Rapid7 Vulnerability & Exploit Database

SUSE Linux Security Vulnerability: CVE-2009-2625

Free InsightVM Trial No credit card necessary
Watch Demo See how it all works
Back to Search

SUSE Linux Security Vulnerability: CVE-2009-2625

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
08/06/2009
Created
07/25/2018
Added
02/17/2015
Modified
07/04/2017

Description

XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.

Solution(s)

  • suse-upgrade-ibmjava2-jre
  • suse-upgrade-ibmjava2-sdk
  • suse-upgrade-ibmjava5-jre
  • suse-upgrade-ibmjava5-sdk
  • suse-upgrade-java-1_4_2-ibm
  • suse-upgrade-java-1_4_2-ibm-devel
  • suse-upgrade-java-1_4_2-ibm-jdbc
  • suse-upgrade-java-1_4_2-ibm-plugin
  • suse-upgrade-java-1_6_0-openjdk
  • suse-upgrade-java-1_6_0-openjdk-demo
  • suse-upgrade-java-1_6_0-openjdk-devel
  • suse-upgrade-java-1_6_0-openjdk-javadoc
  • suse-upgrade-java-1_6_0-openjdk-plugin
  • suse-upgrade-java-1_6_0-openjdk-src
  • suse-upgrade-kompozer
  • suse-upgrade-libexpat0
  • suse-upgrade-libexpat0-32bit
  • suse-upgrade-libexpat0-64bit
  • suse-upgrade-libicecore
  • suse-upgrade-libicecore-devel
  • suse-upgrade-libiiclib
  • suse-upgrade-libiiclib-devel
  • suse-upgrade-libiksemel
  • suse-upgrade-libiksemel-devel
  • suse-upgrade-libnetlib
  • suse-upgrade-libnetlib-devel
  • suse-upgrade-libpython2_6-1_0
  • suse-upgrade-libpython2_6-1_0-32bit
  • suse-upgrade-libpython2_6-1_0-64bit
  • suse-upgrade-libpython2_6-1_0-x86
  • suse-upgrade-libxmlrpc
  • suse-upgrade-libxmlrpc-devel
  • suse-upgrade-python
  • suse-upgrade-python-32bit
  • suse-upgrade-python-64bit
  • suse-upgrade-python-base
  • suse-upgrade-python-base-32bit
  • suse-upgrade-python-base-64bit
  • suse-upgrade-python-base-x86
  • suse-upgrade-python-curses
  • suse-upgrade-python-demo
  • suse-upgrade-python-devel
  • suse-upgrade-python-doc
  • suse-upgrade-python-doc-pdf
  • suse-upgrade-python-gdbm
  • suse-upgrade-python-idle
  • suse-upgrade-python-mpz
  • suse-upgrade-python-tk
  • suse-upgrade-python-x86
  • suse-upgrade-python-xml
  • suse-upgrade-sap-aio-release
  • suse-upgrade-xerces-j2
  • suse-upgrade-xerces-j2-demo
  • suse-upgrade-xerces-j2-javadoc-apis
  • suse-upgrade-xerces-j2-javadoc-dom3
  • suse-upgrade-xerces-j2-javadoc-impl
  • suse-upgrade-xerces-j2-javadoc-other
  • suse-upgrade-xerces-j2-javadoc-xni
  • suse-upgrade-xerces-j2-scripts
  • suse-upgrade-xerces-j2-xml-apis
  • suse-upgrade-xerces-j2-xml-resolver
  • suse-upgrade-xmlrpc-c
  • suse-upgrade-xmlrpc-c-devel

References

  • https://attackerkb.com/topics/cve-2009-2625
  • APPLE-SA-2009-09-03-1
  • 35958
  • TA09-294A
  • TA10-012A
  • CVE - 2009-2625
  • DSA-1984
  • OVAL8520
  • OVAL9356
  • RHSA-2009:1199
  • RHSA-2009:1200
  • RHSA-2009:1201
  • RHSA-2009:1615
  • RHSA-2009:1636
  • RHSA-2009:1637
  • RHSA-2009:1649
  • RHSA-2009:1650
  • RHSA-2011:0858
  • RHSA-2012:1232
  • RHSA-2012:1537
  • SUSE-SA:2009:053
View more

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;