MGASA-2018-0381
Updated xml-security-c packages fix security vulnerability
It was discovered that the Apache XML Security for C++ library performed insufficient validation of KeyInfo hints, which could result in denial of service via NULL pointer dereferences when processing malformed XML data.
What each source reports
OSV No score
Updated xml-security-c packages fix security vulnerability
It was discovered that the Apache XML Security for C++ library performed insufficient validation of KeyInfo hints, which could result in denial of service via NULL pointer dereferences when processing malformed XML data.
- Record
MGASA-2018-0381- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xml-security-cMageia:6 |
before 1.7.3-2.1.mga6 | 1.7.3-2.1.mga6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2018-0381 is a vulnerability with no CVSS score yet in xml-security-c, published September 21, 2018. No source lists public exploit code. Fixed in xml-security-c 1.7.3-2.1.mga6.