CVE-2013-4517

Published: Jan 11, 2014Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.

Affected (18)

Products: Apache: Santuario Xml Security For Java

1 product

Santuario Xml Security For Java

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Apache Santuario Xml Security For Java	Up to 1.5.5
Apache Santuario Xml Security For Java	Version 1.2.0
Apache Santuario Xml Security For Java	Version 1.2.1
Apache Santuario Xml Security For Java	Version 1.3.0
Apache Santuario Xml Security For Java	Version 1.4.0
Apache Santuario Xml Security For Java	Version 1.4.1
Apache Santuario Xml Security For Java	Version 1.4.2
Apache Santuario Xml Security For Java	Version 1.4.3
Apache Santuario Xml Security For Java	Version 1.4.4
Apache Santuario Xml Security For Java	Version 1.4.5
Apache Santuario Xml Security For Java	Version 1.4.6
Apache Santuario Xml Security For Java	Version 1.4.7
Apache Santuario Xml Security For Java	Version 1.4.8
Apache Santuario Xml Security For Java	Version 1.5.0
Apache Santuario Xml Security For Java	Version 1.5.1
Apache Santuario Xml Security For Java	Version 1.5.2
Apache Santuario Xml Security For Java	Version 1.5.3
Apache Santuario Xml Security For Java	Version 1.5.4

Related CWEs

References (44)

http://osvdb.org/101169

Source: secalert@redhat.com

http://packetstormsecurity.com/files/124554/Java-XML-Signature-Denial-Of-Service-Attack.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2014-0170.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2014-0171.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2014-0172.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2014-0195.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2014-1725.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2014-1726.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2014-1727.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2014-1728.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0675.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0850.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0851.html

Source: secalert@redhat.com

http://santuario.apache.org/secadv.data/cve-2013-4517.txt.asc

Source: secalert@redhat.com

Vendor Advisory

http://seclists.org/fulldisclosure/2013/Dec/169

Source: secalert@redhat.com

http://secunia.com/advisories/55639

Source: secalert@redhat.com

Vendor Advisory

http://www.securityfocus.com/bid/64437

Source: secalert@redhat.com

http://www.securitytracker.com/id/1029524

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/89891

Source: secalert@redhat.com

https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3%40%3Ccommits.santuario.apache.org%3E

Source: secalert@redhat.com

https://lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd%40%3Ccommits.santuario.apache.org%3E

Source: secalert@redhat.com

https://www.tenable.com/security/tns-2018-15

Source: secalert@redhat.com

http://osvdb.org/101169

Source: af854a3a-2127-422b-91ae-364da2661108

http://packetstormsecurity.com/files/124554/Java-XML-Signature-Denial-Of-Service-Attack.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-0170.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-0171.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-0172.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-0195.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-1725.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-1726.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-1727.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-1728.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-0675.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-0850.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-0851.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://santuario.apache.org/secadv.data/cve-2013-4517.txt.asc

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://seclists.org/fulldisclosure/2013/Dec/169

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/55639

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/64437

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1029524

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/89891

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3%40%3Ccommits.santuario.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd%40%3Ccommits.santuario.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.tenable.com/security/tns-2018-15

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.