GHSA-4P4W-6H54-G885 Improper Input Validation in Apache Santuario XML Security

🗓️ 13 May 2022 01:05:55Reported by GoogleType

osv🔗 osv.dev👁 3 Views

Improper input validation in Santuario XML Security for Java before 1.5.6 enables denial of service via crafted document type definitions.

Reporter	Title	Published	Views	Family All 67
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache XML Security for Java affects IBM Tivoli Business Service Manager (CVE-2013-4517, CVE-2013-2172, CVE-2009-0217, CVE-2021-40690)	6 Oct 202204:39	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of Service attack possible on Cúram instances using Apache Santuario (CVE-2013-4517)	2 Jul 201812:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to multiple security vulnerabilities	18 Feb 201914:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator vulnerable due to Apache Santuario XML Security for Java (CVE-2013-4517, CVE-2013-2172)	14 Oct 202221:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache Santuario XML Security for Java affect IBM InfoSphere Information Server	14 Oct 202222:24	–	ibm
BDU FSTEC	The platform’s vulnerability related to ensuring security standards for XML Apache Santuario XML Security for Java allows attackers to trigger a service failure.	7 Nov 202200:00	–	bdu_fstec
Broadcom	BSA-2017-471	17 Nov 201700:00	–	broadcom
Check Point Advisories	Apache Santuario XML Security for Java DTD Denial of Service (CVE-2013-4517)	13 Mar 201400:00	–	checkpoint_advisories
CVE	CVE-2013-4517	11 Jan 201401:00	–	cve
Cvelist	CVE-2013-4517	11 Jan 201401:00	–	cvelist

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-4517
github	www.github.com/apache/santuario-java/commit/a09b9042f7759d094f2d49f40fc7bcf145164b25
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/89891
lists	www.lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3@%3Ccommits.santuario.apache.org%3E
lists	www.lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd@%3Ccommits.santuario.apache.org%3E
tenable	www.tenable.com/security/tns-2018-15
packetstormsecurity	www.packetstormsecurity.com/files/124554/Java-XML-Signature-Denial-Of-Service-Attack.html
rhn	www.rhn.redhat.com/errata/RHSA-2014-0170.html
rhn	www.rhn.redhat.com/errata/RHSA-2014-0171.html
rhn	www.rhn.redhat.com/errata/RHSA-2014-0172.html

30 Nov 2024 05:51Current

7.2High risk

Vulners AI Score7.2

CVSS 24.3

EPSS0.08863