Lucene search
UbuntuUSN-2548-1HistoryMar 25, 2015 - 12:00 a.m.
Batik vulnerability
2015-03-2500:00:00
ubuntu.com
39
8.9 High
AI Score
Confidence
High
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
0.059 Low
EPSS
Percentile
93.4%
Releases
- Ubuntu 14.10
- Ubuntu 14.04 ESM
- Ubuntu 12.04
Packages
- batik - xml.apache.org SVG Library
Details
Nicolas Gregoire and Kevin Schaller discovered that Batik would load XML
external entities by default. If a user or automated system were tricked
into opening a specially crafted SVG file, an attacker could possibly
obtain access to arbitrary files or cause resource consumption.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 14.10 | noarch | libbatik-java | < 1.7.ubuntu-8ubuntu2.14.10.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libbatik-java | < 1.7.ubuntu-8ubuntu2.14.04.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libbatik-java | < 1.7.ubuntu-8ubuntu1.1 | UNKNOWN |
References
Related
ibm
ibm
Security Bulletin: Security Vulnerability in Apache Batik (CVE-2015-0250)
2018-08-03 04:23:43
Security Bulletin: IBM Cúram Social Program Management contains an Apache Batik Vulnerability (CVE-2015-0250)
2018-07-20 14:44:17
Security Bulletin: Security Vulnerability in Apache Batik (CVE-2015-0250)
2020-02-05 00:09:48
osv
osv
Improper Input Validation in Apache Batik
2022-05-17 00:28:34
openvas
openvas
Debian: Security Advisory (DLA-182-1)
2023-03-08 00:00:00
Debian Security Advisory DSA 3205-1 (batik - security update)
2015-03-27 00:00:00
Fedora Update for batik FEDORA-2015-8803
2015-07-07 00:00:00
debian
debian
[SECURITY] [DSA 3205-1] batik security update
2015-03-27 10:59:52
[SECURITY] [DLA 182-1] batik security update
2015-03-27 21:16:06
[SECURITY] [DSA 3205-1] batik security update
2015-03-27 10:59:52
veracode
veracode
XML External Entity (XXE) Injection
2017-04-13 02:00:52
nessus
nessus
Debian DSA-3205-1 : batik - security update
2015-03-30 00:00:00
Fedora 21 : batik-1.8-0.18.svn1230816.fc21 (2015-8783)
2015-06-05 00:00:00
Ubuntu 14.04 LTS : Batik vulnerability (USN-2548-1)
2015-03-26 00:00:00
ubuntucve
ubuntucve
CVE-2015-0250
2015-03-18 00:00:00
cve
cve
CVE-2015-0250
2015-03-24 17:59:00
github
github
Improper Input Validation in Apache Batik
2022-05-17 00:28:34
mageia
mageia
Updated batik packages fix security vulnerabilities
2015-04-10 01:44:14
archlinux
archlinux
java-batik: xml external entity injection
2015-04-04 00:00:00
redhat
redhat
(RHSA-2016:0042) Moderate: Red Hat JBoss BPM Suite 6.1.5 update
2016-01-14 18:31:13
(RHSA-2016:0041) Moderate: Red Hat JBoss BRMS 6.1.5 update
2016-01-14 18:31:11
(RHSA-2015:2560) Critical: Red Hat JBoss BPM Suite 6.2.0 update
2015-12-07 20:42:58
prion
prion
Xxe
2015-03-24 17:59:00
securityvulns
securityvulns
Apache libbatik XXE
2015-05-11 00:00:00
[USN-2548-1] Batik vulnerability
2015-05-11 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: batik-1.8-0.18.svn1230816.fc21
2015-06-04 20:20:52
[SECURITY] Fedora 22 Update: batik-1.8-0.18.svn1230816.fc22
2015-06-04 20:11:57
[SECURITY] Fedora 20 Update: batik-1.8-0.12.svn1230816.fc20
2015-06-04 20:19:41
gitlab
gitlab
Improper Restriction of XML External Entity Reference
2015-03-24 00:00:00
debiancve
debiancve
CVE-2015-0250
2015-03-24 17:59:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2017
2017-01-17 00:00:00
8.9 High
AI Score
Confidence
High
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
0.059 Low
EPSS
Percentile
93.4%
Related for USN-2548-1