Astra Linux – Vulnerability in libwoodstox-java

Those who use Woodstox to parse XML data may be vulnerable to Denial of Service attacks DOS if DTD support is enabled. If the parser is running on user-supplied input, an attacker may provide content that causes the parser to crash due to a stack overflow. This vulnerability could potentially all...

The vulnerability of the woodstox library, related to overflowing buffers in the stack, allows a hacker to cause a service failure.

The vulnerability of the woodstox library is related to the overflowing buffer in the stack. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

DoS Attack with XML Input

XML external entities were previously disabled with the publication of http://pivotal.io/security/cve-2013-6429 . If DTD is not entirely disabled, inline DTD declarations can be used to perform Denial of Service attacks known as XML bombs. Such declarations are both well-formed and valid accordin...