CVE-2019-9628 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2019-9628 Interim 1 36 2023-09-11T00:11:15Z current 2021-05-30T14:25:50Z 2023-09-11T00:11:15Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2019-9628 The XMLTooling library all versions prior to V3.0.4, provided with the OpenSAML and Shibboleth Service Provider software, contains an XML parsing class. Invalid data in the XML declaration causes an exception of a type that was not handled properly in the parser class and propagates an unexpected exception type. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2019-April/005324.html E-Mail link for SUSE-SU-2019:0928-1 https://lists.suse.com/pipermail/sle-security-updates/2019-April/005323.html E-Mail link for SUSE-SU-2019:0929-1 https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00079.html E-Mail link for openSUSE-SU-2019:1235-1 https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00095.html E-Mail link for openSUSE-SU-2019:1276-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 openSUSE Leap 15.0 openSUSE Tumbleweed libxmltooling-devel-1.5.6-3.9.1 libxmltooling-devel-1.6.4-3.3.2 libxmltooling-devel-1.6.4-lp150.2.3.1 libxmltooling-devel-3.1.0-1.26 libxmltooling-devel-3.2.0-1.2 libxmltooling-lite10-3.2.0-1.2 libxmltooling-lite9-3.1.0-1.26 libxmltooling10-3.2.0-1.2 libxmltooling6 libxmltooling6-1.5.6-3.9.1 libxmltooling7-1.6.4-3.3.2 libxmltooling7-1.6.4-lp150.2.3.1 libxmltooling9-3.1.0-1.26 xmltooling xmltooling-schemas xmltooling-schemas-1.5.6-3.9.1 xmltooling-schemas-1.6.4-3.3.2 xmltooling-schemas-1.6.4-lp150.2.3.1 xmltooling-schemas-3.1.0-1.26 xmltooling-schemas-3.2.0-1.2 libxmltooling6-1.5.6-3.9.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 xmltooling-schemas-1.5.6-3.9.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libxmltooling-devel-1.6.4-3.3.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 libxmltooling7-1.6.4-3.3.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 xmltooling-schemas-1.6.4-3.3.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 libxmltooling-devel-1.6.4-3.3.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 libxmltooling7-1.6.4-3.3.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 xmltooling-schemas-1.6.4-3.3.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 libxmltooling-devel-1.6.4-3.3.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 libxmltooling7-1.6.4-3.3.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 xmltooling-schemas-1.6.4-3.3.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 libxmltooling-devel-3.1.0-1.26 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 libxmltooling-lite9-3.1.0-1.26 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 libxmltooling9-3.1.0-1.26 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 xmltooling-schemas-3.1.0-1.26 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 libxmltooling-devel-3.1.0-1.26 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libxmltooling-lite9-3.1.0-1.26 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libxmltooling9-3.1.0-1.26 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 xmltooling-schemas-3.1.0-1.26 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libxmltooling6-1.5.6-3.9.1 as a component of SUSE Linux Enterprise Server 12 SP3 xmltooling-schemas-1.5.6-3.9.1 as a component of SUSE Linux Enterprise Server 12 SP3 libxmltooling6-1.5.6-3.9.1 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA xmltooling-schemas-1.5.6-3.9.1 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA libxmltooling6-1.5.6-3.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 xmltooling-schemas-1.5.6-3.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libxmltooling6-1.5.6-3.9.1 as a component of SUSE Linux Enterprise Server 12 SP5 xmltooling-schemas-1.5.6-3.9.1 as a component of SUSE Linux Enterprise Server 12 SP5 libxmltooling6-1.5.6-3.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 xmltooling-schemas-1.5.6-3.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libxmltooling6-1.5.6-3.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xmltooling-schemas-1.5.6-3.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libxmltooling-devel-1.5.6-3.9.