Lucene search

CVE-2018-0486

🗓️ 13 Jan 2018 00:00:00Reported by ubuntu.comType

Shibboleth XMLTooling-C mishandles digital signatures, allowing remote attackers to obtain sensitive information or conduct impersonation attacks via a crafted DTD. CVE-2018-048

Reporter	Title	Published	Views	Family All 35
Tenable Nessus	Debian DSA-4085-1 : xmltooling - security update	15 Jan 201800:00	–	nessus
Tenable Nessus	FreeBSD : shibboleth-sp -- vulnerable to forged user attribute data (3dbe9492-f7b8-11e7-a12d-6cc21735f730)	15 Jan 201800:00	–	nessus
Tenable Nessus	Debian DLA-1242-1 : xmltooling security update	15 Jan 201800:00	–	nessus
Tenable Nessus	openSUSE Security Update : xmltooling (openSUSE-2018-65)	22 Jan 201800:00	–	nessus
Tenable Nessus	SUSE SLES12 Security Update : xmltooling (SUSE-SU-2018:0140-1)	9 Mar 201800:00	–	nessus
Tenable Nessus	SUSE SLES12 Security Update : xmltooling (SUSE-SU-2018:0720-1)	19 Mar 201800:00	–	nessus
Tenable Nessus	openSUSE Security Update : xmltooling (openSUSE-2018-276)	19 Mar 201800:00	–	nessus
OSV	xmltooling - security update	14 Jan 201800:00	–	osv
OSV	xmltooling - security update	12 Jan 201800:00	–	osv
OSV	libxmltooling-devel-3.2.0-1.2 on GA media	15 Jun 202400:00	–	osv

Source	Link
shibboleth	www.shibboleth.net/community/advisories/secadv_20180112.txt
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-0486
launchpad	www.launchpad.net/bugs/cve/CVE-2018-0486
security-tracker	www.security-tracker.debian.org/tracker/CVE-2018-0486

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	14.04	noarch	xmltooling	1.5.3-2+deb8u2build0.14.04.1	UNKNOWN
ubuntu	16.04	noarch	xmltooling	1.5.6-2ubuntu0.1	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Jan 2018 00:00Current

6.0Medium risk

Vulners AI Score6.0

CVSS26.4

CVSS36.5

EPSS0.004