CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-2156

Heap-based buffer overflow in the Exclusive Canonicalization functionality (xsec/canon/XSECC14n20010315.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PrefixList attribute.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.032

EPSS Ranking 86.5%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2013-2156

Apache » Xml Security For C++ » Version: 0.1.0

cpe:2.3:a:apache:xml_security_for_c++:0.1.0
Apache » Xml Security For C++ » Version: 0.2.0

cpe:2.3:a:apache:xml_security_for_c++:0.2.0
Apache » Xml Security For C++ » Version: 1.1.0

cpe:2.3:a:apache:xml_security_for_c++:1.1.0
Apache » Xml Security For C++ » Version: 1.2.0

cpe:2.3:a:apache:xml_security_for_c++:1.2.0
Apache » Xml Security For C++ » Version: 1.2.1

cpe:2.3:a:apache:xml_security_for_c++:1.2.1
Apache » Xml Security For C++ » Version: 1.3.0

cpe:2.3:a:apache:xml_security_for_c++:1.3.0
Apache » Xml Security For C++ » Version: 1.3.1

cpe:2.3:a:apache:xml_security_for_c++:1.3.1
Apache » Xml Security For C++ » Version: 1.4.0

cpe:2.3:a:apache:xml_security_for_c++:1.4.0
Apache » Xml Security For C++ » Version: 1.5.0

cpe:2.3:a:apache:xml_security_for_c++:1.5.0
Apache » Xml Security For C++ » Version: 1.5.1

cpe:2.3:a:apache:xml_security_for_c++:1.5.1
Apache » Xml Security For C++ » Version: 1.6.0

cpe:2.3:a:apache:xml_security_for_c++:1.6.0
Apache » Xml Security For C++ » Version: 1.6.1

cpe:2.3:a:apache:xml_security_for_c++:1.6.1
Apache » Xml Security For C++ » Version: 1.7.0

cpe:2.3:a:apache:xml_security_for_c++:1.7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-2156

Products

Pricing

Contact Us