CVE-2014-1626

2014-01-2601:55:20

Debian Security Bug Tracker

security-tracker.debian.org

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

64.7%

JSON

XML External Entity (XXE) vulnerability in MARC::File::XML module before 1.0.2 for Perl, as used in Evergreen, Koha, perl4lib, and possibly other products, allows context-dependent attackers to read arbitrary files via a crafted XML file.

OSVersionArchitecturePackageVersionFilename
Debian12alllibmarc-xml-perl< 1.0.2-1libmarc-xml-perl_1.0.2-1_all.deb
Debian11alllibmarc-xml-perl< 1.0.2-1libmarc-xml-perl_1.0.2-1_all.deb
Debian10alllibmarc-xml-perl< 1.0.2-1libmarc-xml-perl_1.0.2-1_all.deb
Debian999alllibmarc-xml-perl< 1.0.2-1libmarc-xml-perl_1.0.2-1_all.deb
Debian13alllibmarc-xml-perl< 1.0.2-1libmarc-xml-perl_1.0.2-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libmarc-xml-perl	< 1.0.2-1	libmarc-xml-perl_1.0.2-1_all.deb
Debian	11	all	libmarc-xml-perl	< 1.0.2-1	libmarc-xml-perl_1.0.2-1_all.deb
Debian	10	all	libmarc-xml-perl	< 1.0.2-1	libmarc-xml-perl_1.0.2-1_all.deb
Debian	999	all	libmarc-xml-perl	< 1.0.2-1	libmarc-xml-perl_1.0.2-1_all.deb
Debian	13	all	libmarc-xml-perl	< 1.0.2-1	libmarc-xml-perl_1.0.2-1_all.deb