CVE-2013-2156

概要

参考情報

• archives.neohapsis.com/archives/fulldisclosure/2013-06/0143.html
• santuario.apache.org/secadv.data/CVE-2013-2156.txt
• svn.apache.org/viewvc · Patch
• debian.org/security/2013/dsa-2710
• lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3%40%3Ccommits.santuario.apache.org%3E
• lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd%40%3Ccommits.santuario.apache.org%3E
• tenable.com/security/tns-2018-15

xml security for c++ のその他の脆弱性

• CVE-2013-2210高 7.5Heap-based buffer overflow in the XML Signature Reference functionality in Apache Santuario XML Security for C++ (aka xml-security-c) before…
• CVE-2013-2155中 5.8Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 does not properly validate length values, which allows remote attack…
• CVE-2013-2154高 7.5Stack-based buffer overflow in the XML Signature Reference functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML Security for …
• CVE-2013-2153中 4.3The XML digital signature functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) before 1…
• CVE-2011-2516中 5.0Off-by-one error in the XML signature feature in Apache XML Security for C++ 1.6.0, as used in Shibboleth before 2.4.3 and possibly other pr…