CVE-2023-37536 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2023-37536 Interim 1 2 2023-10-16T23:09:21Z current 2023-10-12T13:45:13Z 2023-10-16T23:09:21Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2023-37536 An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 12 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Manager Proxy 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Retail Branch Server 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Server 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 libxerces-c-3_1 libxerces-c-3_1-32bit libxerces-c-3_2 libxerces-c-devel xerces-c libxerces-c-3_1 as a component of SUSE Enterprise Storage 7.1 libxerces-c-3_1-32bit as a component of SUSE Enterprise Storage 7.1 libxerces-c-3_2 as a component of SUSE Enterprise Storage 7.1 libxerces-c-devel as a component of SUSE Enterprise Storage 7.1 xerces-c as a component of SUSE Enterprise Storage 7.1 xerces-c as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libxerces-c-3_1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libxerces-c-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS xerces-c as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libxerces-c-3_1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libxerces-c-3_1-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libxerces-c-3_2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libxerces-c-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS xerces-c as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libxerces-c-3_1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libxerces-c-3_1-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libxerces-c-3_2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libxerces-c-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS xerces-c as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libxerces-c-3_2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libxerces-c-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 xerces-c as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libxerces-c-3_2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libxerces-c-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 xerces-c as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libxerces-c-3_1 as a component of SUSE Linux Enterprise Real Time 15 SP3 libxerces-c-3_1-32bit as a component of SUSE Linux Enterprise Real Time 15 SP3 libxerces-c-3_2 as a component of SUSE Linux Enterprise Real Time 15 SP3 libxerces-c-devel as a component of SUSE Linux Enterprise Real Time 15 SP3 xerces-c as a component of SUSE Linux Enterprise Real Time 15 SP3 libxerces-c-3_1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libxerces-c-3_1-32bit as a component of SUSE Linux Enterprise Server 12 SP2-LTSS xerces-c as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libxerces-c-3_1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libxerces-c-3_1-32bit as a component of SUSE Linux Enterprise Server 12 SP4-LTSS xerces-c as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libxerces-c-3_1 as a component of SUSE Linux Enterprise Server 12 SP5 libxerces-c-3_1-32bit as a component of SUSE Linux Enterprise Server 12 SP5 xerces-c as a component of SUSE Linux Enterprise Server 12 SP5 libxerces-c-3_1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libxerces-c-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS xerces-c as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libxerces-c-3_1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libxerces-c-3_1-32bit as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libxerces-c-3_2 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libxerces-c-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS xerces-c as a component of SUSE Linux Enterprise Server 15 SP3-LTSS xerces-c as a component of SUSE Linux Enterprise Server Teradata 12 SP3 xerces-c as a component of SUSE Linux Enterprise Server Teradata 12 SP3-LTSS libxerces-c-3_1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libxerces-c-3_1-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 xerces-c as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libxerces-c-3_1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libxerces-c-3_1-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xerces-c as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xerces-c as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libxerces-c-3_1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libxerces-c-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 xerces-c as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libxerces-c-3_1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libxerces-c-3_1-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libxerces-c-3_2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libxerces-c-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 xerces-c as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libxerces-c-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 xerces-c as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libxerces-c-3_1 as a component of SUSE Manager Proxy 4.2 libxerces-c-3_1-32bit as a component of SUSE Manager Proxy 4.2 libxerces-c-3_2 as a component of SUSE Manager Proxy 4.2 libxerces-c-devel as a component of SUSE Manager Proxy 4.2 xerces-c as a component of SUSE Manager Proxy 4.2 libxerces-c-3_1 as a component of SUSE Manager Retail Branch Server 4.2 libxerces-c-3_1-32bit as a component of SUSE Manager Retail Branch Server 4.2 libxerces-c-3_2 as a component of SUSE Manager Retail Branch Server 4.2 libxerces-c-devel as a component of SUSE Manager Retail Branch Server 4.2 xerces-c as a component of SUSE Manager Retail Branch Server 4.2 libxerces-c-3_1 as