Use-after-free in Apache Xerces C++ - CVE-2024-23807

Vulnerability identifier: #VU86623

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-23807

CWE-ID: CWE-416

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error within the XML parser when scanning of external DTDs. A remote attacker can pass specially crafted input to the application, trigger a use-after-free error and execute arbitrary code on the system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

Note, the vulnerability exists due to an incorrect fix for #VU24140 (CVE-2018-1311).

Apache Xerces C++
Oracle Communications Convergent Charging Controller
Siebel CRM Integration
Oracle Communications Network Charging and Control
Oracle Agile Engineering Data Management
Oracle Communications ASAP
Oracle Financial Services Analytical Applications Infrastructure
Oracle Communications User Data Repository
Storage Protect for Space Management
IBM Storage Protect HSM for Windows
Storage Protect for Virtual Environments: Data Protection for Hyper-V
Storage Protect Client
Storage Protect for Virtual Environments: Data Protection for VMware
Oracle Communications IP Service Activator
Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition
Oracle Financial Services Behavior Detection Platform
Oracle Communications Diameter Signaling Router
Hyperion Financial Management
Oracle Financial Services Basel Regulatory Capital Basic
Oracle Financial Services Basel Regulatory Capital Internal Ratings Based Approach
Oracle Communications Instant Messaging Server
Oracle Communications Billing and Revenue Management
JD Edwards EnterpriseOne Tools
Oracle Autovue for Agile Product Lifecycle Management
Oracle Access Manager

Install updates from vendor's website.

Apache Xerces C++ - update to 3.2.5
Storage Protect for Space Management - update to 8.1.23.0
IBM Storage Protect HSM for Windows - update to 8.1.23
Storage Protect for Virtual Environments: Data Protection for Hyper-V - update to 8.1.23.0
Storage Protect Client - update to 8.1.23.0
Storage Protect for Virtual Environments: Data Protection for VMware - update to 8.1.23.0

• https://lists.apache.org/thread/c497tgn864tsbm8w0bo3f0d81s07zk9r
• https://issues.apache.org/jira/browse/XERCESC-2188

• Remote code execution in Apache Xerces C++
• Multiple vulnerabilities in IBM Storage Protect for Space Management
• Use-after-free in IBM Storage Protect HSM for Windows
• Multiple vulnerabilities in IBM Storage Protect for Virtual Environments: Data Protection for Hyper-V
• Multiple vulnerabilities in IBM Storage Protect Client
• Multiple vulnerabilities in Oracle Communications User Data Repository
• Multiple vulnerabilities in Oracle Communications Diameter Signaling Router
• Multiple vulnerabilities in Oracle Communications ASAP
• Multiple vulnerabilities in Oracle Communications Billing and Revenue Management
• Multiple vulnerabilities in Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition
• Multiple vulnerabilities in Oracle Financial Services Behavior Detection Platform
• Use-after-free in Oracle Financial Services Basel Regulatory Capital Internal Ratings Based Approach
• Use-after-free in Oracle Financial Services Basel Regulatory Capital Basic
• Multiple vulnerabilities in Oracle Financial Services Analytical Applications Infrastructure
• Multiple vulnerabilities in IBM Storage Protect for Virtual Environments: Data Protection for VMware
• Use-after-free in Oracle Communications Network Charging and Control
• Use-after-free in Oracle Communications Messaging Server
• Use-after-free in Oracle Communications IP Service Activator
• Use-after-free in Oracle Communications Convergent Charging Controller
• Use-after-free in Oracle Access Manager
• Multiple vulnerabilities in Oracle Autovue for Agile Product Lifecycle Management
• Use-after-free in Hyperion Financial Management
• Multiple vulnerabilities in Oracle Agile Engineering Data Management
• Multiple vulnerabilities in JD Edwards EnterpriseOne Tools
• Multiple vulnerabilities in Hyperion Financial Management
• Multiple vulnerabilities in Siebel CRM Integration
• Use-after-free in Oracle Communications Instant Messaging Server