[
https://issues.apache.org/jira/browse/XERCESJ-1748?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17574396#comment-17574396
]
Gary D. Gregory commented on XERCESJ-1748:
------------------------------------------
Hi [~albert.wang]
Since you created this ticket, it'll be up to you to follow up on whatever
broken link there is IMO.
> sonatype-2017-0348 - xerces:xercesImpl - Denial of Service (DoS)
> ----------------------------------------------------------------
>
> Key: XERCESJ-1748
> URL: https://issues.apache.org/jira/browse/XERCESJ-1748
> Project: Xerces2-J
> Issue Type: Bug
> Reporter: Albert Wang
> Priority: Major
>
> OSSIndex published a vulnerability in xercesImpl:xerces:2.12.2.
>
> _*[[sonatype-2017-0348] CWE-833:
> Deadlock|https://ossindex.sonatype.org/vulnerability/sonatype-2017-0348]*_
> _Description_
> _sonatype-2017-0348 - xerces:xercesImpl - Denial of Service (DoS)_
> _The software contains multiple threads or executable segments that are
> waiting for each other to release a necessary lock, resulting in deadlock._
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