a component of SUSE Manager Server 4.2 libxerces-c-3_1-32bit as a component of SUSE Manager Server 4.2 libxerces-c-3_2 as a component of SUSE Manager Server 4.2 libxerces-c-devel as a component of SUSE Manager Server 4.2 xerces-c as a component of SUSE Manager Server 4.2 libxerces-c-3_1 as a component of SUSE OpenStack Cloud 9 libxerces-c-3_1-32bit as a component of SUSE OpenStack Cloud 9 xerces-c as a component of SUSE OpenStack Cloud 9 libxerces-c-3_1 as a component of SUSE OpenStack Cloud Crowbar 9 libxerces-c-3_1-32bit as a component of SUSE OpenStack Cloud Crowbar 9 xerces-c as a component of SUSE OpenStack Cloud Crowbar 9 An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request. CVE-2023-37536 SUSE Enterprise Storage 7.1:libxerces-c-3_1 SUSE Enterprise Storage 7.1:libxerces-c-3_1-32bit SUSE Enterprise Storage 7.1:libxerces-c-3_2 SUSE Enterprise Storage 7.1:libxerces-c-devel SUSE Enterprise Storage 7.1:xerces-c SUSE Linux Enterprise High Performance Computing 12 SP5:xerces-c SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libxerces-c-3_1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libxerces-c-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:xerces-c SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libxerces-c-3_1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libxerces-c-3_1-32bit SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libxerces-c-3_2 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libxerces-c-devel SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:xerces-c SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libxerces-c-3_1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libxerces-c-3_1-32bit SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libxerces-c-3_2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libxerces-c-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xerces-c SUSE Linux Enterprise Module for Basesystem 15 SP4:libxerces-c-3_2 SUSE Linux Enterprise Module for Basesystem 15 SP4:libxerces-c-devel SUSE Linux Enterprise Module for Basesystem 15 SP4:xerces-c SUSE Linux Enterprise Module for Basesystem 15 SP5:libxerces-c-3_2 SUSE Linux Enterprise Module for Basesystem 15 SP5:libxerces-c-devel SUSE Linux Enterprise Module for Basesystem 15 SP5:xerces-c SUSE Linux Enterprise Real Time 15 SP3:libxerces-c-3_1 SUSE Linux Enterprise Real Time 15 SP3:libxerces-c-3_1-32bit SUSE Linux Enterprise Real Time 15 SP3:libxerces-c-3_2 SUSE Linux Enterprise Real Time 15 SP3:libxerces-c-devel SUSE Linux Enterprise Real Time 15 SP3:xerces-c SUSE Linux Enterprise Server 12 SP2-LTSS:libxerces-c-3_1 SUSE Linux Enterprise Server 12 SP2-LTSS:libxerces-c-3_1-32bit SUSE Linux Enterprise Server 12 SP2-LTSS:xerces-c SUSE Linux Enterprise Server 12 SP4-LTSS:libxerces-c-3_1 SUSE Linux Enterprise Server 12 SP4-LTSS:libxerces-c-3_1-32bit SUSE Linux Enterprise Server 12 SP4-LTSS:xerces-c SUSE Linux Enterprise Server 12 SP5:libxerces-c-3_1 SUSE Linux Enterprise Server 12 SP5:libxerces-c-3_1-32bit SUSE Linux Enterprise Server 12 SP5:xerces-c SUSE Linux Enterprise Server 15 SP2-LTSS:libxerces-c-3_1 SUSE Linux Enterprise Server 15 SP2-LTSS:libxerces-c-devel SUSE Linux Enterprise Server 15 SP2-LTSS:xerces-c SUSE Linux Enterprise Server 15 SP3-LTSS:libxerces-c-3_1 SUSE Linux Enterprise Server 15 SP3-LTSS:libxerces-c-3_1-32bit SUSE Linux Enterprise Server 15 SP3-LTSS:libxerces-c-3_2 SUSE Linux Enterprise Server 15 SP3-LTSS:libxerces-c-devel SUSE Linux Enterprise Server 15 SP3-LTSS:xerces-c SUSE Linux Enterprise Server Teradata 12 SP3-LTSS:xerces-c SUSE Linux Enterprise Server Teradata 12 SP3:xerces-c SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxerces-c-3_1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxerces-c-3_1-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP2:xerces-c SUSE Linux Enterprise Server for SAP Applications 12 SP4:libxerces-c-3_1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libxerces-c-3_1-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP4:xerces-c SUSE Linux Enterprise Server for SAP Applications 12 SP5:xerces-c SUSE Linux Enterprise Server for SAP Applications 15 SP2:libxerces-c-3_1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libxerces-c-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:xerces-c SUSE Linux Enterprise Server for SAP Applications 15 SP3:libxerces-c-3_1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libxerces-c-3_1-32bit SUSE Linux Enterprise Server for SAP Applications 15 SP3:libxerces-c-3_2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libxerces-c-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:xerces-c SUSE Linux Enterprise Software Development Kit 12 SP5:libxerces-c-devel SUSE Linux Enterprise Software Development Kit 12 SP5:xerces-c SUSE Manager Proxy 4.2:libxerces-c-3_1 SUSE Manager Proxy 4.2:libxerces-c-3_1-32bit SUSE Manager Proxy 4.2:libxerces-c-3_2 SUSE Manager Proxy 4.2:libxerces-c-devel SUSE Manager Proxy 4.2:xerces-c SUSE Manager Retail Branch Server 4.2:libxerces-c-3_1 SUSE Manager Retail Branch Server 4.2:libxerces-c-3_1-32bit SUSE Manager Retail Branch Server 4.2:libxerces-c-3_2 SUSE Manager Retail Branch Server 4.2:libxerces-c-devel SUSE Manager Retail Branch Server 4.2:xerces-c SUSE Manager Server 4.2:libxerces-c-3_1 SUSE Manager Server 4.2:libxerces-c-3_1-32bit SUSE Manager Server 4.2:libxerces-c-3_2 SUSE Manager Server 4.2:libxerces-c-devel SUSE Manager Server 4.2:xerces-c SUSE OpenStack Cloud 9:libxerces-c-3_1 SUSE OpenStack Cloud 9:libxerces-c-3_1-32bit SUSE OpenStack Cloud 9:xerces-c SUSE OpenStack Cloud Crowbar 9:libxerces-c-3_1 SUSE OpenStack Cloud Crowbar 9:libxerces-c-3_1-32bit SUSE OpenStack Cloud Crowbar 9:xerces-c important 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:H