CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-2154

Stack-based buffer overflow in the XML Signature Reference functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed XPointer expressions, probably related to the DSIGReference::getURIBaseTXFM function.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.017

EPSS Ranking 81.3%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2013-2154

Apache » Xml Security For C++ » Version: 0.1.0

cpe:2.3:a:apache:xml_security_for_c++:0.1.0
Apache » Xml Security For C++ » Version: 0.2.0

cpe:2.3:a:apache:xml_security_for_c++:0.2.0
Apache » Xml Security For C++ » Version: 1.1.0

cpe:2.3:a:apache:xml_security_for_c++:1.1.0
Apache » Xml Security For C++ » Version: 1.2.0

cpe:2.3:a:apache:xml_security_for_c++:1.2.0
Apache » Xml Security For C++ » Version: 1.2.1

cpe:2.3:a:apache:xml_security_for_c++:1.2.1
Apache » Xml Security For C++ » Version: 1.3.0

cpe:2.3:a:apache:xml_security_for_c++:1.3.0
Apache » Xml Security For C++ » Version: 1.3.1

cpe:2.3:a:apache:xml_security_for_c++:1.3.1
Apache » Xml Security For C++ » Version: 1.4.0

cpe:2.3:a:apache:xml_security_for_c++:1.4.0
Apache » Xml Security For C++ » Version: 1.5.0

cpe:2.3:a:apache:xml_security_for_c++:1.5.0
Apache » Xml Security For C++ » Version: 1.5.1

cpe:2.3:a:apache:xml_security_for_c++:1.5.1
Apache » Xml Security For C++ » Version: 1.6.0

cpe:2.3:a:apache:xml_security_for_c++:1.6.0
Apache » Xml Security For C++ » Version: 1.6.1

cpe:2.3:a:apache:xml_security_for_c++:1.6.1
Apache » Xml Security For C++ » Version: 1.7.0

cpe:2.3:a:apache:xml_security_for_c++:1.7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-2154

Products

Pricing

Contact Us