Design/Logic Flaw

SOAPpy 0.12.5 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted SOAP request containing a large number of nested entity references...

UBUNTU-CVE-2014-3242

SOAPpy 0.12.5 allows remote attackers to read arbitrary files via a SOAP request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

Xxe

SOAPpy 0.12.5 allows remote attackers to read arbitrary files via a SOAP request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

CVE-2014-3243

SOAPpy 0.12.5 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted SOAP request containing a large number of nested entity references...

CVE-2014-3242

CVE-2014-3242 affects SOAPpy 0.12.5, where processing XML External Entities (XXE) allows remote attackers to read arbitrary files via a SOAP request containing an external entity declaration and an entity reference. The connected sources consistently describe the issue as an XXE flaw in SOAPpy 0....

CVE-2014-3243

The CVE-2014-3243 issue affects SOAPpy 0.12.5, where recursion during entity expansion is not properly detected, allowing remote attackers to trigger a denial of service via crafted SOAP requests with deeply nested entity references. This is a network‑based vulnerability with memory and CPU impac...

CVE-2014-3243

Removed by vendor...

CVE-2014-3243

SOAPpy 0.12.5 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted SOAP request containing a large number of nested entity references...

CVE-2014-3242

SOAPpy 0.12.5 allows remote attackers to read arbitrary files via a SOAP request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

CVE-2014-3242

Removed by vendor...

CVE-2014-3242: Exposure of Sensitive Information to an Unauthorized Actor

SOAPpy 0.12.5 allows remote attackers to read arbitrary files via a SOAP request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

CVE-2014-3243: Improper Restriction of Operations within the Bounds of a Memory Buffer

SOAPpy 0.12.5 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted SOAP request containing a large number of nested entity references...

SOAPpy <= 0.12.5 XXE Vulnerability - Active Check

SOAPpy is prone to an XML external entity XXE vulnerability SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...