of SUSE Enterprise Storage 7.1 libxerces-c-3_1-32bit as a component of SUSE Enterprise Storage 7.1 libxerces-c-3_2 as a component of SUSE Enterprise Storage 7.1 libxerces-c-devel as a component of SUSE Enterprise Storage 7.1 xerces-c as a component of SUSE Enterprise Storage 7.1 xerces-c as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libxerces-c-3_1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libxerces-c-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS xerces-c as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libxerces-c-3_1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libxerces-c-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS xerces-c as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libxerces-c-3_1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libxerces-c-3_1-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libxerces-c-3_2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libxerces-c-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS xerces-c as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libxerces-c-3_2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS libxerces-c-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS xerces-c as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS libxerces-c-3_2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libxerces-c-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS xerces-c as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libxerces-c-3_2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libxerces-c-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 xerces-c as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libxerces-c-3_1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libxerces-c-3_1-32bit as a component of SUSE Linux Enterprise Server 12 SP2-LTSS xerces-c as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libxerces-c-3_1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libxerces-c-3_1-32bit as a component of SUSE Linux Enterprise Server 12 SP4-LTSS xerces-c as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libxerces-c-3_1 as a component of SUSE Linux Enterprise Server 12 SP5 libxerces-c-3_1-32bit as a component of SUSE Linux Enterprise Server 12 SP5 xerces-c as a component of SUSE Linux Enterprise Server 12 SP5 libxerces-c-3_1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libxerces-c-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS xerces-c as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libxerces-c-3_1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libxerces-c-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS xerces-c as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libxerces-c-3_1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libxerces-c-3_1-32bit as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libxerces-c-3_2 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libxerces-c-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS xerces-c as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libxerces-c-3_2 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libxerces-c-devel as a component of SUSE Linux Enterprise Server 15 SP4-LTSS xerces-c as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libxerces-c-3_1 as a component of SUSE Linux Enterprise Server 15-LTSS libxerces-c-devel as a component of SUSE Linux Enterprise Server 15-LTSS xerces-c as a component of SUSE Linux Enterprise Server 15-LTSS xerces-c as a component of SUSE Linux Enterprise Server Teradata 12 SP3 xerces-c as a component of SUSE Linux Enterprise Server Teradata 12 SP3-LTSS libxerces-c-3_1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libxerces-c-3_1-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 xerces-c as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libxerces-c-3_1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libxerces-c-3_1-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xerces-c as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xerces-c as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libxerces-c-3_1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libxerces-c-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 xerces-c as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libxerces-c-3_1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libxerces-c-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 xerces-c as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libxerces-c-3_1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libxerces-c-3_1-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libxerces-c-3_2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libxerces-c-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 xerces-c as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libxerces-c-3_2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libxerces-c-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 xerces-c as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libxerces-c-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 xerces-c as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libxerces-c-3_2 as a component of SUSE Manager Proxy 4.3 libxerces-c-devel as a component of SUSE Manager Proxy 4.3 xerces-c as a component of SUSE Manager Proxy 4.3 libxerces-c-3_2 as a component of SUSE Manager Retail Branch Server 4.3 libxerces-c-devel as a component of SUSE Manager Retail Branch Server 4.3 xerces-c as a component of SUSE Manager Retail Branch Server 4.3 libxerces-c-3_2 as a component of SUSE Manager Server 4.3 