CVE:CVE-2018-1311
CNNVD:CNNVD-201912-755
Apache Xerces-C是美国阿帕奇（Apache）软件基金会的一款使用C++语言编写的XML解析器。
Apache Xerces-C 3.0.0版本至3.2.2版本中的XML解析器在扫描外部DTD时存在资源管理错误漏洞。远程攻击者可借助特制文件利用该漏洞执行任意代码或导致拒绝服务。
solution:Upgrade apache xerces-c++ to a higher version than 3.2.3,and avoid the version [3.0.0,3.2.3]; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_eus to a higher version than 7.7,and avoid the version 7.7; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.7,and avoid the version 7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.7,and avoid the version 7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade oracle goldengate to a higher version than 21.4.0.0.0,and avoid the version (,21.4.0.0.0)