Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-3192HistoryJul 12, 2016 - 7:59 p.m.
CVE-2015-3192
2016-07-1219:59:00
Debian Security Bug Tracker
security-tracker.debian.org
11
0.03 Low
EPSS
Percentile
90.9%
Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to cause a denial of service (memory consumption and out-of-memory errors) via a crafted XML file.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libspring-java | < 4.1.9-1 | libspring-java_4.1.9-1_all.deb |
| Debian | 11 | all | libspring-java | < 4.1.9-1 | libspring-java_4.1.9-1_all.deb |
| Debian | 10 | all | libspring-java | < 4.1.9-1 | libspring-java_4.1.9-1_all.deb |
| Debian | 999 | all | libspring-java | < 4.1.9-1 | libspring-java_4.1.9-1_all.deb |
| Debian | 13 | all | libspring-java | < 4.1.9-1 | libspring-java_4.1.9-1_all.deb |
Related
nessus
nessus
Fedora 22 : springframework-3.2.14-1.fc22 (2015-11165)
2015-07-16 00:00:00
Fedora 21 : springframework-3.2.14-1.fc21 (2015-11184)
2015-07-16 00:00:00
Debian DLA-1853-1 : libspring-java security update
2019-07-15 00:00:00
cvelist
cvelist
CVE-2015-3192
2016-07-12 19:00:00
prion
prion
Design/Logic Flaw
2016-07-12 19:59:00
osv
osv
Pivotal Spring Framework DoS Attack with XML Input
2018-10-17 20:29:12
libspring-java - security update
2019-07-13 00:00:00
libspring-java vulnerabilities
2021-03-17 17:02:03
redhat
redhat
cve
cve
CVE-2015-3192
2016-07-12 19:59:00
fedora
fedora
[SECURITY] Fedora 21 Update: springframework-3.2.14-1.fc21
2015-07-16 02:35:19
[SECURITY] Fedora 22 Update: springframework-3.2.14-1.fc22
2015-07-16 02:35:44
github
github
Pivotal Spring Framework DoS Attack with XML Input
2018-10-17 20:29:12
mageia
mageia
Updated springframework package fixes security vulnerability
2015-07-29 00:01:59
ubuntucve
ubuntucve
CVE-2015-3192
2016-07-12 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0294)
2015-10-15 00:00:00
Fedora Update for springframework FEDORA-2015-11165
2015-07-16 00:00:00
Fedora Update for springframework FEDORA-2015-11184
2015-07-16 00:00:00
ibm
ibm
debian
debian
[SECURITY] [DLA 1853-1] libspring-java security update
2019-07-13 21:21:06
ubuntu
ubuntu
Spring Framework vulnerabilities
2021-03-17 00:00:00