Red Hat Security AdvisoryRHSA-2014:1726
Red Hat JBoss Enterprise Application Platform 5.2.0 security update
Released 2014-10-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS xml-security-1.5.6-3.ep5.el4
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES xml-security-1.5.6-3.ep5.el4
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server xml-security-1.5.6-3.ep5.el5
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server xml-security-1.5.6-3.el6
Fixes 1 record
Priority LOW 31
Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.08863 · Published 2014-01-11 · Partial fix · 1.5.6 CWE-399
