Infinite loop within Apache XercesJ xml parser
There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present within XercesJ version 2.12.1 and the previous versions.
CVE-2022-23437
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2022-23437
Apache Xerces
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "Apache Software Foundation",
"product": "Apache Xerces",
"versions": [
{
"status": "affected",
"version": "Apache XercesJ",
"versionType": "custom",
"lessThanOrEqual": "2.12.1"
}
]
}
]- Related CVEs
- CVE-2022-23437
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #16049 · Revision 1
- Added to Heist Feed
- Publisher date