NVD

Id
25275  
Name
CVE-2015-3451  
Description
The _clone function in XML::LibXML before 2.0119 does not properly set the expand_entities option, which allows remote attackers to conduct XML external entity (XXE) attacks via crafted XML data to the (1) new or (2) load_xml function.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-05-12  
Modified Date
2017-01-03  
Seq
2015-3451  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
133722 25275 CVE-2015-3451 http://advisories.mageia.org/MGASA-2015-0199.html  View
133723 25275 CVE-2015-3451 http://cpansearch.perl.org/src/SHLOMIF/XML-LibXML-2.0119/Changes  View
133724 25275 CVE-2015-3451 FEDORA-2015-7115  View
133725 25275 CVE-2015-3451 FEDORA-2015-7258  View
133726 25275 CVE-2015-3451 openSUSE-SU-2015:1506  View
133727 25275 CVE-2015-3451 DSA-3243  View
133728 25275 CVE-2015-3451 [oss-security] 20150424 CVE request: Perl XML::LibXML  View
133729 25275 CVE-2015-3451 [oss-security] 20150430 Re: CVE request: Perl XML::LibXML  View
133730 25275 CVE-2015-3451 74333  View
133731 25275 CVE-2015-3451 USN-2592-1  View
133732 25275 CVE-2015-3451 https://bitbucket.org/shlomif/perl-xml-libxml/commits/5962fd067580767777e94640b129ae8930a68a30/raw/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7368 JVNDB-2015-002688 XML::LibXML の _clone 関数における XML 外部エンティティ攻撃を実行される脆弱性 XML::LibXML の _clone 関数は、expand_entities オプションを適切に設定しないため、XML 外部エンティティ (XXE) 攻撃を実行される脆弱性が存在します。 CVE-2015-3451 80676 CVE-2015-3451 25275 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002688.html 2015-04-23 2015-05-19 View