CVE-2015-0851

2015-08-1200:00:00

ubuntu.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.009 Low

EPSS

Percentile

82.7%

JSON

XMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibboleth Service
Provider (SP), does not properly handle integer conversion exceptions,
which allows remote attackers to cause a denial of service (crash) via
schema-invalid XML data.

Bugs

<https://bugs.launchpad.net/ubuntu/+source/shibboleth-sp2/+bug/1480765>

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchxmltooling< 1.5.3-2+deb8u1build0.14.04.1UNKNOWN
ubuntu15.04noarchxmltooling< 1.5.3-2+deb8u1build0.15.04.1UNKNOWN