Vulnerability in Xmltooling Project
CVE-2015-0851
XMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibboleth Service Provider (SP), does not properly handle integer conversion exceptions, which allows remote attackers to cause a denial of service (crash) via schema-invalid XML data.
EPSS: 0.024 (82.7th percentile) — read the EPSS interpretation.
Affected products
- Xmltooling_project Xmltooling
- N/a — versions n/a
Weakness classification (CWE)
References
- security@debian.org (x_refsource_CONFIRM, Vendor Advisory)
- security@debian.org (x_refsource_CONFIRM)
- security@debian.org (vdb-entry, x_refsource_BID)
- security@debian.org (vendor-advisory, x_refsource_DEBIAN)