Gentoo: GLSA-202304-05 Important: Vulnerability in FOO Library

Gentoo Linux Security Advisory GLSA 200903-19 https://security.gentoo.org/ Severity: Normal Title: Xerces-C++: Denial of Service Date: March 09, 2009 Bugs: #240496 ID: 200903-19

Synopsis ======= An error in Xerces-C++ allows for a Denial of Service via malicious XML schema files.
Background ========= Xerces-C++ is a validating XML parser written in a portable subset of C++.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-libs/xerces-c < 3.0.0-r1 >= 3.0.0-r1
========== Frank Rast reported that the XML parser in Xerces-C++ does not correctly handle an XML schema definition with a large maxOccurs value, which triggers excessive memory consumption during the v...