CVE-2013-2154

Mô tả

Tham khảo

• archives.neohapsis.com/archives/fulldisclosure/2013-06/0141.html
• santuario.apache.org/secadv.data/CVE-2013-2154.txt · Vendor Advisory
• svn.apache.org/viewvc/santuario/xml-security-cpp/trunk/xsec/dsig/DSIGReference.cpp · Patch
• debian.org/security/2013/dsa-2710
• lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3%40%3Ccommits.santuario.apache.org%3E
• lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd%40%3Ccommits.santuario.apache.org%3E
• tenable.com/security/tns-2018-15

Lỗ hổng khác của xml security for c++

• CVE-2013-2210CAO 7.5Heap-based buffer overflow in the XML Signature Reference functionality in Apache Santuario XML Security for C++ (aka xml-security-c) before…
• CVE-2013-2156CAO 7.5Heap-based buffer overflow in the Exclusive Canonicalization functionality (xsec/canon/XSECC14n20010315.cpp) in Apache Santuario XML Securit…
• CVE-2013-2155TRUNG BÌNH 5.8Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 does not properly validate length values, which allows remote attack…
• CVE-2013-2153TRUNG BÌNH 4.3The XML digital signature functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) before 1…
• CVE-2011-2516TRUNG BÌNH 5.0Off-by-one error in the XML signature feature in Apache XML Security for C++ 1.6.0, as used in Shibboleth before 2.4.3 and possibly other pr…