NetSight
IP …
medium4.3

CVE-2013-4517

Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via cr…

Impact

Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.

Affected products

VendorProductAffected versions
ApacheSantuario Xml Security For Java
through 1.5.5
Versions 1.2.0, 1.2.1, 1.3.0, 1.4.0, 1.4.1

Weakness classification

CWE-399

References