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libxmltooling-devel-1.5.6-3.9.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libxmltooling-devel-1.5.6-3.9.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libxmltooling-devel-1.6.4-lp150.2.3.1 as a component of openSUSE Leap 15.0 libxmltooling7-1.6.4-lp150.2.3.1 as a component of openSUSE Leap 15.0 xmltooling-schemas-1.6.4-lp150.2.3.1 as a component of openSUSE Leap 15.0 libxmltooling-devel-3.2.0-1.2 as a component of openSUSE Tumbleweed libxmltooling-lite10-3.2.0-1.2 as a component of openSUSE Tumbleweed libxmltooling10-3.2.0-1.2 as a component of openSUSE Tumbleweed xmltooling-schemas-3.2.0-1.2 as a component of openSUSE Tumbleweed libxmltooling6 as a component of HPE Helion OpenStack 8 xmltooling-schemas as a component of HPE Helion OpenStack 8 xmltooling as a component of HPE Helion OpenStack 8 xmltooling as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libxmltooling6 as a component of SUSE Linux Enterprise Server 12 SP2-BCL xmltooling-schemas as a component of SUSE Linux Enterprise Server 12 SP2-BCL xmltooling as a component of SUSE Linux Enterprise Server 12 SP2-BCL libxmltooling6 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS xmltooling-schemas as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS xmltooling as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libxmltooling6 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS xmltooling-schemas as a component of SUSE Linux Enterprise Server 12 SP4-LTSS xmltooling as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libxmltooling6 as a component of SUSE Linux Enterprise Server 12 SP5 xmltooling-schemas as a component of SUSE Linux Enterprise Server 12 SP5 xmltooling as a component of SUSE Linux Enterprise Server 12 SP5 xmltooling as a component of SUSE Linux Enterprise Server Teradata 12 SP3 libxmltooling6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 xmltooling-schemas as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 xmltooling as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 xmltooling as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libxmltooling6 as a component of SUSE OpenStack Cloud 8 xmltooling-schemas as a component of SUSE OpenStack Cloud 8 xmltooling as a component of SUSE OpenStack Cloud 8 libxmltooling6 as a component of SUSE OpenStack Cloud 9 xmltooling-schemas as a component of SUSE OpenStack Cloud 9 xmltooling as a component of SUSE OpenStack Cloud 9 libxmltooling6 as a component of SUSE OpenStack Cloud Crowbar 8 xmltooling-schemas as a component of SUSE OpenStack Cloud Crowbar 8 xmltooling as a component of SUSE OpenStack Cloud Crowbar 8 libxmltooling6 as a component of SUSE OpenStack Cloud Crowbar 9 xmltooling-schemas as a component of SUSE OpenStack Cloud Crowbar 9 xmltooling as a component of SUSE OpenStack Cloud Crowbar 9 The XMLTooling library all versions prior to V3.0.4, provided with the OpenSAML and Shibboleth Service Provider software, contains an XML parsing class. Invalid data in the XML declaration causes an exception of a type that was not handled properly in the parser class and propagates an unexpected exception type. CVE-2019-9628 SUSE Linux Enterprise High Performance Computing 12 SP5:libxmltooling6-1.5.6-3.9.1 SUSE Linux Enterprise High Performance Computing 12 SP5:xmltooling-schemas-1.5.6-3.9.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:libxmltooling7-1.6.4-3.3.2 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP4:libxmltooling7-1.6.4-3.3.2 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:libxmltooling7-1.6.4-3.3.2 SUSE Linux Enterprise Module for Server Applications 15:libxmltooling-devel-1.6.4-3.3.2 SUSE Linux Enterprise Module for Server Applications 15:libxmltooling7-1.6.4-3.3.2 SUSE Linux Enterprise Module for Server Applications 15:xmltooling-schemas-1.6.4-3.3.2 SUSE Linux Enterprise Module for Server Applications 15 SP1:libxmltooling-devel-1.6.4-3.3.2 SUSE Linux Enterprise Module for Server Applications 15 SP1:libxmltooling7-1.6.4-3.3.2 SUSE Linux Enterprise Module for Server Applications 15 SP1:xmltooling-schemas-1.6.4-3.3.2 SUSE Linux Enterprise Module for Server Applications 15 SP2:libxmltooling-devel-1.6.4-3.3.2 SUSE Linux Enterprise Module for Server Applications 15 SP2:libxmltooling7-1.6.4-3.3.2 SUSE Linux Enterprise Module for Server Applications 15 SP2:xmltooling-schemas-1.6.4-3.3.