Lucene search
GoogleOSV:GHSA-RJ4P-7MM6-GM9JHistoryMay 13, 2022 - 1:39 a.m.
JBossWS vulnerable to uncontrolled recursion
2022-05-1301:39:29
Google
osv.dev
10
0.011 Low
EPSS
Percentile
84.5%
DOMUtils.java in org.jboss.ws:jbossws-common does not properly handle recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted request containing an XML document with a DOCTYPE declaration and a large number of nested entity references, a similar issue to CVE-2003-1564.
Related
prion
prion
Input validation
2013-07-29 13:59:00
Design/Logic Flaw
2016-01-03 05:59:00
Code injection
2014-09-23 20:55:00
cve
cve
cvelist
cvelist
nvd
nvd
github
github
JBossWS vulnerable to uncontrolled recursion
2022-05-13 01:39:29
SnakeYAML Entity Expansion during load operation
2021-06-04 21:37:45
ubuntucve
ubuntucve
redhat
redhat
(RHSA-2011:1302) Important: jbossws-common security update
2011-09-15 13:48:42
(RHSA-2011:1303) Important: jbossws-common security update
2011-09-15 00:00:00
(RHSA-2011:1312) Important: jbossws-common security update
2011-09-15 15:08:30
nessus
nessus
RHEL 4 / 5 : jbossws-common (RHSA-2011:1306)
2013-01-24 00:00:00
RHEL 4 / 5 : jbossas (RHSA-2011:1309)
2013-01-24 00:00:00
RHEL 4 / 5 / 6 : jbossws-common (RHSA-2011:1301)
2013-01-24 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 01:03:01
Denial Of Service (DoS)
2019-01-15 08:53:01
openvas
openvas
FreeBSD Ports: ejabberd
2011-08-03 00:00:00
CentOS Update for libxml2 CESA-2008:0886-01 centos2 i386
2009-02-27 00:00:00
Huawei EulerOS: Security Advisory for qt (EulerOS-SA-2020-1431)
2020-04-16 00:00:00
debiancve
debiancve
osv
osv
CVE-2017-18640
2019-12-12 03:15:10
SnakeYAML Entity Expansion during load operation
2021-06-04 21:37:45
freebsd
freebsd
ejabberd -- remote denial of service vulnerability
2011-04-27 00:00:00
centos
centos
libxml2 security update
2008-09-12 01:23:56
redhatcve
redhatcve
CVE-2017-18640
2020-04-08 21:02:33
securityvulns
securityvulns
[ MDVSA-2009:221 ] libneon0.27
2009-08-25 00:00:00