libxerces-c-devel as a component of SUSE Manager Server 4.3 xerces-c as a component of SUSE Manager Server 4.3 libxerces-c-3_1 as a component of SUSE OpenStack Cloud 9 libxerces-c-3_1-32bit as a component of SUSE OpenStack Cloud 9 xerces-c as a component of SUSE OpenStack Cloud 9 libxerces-c-3_1 as a component of SUSE OpenStack Cloud Crowbar 9 libxerces-c-3_1-32bit as a component of SUSE OpenStack Cloud Crowbar 9 xerces-c as a component of SUSE OpenStack Cloud Crowbar 9 The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DTDs. Users are recommended to upgrade to version 3.2.5 which fixes the issue, or mitigate the issue by disabling DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable. This issue has been disclosed before as CVE-2018-1311, but unfortunately that advisory incorrectly stated the issue would be fixed in version 3.2.3 or 3.2.4. CVE-2024-23807 SUSE Enterprise Storage 7.1:libxerces-c-3_1 SUSE Enterprise Storage 7.1:libxerces-c-3_1-32bit SUSE Enterprise Storage 7.1:libxerces-c-3_2 SUSE Enterprise Storage 7.1:libxerces-c-devel SUSE Enterprise Storage 7.1:xerces-c SUSE Linux Enterprise High Performance Computing 12 SP5:xerces-c SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libxerces-c-3_1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libxerces-c-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:xerces-c SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libxerces-c-3_1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libxerces-c-3_1-32bit SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libxerces-c-3_2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libxerces-c-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xerces-c SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libxerces-c-3_2 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libxerces-c-devel SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xerces-c SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libxerces-c-3_2 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libxerces-c-devel SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xerces-c SUSE Linux Enterprise Module for Basesystem 15 SP5:libxerces-c-3_2 SUSE Linux Enterprise Module for Basesystem 15 SP5:libxerces-c-devel SUSE Linux Enterprise Module for Basesystem 15 SP5:xerces-c SUSE Linux Enterprise Server 12 SP2-LTSS:libxerces-c-3_1 SUSE Linux Enterprise Server 12 SP2-LTSS:libxerces-c-3_1-32bit SUSE Linux Enterprise Server 12 SP2-LTSS:xerces-c SUSE Linux Enterprise Server 12 SP4-LTSS:libxerces-c-3_1 SUSE Linux Enterprise Server 12 SP4-LTSS:libxerces-c-3_1-32bit SUSE Linux Enterprise Server 12 SP4-LTSS:xerces-c SUSE Linux Enterprise Server 12 SP5:libxerces-c-3_1 SUSE Linux Enterprise Server 12 SP5:libxerces-c-3_1-32bit SUSE Linux Enterprise Server 12 SP5:xerces-c SUSE Linux Enterprise Server 15 SP2-LTSS:libxerces-c-3_1 SUSE Linux Enterprise Server 15 SP2-LTSS:libxerces-c-devel SUSE Linux Enterprise Server 15 SP2-LTSS:xerces-c SUSE Linux Enterprise Server 15 SP3-LTSS:libxerces-c-3_1 SUSE Linux Enterprise Server 15 SP3-LTSS:libxerces-c-3_1-32bit SUSE Linux Enterprise Server 15 SP3-LTSS:libxerces-c-3_2 SUSE Linux Enterprise Server 15 SP3-LTSS:libxerces-c-devel SUSE Linux Enterprise Server 15 SP3-LTSS:xerces-c SUSE Linux Enterprise Server 15 SP4-LTSS:libxerces-c-3_2 SUSE Linux Enterprise Server 15 SP4-LTSS:libxerces-c-devel SUSE Linux Enterprise Server 15 SP4-LTSS:xerces-c SUSE Linux Enterprise Server Teradata 12 SP3-LTSS:xerces-c SUSE Linux Enterprise Server Teradata 12 SP3:xerces-c SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxerces-c-3_1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxerces-c-3_1-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP2:xerces-c SUSE Linux Enterprise Server for SAP Applications 12 SP4:libxerces-c-3_1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libxerces-c-3_1-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP4:xerces-c SUSE Linux Enterprise Server for SAP Applications 12 SP5:xerces-c SUSE Linux Enterprise Server for SAP Applications 15 SP2:libxerces-c-3_1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libxerces-c-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:xerces-c SUSE Linux Enterprise Server for SAP Applications 15 SP3:libxerces-c-3_1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libxerces-c-3_1-32bit SUSE Linux Enterprise Server for SAP Applications 15 SP3:libxerces-c-3_2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libxerces-c-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:xerces-c SUSE Linux Enterprise Server for SAP Applications 15 SP4:libxerces-c-3_2 SUSE Linux Enterprise Server for SAP Applications 15 SP4:libxerces-c-devel SUSE Linux Enterprise Server for SAP Applications 15 SP4:xerces-c SUSE Linux Enterprise Software Development Kit 12 SP5:libxerces-c-devel SUSE Linux Enterprise Software Development Kit 12 SP5:xerces-c SUSE Manager Proxy 4.3:libxerces-c-3_2 SUSE Manager Proxy 4.3:libxerces-c-devel SUSE Manager Proxy 4.3:xerces-c SUSE Manager Retail Branch Server 4.3:libxerces-c-3_2 SUSE Manager Retail Branch Server 4.3:libxerces-c-devel SUSE Manager Retail Branch Server 4.3:xerces-c SUSE Manager Server 4.3:libxerces-c-3_2 SUSE Manager Server 4.3:libxerces-c-devel SUSE Manager Server 4.3:xerces-c SUSE OpenStack Cloud 9:libxerces-c-3_1 SUSE OpenStack Cloud 9:libxerces-c-3_1-32bit SUSE OpenStack Cloud 9:xerces-c SUSE OpenStack Cloud Crowbar 9:libxerces-c-3_1 SUSE OpenStack Cloud Crowbar 9:libxerces-c-3_1-32bit SUSE OpenStack Cloud Crowbar 9:xerces-c important 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H