Lucene search

K

GoogleOSV:GHSA-6HVF-XVWM-VRW4

HistoryMay 13, 2022 - 1:02 a.m.

XMLTooling Library Incorrectly Handles Some Exceptions

2022-05-1301:02:16

Google

osv.dev

12

xmltooling library

opensaml

shibboleth service provider

software

xml parsing

exception handling

EPSS

0.025

Percentile

90.3%

The XMLTooling library all versions prior to V3.0.4, provided with the OpenSAML and Shibboleth Service Provider software, contains an XML parsing class. Invalid data in the XML declaration causes an exception of a type that was not handled properly in the parser class and propagates an unexpected exception type.

References

lists.opensuse.org/opensuse-security-announce/2019-04/msg00079.html

lists.opensuse.org/opensuse-security-announce/2019-04/msg00095.html

bugs.launchpad.net/ubuntu/+source/xmltooling/+bug/1819912

nvd.nist.gov/vuln/detail/CVE-2019-9628

security.netapp.com/advisory/ntap-20190611-0003/

shibboleth.net/community/advisories/secadv_20190311.txt

usn.ubuntu.com/3921-1/

wiki.shibboleth.net/confluence/display/SP3/SecurityAdvisories

EPSS

0.025

Percentile

90.3%

Related for OSV:GHSA-6HVF-XVWM-VRW4

openvas7 debiancve1 github1 nessus7 redhatcve1 osv2 cvelist1 cve1 debian2 nvd1 ubuntu1 suse2 ubuntucve1 prion1