Lucene search

K
mageiaGentoo FoundationMGASA-2014-0001
HistoryJan 06, 2014 - 4:49 a.m.

Updated cxf, wss4j, and jacorb packages fix security vulnerability

2014-01-0604:49:54
Gentoo Foundation
advisories.mageia.org
5

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.045 Low

EPSS

Percentile

92.3%

Multiple denial of service flaws were found in the way StAX parser implementation of Apache CXF, an open-source web services framework, performed processing of certain XML files. If a web service application utilized the services of the StAX parser, a remote attacker could provide a specially-crafted XML file that, when processed by the application would lead to excessive system resources (CPU cycles, memory) consumption by that application (CVE-2013-2160).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchcxf< 2.6.9-1cxf-2.6.9-1.mga3
Mageia3noarchjacorb< 2.3.1-4jacorb-2.3.1-4.mga3
Mageia3noarchwss4j< 1.6.10-1wss4j-1.6.10-1.mga3

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.045 Low

EPSS

Percentile

92.3%