Lucene search
GoogleOSV:GHSA-RJ4P-7MM6-GM9JHistoryMay 13, 2022 - 1:39 a.m.
JBossWS vulnerable to uncontrolled recursion
2022-05-1301:39:29
Google
osv.dev
16
jbossws
domutils
org.jboss.ws
recursion
denial of service
xml
entity expansion
cve-2003-1564
vulnerability
EPSS
0.011
Percentile
84.5%
DOMUtils.java in org.jboss.ws:jbossws-common does not properly handle recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted request containing an XML document with a DOCTYPE declaration and a large number of nested entity references, a similar issue to CVE-2003-1564.
Related
prion
prion
Input validation
2013-07-29 13:59:00
Code injection
2011-06-21 02:52:00
Code injection
2011-06-22 21:55:00
github
github
JBossWS vulnerable to uncontrolled recursion
2022-05-13 01:39:29
SnakeYAML Entity Expansion during load operation
2021-06-04 21:37:45
nvd
nvd
cvelist
cvelist
cve
cve
ubuntucve
ubuntucve
redhat
redhat
(RHSA-2011:1302) Important: jbossws-common security update
2011-09-15 13:48:42
(RHSA-2011:1310) Important: jbossws security update
2011-09-15 14:36:38
(RHSA-2011:1312) Important: jbossws-common security update
2011-09-15 15:08:30
veracode
veracode
Denial Of Service (DoS)
2020-04-10 01:03:01
Denial Of Service (DoS)
2019-01-15 08:53:01
nessus
nessus
RHEL 4 / 5 : jbossws-common (RHSA-2011:1306)
2013-01-24 00:00:00
RHEL 4 / 5 : jbossas (RHSA-2011:1309)
2013-01-24 00:00:00
RHEL 4 / 5 / 6 : jbossws-common (RHSA-2011:1301)
2013-01-24 00:00:00
freebsd
freebsd
ejabberd -- remote denial of service vulnerability
2011-04-27 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for qt (EulerOS-SA-2020-1323)
2020-03-24 00:00:00
Huawei EulerOS: Security Advisory for qt (EulerOS-SA-2020-1669)
2020-06-16 00:00:00
Huawei EulerOS: Security Advisory for qt (EulerOS-SA-2020-1299)
2020-03-23 00:00:00
debiancve
debiancve
osv
osv
CVE-2017-18640
2019-12-12 03:15:10
SnakeYAML Entity Expansion during load operation
2021-06-04 21:37:45
redhatcve
redhatcve
CVE-2017-18640
2020-04-08 21:02:33
centos
centos
libxml2 security update
2008-09-12 01:23:56
securityvulns
securityvulns
[ MDVSA-2009:221 ] libneon0.27
2009-08-25 00:00:00