Lucene search
GoogleOSV:DSA-2717-1HistoryJun 28, 2013 - 12:00 a.m.
xml-security-c - heap overflow
2013-06-2800:00:00
Google
osv.dev
11
EPSS
0.01
Percentile
83.8%
Jon Erickson of iSIGHT Partners Labs discovered a heap overflow in
xml-security-c, an implementation of the XML Digital Security
specification. The fix to address
CVE-2013-2154
introduced the
possibility of a heap overflow in the processing of malformed XPointer
expressions in the XML Signature Reference processing code, possibly
leading to arbitrary code execution.
For the oldstable distribution (squeeze), this problem has been fixed in
version 1.5.1-3+squeeze3.
For the stable distribution (wheezy), this problem has been fixed in
version 1.6.1-5+deb7u2.
For the unstable distribution (sid), this problem has been fixed in
version 1.6.1-7.
We recommend that you upgrade your xml-security-c packages.
References
Related
prion
prion
Stack overflow
2013-08-20 22:55:00
Heap overflow
2013-08-20 22:55:00
cve
cve
CVE-2013-2154
2013-08-20 22:55:03
CVE-2013-2210
2013-08-20 22:55:04
securityvulns
securityvulns
CVE-2013-2154: Apache Santuario C++ stack overflow vulnerability
2013-07-01 00:00:00
CVE-2013-2210
2013-07-01 00:00:00
[SECURITY] [DSA 2717-1] xml-security-c security update
2013-07-01 00:00:00
cvelist
cvelist
CVE-2013-2154
2013-08-20 22:00:00
CVE-2013-2210
2013-08-20 22:00:00
debiancve
debiancve
CVE-2013-2154
2013-08-20 22:55:03
CVE-2013-2210
2013-08-20 22:55:04
nvd
nvd
CVE-2013-2154
2013-08-20 22:55:03
CVE-2013-2210
2013-08-20 22:55:04
debian
debian
[SECURITY] [DSA 2717-1] xml-security-c security update
2013-06-28 15:17:18
[SECURITY] [DSA 2717-1] xml-security-c security update
2013-06-28 15:17:18
[SECURITY] [DSA 2710-1] xml-security-c security update
2013-06-18 15:44:22
freebsd
freebsd
apache-xml-security-c -- heap overflow during XPointer evaluation
2013-06-27 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2717-1)
2013-06-27 00:00:00
Debian Security Advisory DSA 2717-1 (xml-security-c - heap overflow)
2013-06-28 00:00:00
ubuntucve
ubuntucve
CVE-2013-2210
2013-08-20 00:00:00
CVE-2013-2154
2013-08-20 00:00:00
nessus
nessus
Debian DSA-2717-1 : xml-security-c - heap overflow
2013-06-29 00:00:00
FreeBSD : apache-xml-security-c -- heap overflow during XPointer evaluation (81da673e-dfe1-11e2-9389-08002798f6ff)
2013-06-29 00:00:00
Debian DSA-2710-1 : xml-security-c - several vulnerabilities
2013-06-19 00:00:00
seebug
seebug
Apache Santuario XML Security for C++ ε ηΌε²εΊζΊ’εΊζΌζ΄
2013-06-28 00:00:00
osv
osv
xml-security-c - several
2013-06-18 00:00:00
mageia
mageia
Updated xml-security-c package fixes multiple security vulnerabilities
2013-07-01 23:12:07