Java: Java XML Signature DoS Attack

🗓️ 20 Feb 2014 17:22:15Reported by RedHatType

Java XML Signature DoS via DTDs in Apache Santuario XML Security for Java with secure validation causes memory exhaustion.

Reporter	Title	Published	Views	Family All 67
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache XML Security for Java affects IBM Tivoli Business Service Manager (CVE-2013-4517, CVE-2013-2172, CVE-2009-0217, CVE-2021-40690)	6 Oct 202204:39	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of Service attack possible on Cúram instances using Apache Santuario (CVE-2013-4517)	2 Jul 201812:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to multiple security vulnerabilities	18 Feb 201914:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator vulnerable due to Apache Santuario XML Security for Java (CVE-2013-4517, CVE-2013-2172)	14 Oct 202221:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache Santuario XML Security for Java affect IBM InfoSphere Information Server	14 Oct 202222:24	–	ibm
BDU FSTEC	The platform’s vulnerability related to ensuring security standards for XML Apache Santuario XML Security for Java allows attackers to trigger a service failure.	7 Nov 202200:00	–	bdu_fstec
Broadcom	BSA-2017-471	17 Nov 201700:00	–	broadcom
Check Point Advisories	Apache Santuario XML Security for Java DTD Denial of Service (CVE-2013-4517)	13 Mar 201400:00	–	checkpoint_advisories
CVE	CVE-2013-4517	11 Jan 201401:00	–	cve
Cvelist	CVE-2013-4517	11 Jan 201401:00	–	cvelist

Vulners

Node

AND

Source	Link
access	www.access.redhat.com/security/cve/CVE-2013-4517
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-4517
cve	www.cve.org/CVERecord

14 May 2026 22:17Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.3

EPSS0.08863