CVE-2013-4517 | SynScan

Vulnerability Database

289,689

Total vulnerabilities in the database

CVE-2013-4517

Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.

Published: Jan 11, 2014
Updated: May 9, 2024
CVE: CVE-2013-4517
GHSA: GHSA-4p4w-6h54-g885
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:N/A:P

CWEs:

Affected Software
References

Software	From	Fixed in
org.apache.santuario / xmlsec	-	1.5.6
apache / santuario_xml_security_for_java	1.4.1	1.4.1.x
apache / santuario_xml_security_for_java	1.4.2	1.4.2.x
apache / santuario_xml_security_for_java	1.4.3	1.4.3.x
apache / santuario_xml_security_for_java	1.3.0	1.3.0.x
apache / santuario_xml_security_for_java	1.4.5	1.4.5.x
apache / santuario_xml_security_for_java	1.4.4	1.4.4.x
apache / santuario_xml_security_for_java	1.5.1	1.5.1.x
apache / santuario_xml_security_for_java	1.4.8	1.4.8.x
apache / santuario_xml_security_for_java	1.4.6	1.4.6.x
apache / santuario_xml_security_for_java	1.4.0	1.4.0.x
apache / santuario_xml_security_for_java	1.5.2	1.5.2.x
apache / santuario_xml_security_for_java	1.5.4	1.5.4.x
apache / santuario_xml_security_for_java	1.5.3	1.5.3.x
apache / santuario_xml_security_for_java	1.4.7	1.4.7.x
apache / santuario_xml_security_for_java	1.5.0	1.5.0.x
apache / santuario_xml_security_for_java	1.2.1	1.2.1.x
apache / santuario_xml_security_for_java	-	1.5.5.x
apache / santuario_xml_security_for_java	1.2.0	1.2.0.x