PatchTheCVEmarklogic vulnerabilities and fixes
Recent CVEs affecting marklogic, with upgrade or downgrade steps. 11 tracked.
marklogic has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-09-07. Highest priority: CVE-2016-8383 (score 56/100).
- CVE-2017-2799 HIGH 8.3 DOWNGRADE An exploitable heap corruption vulnerability exists in the AddSst functionality of Antenna House DMC HTMLFilte
- CVE-2017-2798 HIGH 8.3 DOWNGRADE An exploitable heap corruption vulnerability exists in the GetIndexArray functionality of Antenna House DMC HT
- CVE-2017-2797 HIGH 8.3 DOWNGRADE An exploitable heap overflow vulnerability exists in the ParseEnvironment functionality of AntennaHouse DMC HT
- CVE-2017-2795 HIGH 8.3 DOWNGRADE An exploitable heap corruption vulnerability exists in the Txo functionality of Antenna House DMC HTMLFilter a
- CVE-2017-2794 HIGH 8.3 DOWNGRADE An exploitable stack-based buffer overflow vulnerability exists in the DHFSummary functionality of AntennaHous
- CVE-2017-2793 HIGH 8.3 DOWNGRADE An exploitable heap corruption vulnerability exists in the UnCompressUnicode functionality of Antenna House DM
- CVE-2017-2792 HIGH 8.3 DOWNGRADE An exploitable heap corruption vulnerability exists in the iBldDirInfo functionality of Antenna House DMC HTML
- CVE-2017-2783 HIGH 8.3 DOWNGRADE An exploitable heap corruption vulnerability exists in the FillRowFormat functionality of Antenna House DMC HT
- CVE-2016-8384 HIGH 8.8 DOWNGRADE An exploitable heap corruption vulnerability exists in the DHFSummary functionality of AntennaHouse DMC HTMLFi
- CVE-2016-8383 HIGH 8.8 DOWNGRADE An exploitable heap corruption vulnerability exists in the Doc_GetFontTable functionality of AntennaHouse DMC
- CVE-2016-8382 HIGH 8.3 DOWNGRADE An exploitable heap corruption vulnerability exists in the Doc_SetSummary functionality of AntennaHouse DMC HT
FAQ
How do I fix marklogic vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is marklogic being exploited right now?
None of the tracked marklogic CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which marklogic CVE should I patch first?
CVE-2016-8383 currently ranks highest (56/100): An exploitable heap corruption vulnerability exists in the Doc_GetFontTable functionality of AntennaHouse DMC .