CVE-2019-9658
- State
- Published
- Severity
- Not scored
- Published
- Mar 11, 2019
- Updated
- Aug 4, 2024
- Reserved
- Mar 10, 2019
Description
Checkstyle before 8.18 loads external DTDs by default.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://github.com/checkstyle/checkstyle/pull/6476
- https://github.com/checkstyle/checkstyle/issues/6474
- https://github.com/checkstyle/checkstyle/issues/6478
- https://checkstyle.org/releasenotes.html#Release_8.18
- [james-server-dev] 20190318 [james-project] 01/03: JAMES-2693 Update com.puppycrawl.tools:checkstyle to respond to CVE-2019-9658mailing-list
- FEDORA-2019-a3f67e2364vendor-advisory
- FEDORA-2019-e4405b4c9fvendor-advisory
- [debian-lts-announce] 20190428 [SECURITY] [DLA 1768-1] checkstyle security updatemailing-list
- FEDORA-2019-4696630d6fvendor-advisory
- [accumulo-notifications] 20190612 [GitHub] [accumulo-testing] milleruntime opened a new pull request #80: Update checkstylemailing-list
- [fluo-notifications] 20190814 [GitHub] [fluo] ctubbsii merged pull request #1073: Update checkstyle (CVE-2019-9658)mailing-list
- [fluo-commits] 20190814 [fluo] branch fluo-parent updated: Update checkstyle (CVE-2019-9658) (#1073)mailing-list
- [fluo-notifications] 20190815 Build failed in Jenkins: Fluo Parent Pom #101mailing-list
- [nifi-commits] 20200930 svn commit: r1882168 - /nifi/site/trunk/security.htmlmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.