Framework: denial-of-service attack with XML input

🗓️ 06 Oct 2016 16:18:07Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 3 Views

DoS flaw in Spring XML processing of inline DTDs can cause out-of-memory errors from crafted XML.

Reporter	Title	Published	Views	Family All 48
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found on thirdparty libraries used by IBM® MobileFirst Platform	26 Jan 202317:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Spring Framework affect IBM InfoSphere Information Server	11 Jul 201919:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Spring Web affect watsonx.data	10 Feb 202510:24	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Pivota Spring Framework, VMware Tanzu Spring Framework, VMware Spring Framework might affect IBM Storage Defender Copy Data Management.	16 May 202519:21	–	ibm
CNVD	Unspecified Vulnerability in Red Hat JBoss BPM Suite	12 Jun 201600:00	–	cnvd
CVE	CVE-2015-3192	12 Jul 201619:00	–	cve
Cvelist	CVE-2015-3192	12 Jul 201619:00	–	cvelist
Debian	[SECURITY] [DLA 1853-1] libspring-java security update	13 Jul 201921:20	–	debian
Debian CVE	CVE-2015-3192	12 Jul 201619:00	–	debiancve
Tenable Nessus	Debian DLA-1853-1 : libspring-java security update	15 Jul 201900:00	–	nessus

Vulners

Node

redhat jboss_fuseRange<6.3

AND

redhat enterprise_linux

Source	Link
pivotal	www.pivotal.io/security/cve-2015-3192
access	www.access.redhat.com/security/cve/CVE-2015-3192
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2015-3192
cve	www.cve.org/CVERecord

14 May 2026 22:23Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.3

CVSS 35.5

EPSS0.01378

denial of service xml input spring framework dtd processing memory exhaustion crafted xml remote attacker