Skip to content
OpenAdvisories

Package · Debian

xml-security-c

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • Unscored —
    CVE-2013-2154

    Stack-based buffer overflow in the XML Signature Reference functionality (xsec/dsig/DSIGReference.cpp) in Apache Santua…

    xml-security-c Debian
  • Unscored —
    CVE-2013-2153

    The XML digital signature functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML Security for C++ (aka xml…

    xml-security-c Debian
  • Unscored —
    CVE-2013-2155

    Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 does not properly validate length values, which…

    xml-security-c Debian
  • Unscored —
    CVE-2013-2210

    Heap-based buffer overflow in the XML Signature Reference functionality in Apache Santuario XML Security for C++ (aka x…

    xml-security-c Debian
  • Unscored —
    CVE-2013-2156

    Heap-based buffer overflow in the Exclusive Canonicalization functionality (xsec/canon/XSECC14n20010315.cpp) in Apache …

    xml-security-c Debian
  • Unscored —
    CVE-2011-2516

    Off-by-one error in the XML signature feature in Apache XML Security for C++ 1.6.0, as used in Shibboleth before 2.4.3 …

    xml-security-c Debian
  • Medium —
    CVE-2009-0217

    Apache XML Security For Java vulnerable to authentication bypass by HMAC truncation

    The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; (2) the WebLogic Server…

    mono org.apache.santuario:xmlsec xml-security-c xmlsec1 Debian Maven