CVE-2013-4517
Published Jan 11, 2014
Last updated a year ago
Overview
- Description
- Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.
- Source
- secalert@redhat.com
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
- nvd@nist.gov
- CWE-399
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apache:santuario_xml_security_for_java:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C21BB34-F64E-41C8-8D0E-F4E0968F4BAC",
"versionEndIncluding": "1.5.5"
},
{
"criteria": "cpe:2.3:a:apache:santuario_xml_security_for_java:1.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB81C841-7FC2-4F11-90EF-11EAB7C2D0CD"
},
{
"criteria": "cpe:2.3:a:apache:santuario_xml_security_for_java:1.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95FAD05B-A2EE-46FA-895D-364D2D0DF473"
},
{
"criteria": "cpe:2.3:a:apache:santuario_xml_security_for_java:1.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8DC49560-85DA-40DE-A7AF-D45E879DAB4A"
},
{
"criteria": "cpe:2.3:a:apache:santuario_xml_security_for_java:1.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F80F5D65-33D7-44F5-9EDB-F86FC0B3A298"
},
{
"criteria": "cpe:2.3:a:apache:santuario_xml_security_for_java:1.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B5963949-80B4-43A3-B355-3477975AB214"
},
{
"criteria": "cpe:2.3:a:apache:santuario_xml_security_for_java:1.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F4385554-5F5D-4278-B550-9A6D69B86F86"
},
{
"criteria": "cpe:2.3:a:apache:santuario_xml_security_for_java:1.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "571B1A08-369B-4761-8FDE-698DA94DCE78"
},
{
"criteria": "cpe:2.3:a:apache:santuario_xml_security_for_java:1.4.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFE686EE-8409-474B-8B62-571D4A384B88"
},
{
"criteria": "cpe:2.3:a:apache:santuario_xml_security_for_java:1.4.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D491709B-6D62-4FAD-A5EE-FFCB0AEB35C5"
},
{
"criteria": "cpe:2.3:a:apache:santuario_xml_security_for_java:1.4.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4695D6DE-F785-4372-BBC0-04E5D4AA52A0"
},
{
"criteria": "cpe:2.3:a:apache:santuario_xml_security_for_java:1.4.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3DB7492B-1D95-48D0-9892-C8A47FD15414"
},
{
"criteria": "cpe:2.3:a:apache:santuario_xml_security_for_java:1.4.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "368D164A-5BED-471C-967D-694B46D4F832"
},
{
"criteria": "cpe:2.3:a:apache:santuario_xml_security_for_java:1.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D8837A5-0840-44D3-BD7D-335611BDF64D"
},
{
"criteria": "cpe:2.3:a:apache:santuario_xml_security_for_java:1.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FD0057FF-4F75-4F35-BD15-1093D22AFE04"
},
{
"criteria": "cpe:2.3:a:apache:santuario_xml_security_for_java:1.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C65E4B50-5F5C-4F04-8CF8-4D1CCA2BF427"
},
{
"criteria": "cpe:2.3:a:apache:santuario_xml_security_for_java:1.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5889CDAF-4F5A-42D9-A6CE-7F7A4222ECB4"
},
{
"criteria": "cpe:2.3:a:apache:santuario_xml_security_for_java:1.5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EDD00EBA-1B65-4245-9A3D-D389830450BB"
}
],
"operator": "OR"
}
]
}
]