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:libxmltooling-devel-3.1.0-1.26 SUSE Linux Enterprise Module for Server Applications 15 SP3:libxmltooling-lite9-3.1.0-1.26 SUSE Linux Enterprise Module for Server Applications 15 SP3:libxmltooling9-3.1.0-1.26 SUSE Linux Enterprise Module for Server Applications 15 SP3:xmltooling-schemas-3.1.0-1.26 SUSE Linux Enterprise Module for Server Applications 15 SP4:libxmltooling-devel-3.1.0-1.26 SUSE Linux Enterprise Module for Server Applications 15 SP4:libxmltooling-lite9-3.1.0-1.26 SUSE Linux Enterprise Module for Server Applications 15 SP4:libxmltooling9-3.1.0-1.26 SUSE Linux Enterprise Module for Server Applications 15 SP4:xmltooling-schemas-3.1.0-1.26 SUSE Linux Enterprise Server 12 SP3:libxmltooling6-1.5.6-3.9.1 SUSE Linux Enterprise Server 12 SP3:xmltooling-schemas-1.5.6-3.9.1 SUSE Linux Enterprise Server 12 SP3-TERADATA:libxmltooling6-1.5.6-3.9.1 SUSE Linux Enterprise Server 12 SP3-TERADATA:xmltooling-schemas-1.5.6-3.9.1 SUSE Linux Enterprise Server 12 SP4:libxmltooling6-1.5.6-3.9.1 SUSE Linux Enterprise Server 12 SP4:xmltooling-schemas-1.5.6-3.9.1 SUSE Linux Enterprise Server 12 SP5:libxmltooling6-1.5.6-3.9.1 SUSE Linux Enterprise Server 12 SP5:xmltooling-schemas-1.5.6-3.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libxmltooling6-1.5.6-3.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xmltooling-schemas-1.5.6-3.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libxmltooling6-1.5.6-3.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xmltooling-schemas-1.5.6-3.9.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libxmltooling-devel-1.5.6-3.9.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libxmltooling-devel-1.5.6-3.9.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libxmltooling-devel-1.5.6-3.9.1 openSUSE Leap 15.0:libxmltooling-devel-1.6.4-lp150.2.3.1 openSUSE Leap 15.0:libxmltooling7-1.6.4-lp150.2.3.1 openSUSE Leap 15.0:xmltooling-schemas-1.6.4-lp150.2.3.1 openSUSE Tumbleweed:libxmltooling-devel-3.2.0-1.2 openSUSE Tumbleweed:libxmltooling-lite10-3.2.0-1.2 openSUSE Tumbleweed:libxmltooling10-3.2.0-1.2 openSUSE Tumbleweed:xmltooling-schemas-3.2.0-1.2 HPE Helion OpenStack 8:libxmltooling6 HPE Helion OpenStack 8:xmltooling HPE Helion OpenStack 8:xmltooling-schemas SUSE Linux Enterprise High Performance Computing 12 SP5:xmltooling SUSE Linux Enterprise Server 12 SP2-BCL:libxmltooling6 SUSE Linux Enterprise Server 12 SP2-BCL:xmltooling SUSE Linux Enterprise Server 12 SP2-BCL:xmltooling-schemas SUSE Linux Enterprise Server 12 SP4-ESPOS:libxmltooling6 SUSE Linux Enterprise Server 12 SP4-ESPOS:xmltooling SUSE Linux Enterprise Server 12 SP4-ESPOS:xmltooling-schemas SUSE Linux Enterprise Server 12 SP4-LTSS:libxmltooling6 SUSE Linux Enterprise Server 12 SP4-LTSS:xmltooling SUSE Linux Enterprise Server 12 SP4-LTSS:xmltooling-schemas SUSE Linux Enterprise Server 12 SP5:libxmltooling6 SUSE Linux Enterprise Server 12 SP5:xmltooling SUSE Linux Enterprise Server 12 SP5:xmltooling-schemas SUSE Linux Enterprise Server Teradata 12 SP3:xmltooling SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxmltooling6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xmltooling SUSE Linux Enterprise Server for SAP Applications 12 SP2:xmltooling-schemas SUSE Linux Enterprise Server for SAP Applications 12 SP5:xmltooling SUSE OpenStack Cloud 8:libxmltooling6 SUSE OpenStack Cloud 8:xmltooling SUSE OpenStack Cloud 8:xmltooling-schemas SUSE OpenStack Cloud 9:libxmltooling6 SUSE OpenStack Cloud 9:xmltooling SUSE OpenStack Cloud 9:xmltooling-schemas SUSE OpenStack Cloud Crowbar 8:libxmltooling6 SUSE OpenStack Cloud Crowbar 8:xmltooling SUSE OpenStack Cloud Crowbar 8:xmltooling-schemas SUSE OpenStack Cloud Crowbar 9:libxmltooling6 SUSE OpenStack Cloud Crowbar 9:xmltooling SUSE OpenStack Cloud Crowbar 9:xmltooling-schemas moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L