Heap overflow

2013-08-2022:55:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.1%

JSON

Heap-based buffer overflow in the XML Signature Reference functionality in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.2 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed XPointer expressions. NOTE: this is due to an incorrect fix for CVE-2013-2154.

CPENameOperatorVersion
xml_security_for_c\\+\\+eq1.6.0
xml_security_for_c\\+\\+eq1.1.0
xml_security_for_c\\+\\+eq1.6.1
xml_security_for_c\\+\\+eq1.2.1
xml_security_for_c\\+\\+eq1.5.1
xml_security_for_c\\+\\+eq1.5.0
xml_security_for_c\\+\\+eq0.2.0
xml_security_for_c\\+\\+eq1.3.0
xml_security_for_c\\+\\+eq1.7.0
xml_security_for_c\\+\\+le1.7.1

Name	Operator	Version
xml_security_for_c\\+\\+	eq	1.6.0
xml_security_for_c\\+\\+	eq	1.1.0
xml_security_for_c\\+\\+	eq	1.6.1
xml_security_for_c\\+\\+	eq	1.2.1
xml_security_for_c\\+\\+	eq	1.5.1
xml_security_for_c\\+\\+	eq	1.5.0
xml_security_for_c\\+\\+	eq	0.2.0
xml_security_for_c\\+\\+	eq	1.3.0
xml_security_for_c\\+\\+	eq	1.7.0
xml_security_for_c\\+\\+	le	1.7.1