CVE-2019-5427

Published Apr 22, 2019

Last updated a year ago

Overview

Description: c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration.
Source: support@hackerone.com
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.5
Impact score: 3.6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity: HIGH

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

nvd@nist.gov: CWE-776
support@hackerone.com: CWE-776

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:mchange:c3p0:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2A18C00D-54D8-4B73-89B7-24E7DDF017E7",
            "versionEndExcluding": "0.9.5.2"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D100F7CE-FC64-4CC6-852A-6136D72DA419"
          },
          {
            "criteria": "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "97A4B8DF-58DA-4AB6-A1F9-331B36409BA3"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:oracle:communications_ip_service_activator:7.3.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DE48E0FE-5931-441C-B4FF-253BD9C48186"
          },
          {
            "criteria": "cpe:2.3:a:oracle:communications_ip_service_activator:7.4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DE7A60DB-A287-4E61-8131-B6314007191B"
          },
          {
            "criteria": "cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "11B0C37E-D7C7-45F2-A8D8-5A3B1B191430",
            "versionEndIncluding": "8.2.2",
            "versionStartIncluding": "8.2.0"
          },
          {
            "criteria": "cpe:2.3:a:oracle:documaker:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0A3136AE-8744-4B13-BCA3-9FDD9E71DF02",
            "versionEndIncluding": "12.6.6",
            "versionStartIncluding": "12.6.0"
          },
          {
            "criteria": "cpe:2.3:a:oracle:enterprise_manager_base_platform:13.2.1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "66916DEB-ACE1-44E0-9535-10B3E03347AC"
          },
          {
            "criteria": "cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B095CC03-7077-4A58-AB25-CC5380CDCE5A"
          },
          {
            "criteria": "cpe:2.3:a:oracle:flexcube_private_banking:12.0.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6762F207-93C7-4363-B2F9-7A7C6F8AF993"
          },
          {
            "criteria": "cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1B74B912-152D-4F38-9FC1-741D6D0B27FC"
          },
          {
            "criteria": "cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.1.2.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DED59B62-C9BF-4C0E-B351-3884E8441655"
          },
          {
            "criteria": "cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "11DA6839-849D-4CEF-85F3-38FE75E07183"
          },
          {
            "criteria": "cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BCE78490-A4BE-40BD-8C72-0A4526BBD4A4"
          },
          {
            "criteria": "cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "55AE3629-4A66-49E4-A33D-6D81CC94962F"
          },
          {
            "criteria": "cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4CB39A1A-AD29-45DD-9EB5-5E2053A01B9A"
          },
          {
            "criteria": "cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "27C26705-6D1F-4D5E-B64D-B479108154FF"
          },
          {
            "criteria": "cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D551CAB1-4312-44AA-BDA8-A030817E153A"
          },
          {
            "criteria": "cpe:2.3:a:oracle:webcenter_sites:12.2.1.4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "174A6D2E-E42E-4C92-A194-C6A820CD7EF4"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 3.1

CVSS 2.0

Weaknesses

Configurations

References