4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.07 Low
EPSS
Percentile
92.9%
Red Hat JBoss Enterprise Application Platform is a platform for Java
applications, which integrates the JBoss Application Server with JBoss
Hibernate and JBoss Seam.
It was discovered that the Apache Santuario XML Security for Java project
allowed Document Type Definitions (DTDs) to be processed when applying
Transforms even when secure validation was enabled. A remote attacker could
use this flaw to exhaust all available memory on the system, causing a
denial of service. (CVE-2013-4517)
All users of Red Hat JBoss Enterprise Application Platform 5.2.0 on Red Hat
Enterprise Linux 4, 5, and 6 are advised to upgrade to these updated
packages. The JBoss server process must be restarted for the update to take
effect.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | 5 | noarch | xml-security | <Β 1.5.6-3.ep5.el5 | xml-security-1.5.6-3.ep5.el5.noarch.rpm |
RedHat | 6 | src | xml-security | <Β 1.5.6-3.el6 | xml-security-1.5.6-3.el6.src.rpm |
RedHat | 6 | noarch | xml-security | <Β 1.5.6-3.el6 | xml-security-1.5.6-3.el6.noarch.rpm |
RedHat | 5 | src | xml-security | <Β 1.5.6-3.ep5.el5 | xml-security-1.5.6-3.ep5.el5.src.rpm |