NVD

Id
28957  
Name
CVE-2015-8978  
Description
In Soap Lite (aka the SOAP::Lite extension for Perl) 1.14 and earlier, an example attack consists of defining 10 or more XML entities, each defined as consisting of 10 of the previous entity, with the document consisting of a single instance of the largest entity, which expands to one billion copies of the first entity. The amount of computer memory used for handling an external SOAP call would likely exceed that available to the process parsing the XML.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-11-22  
Modified Date
2016-11-28  
Seq
2015-8978  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
152639 28957 CVE-2015-8978 http://cpansearch.perl.org/src/PHRED/SOAP-Lite-1.20/Changes  View
152640 28957 CVE-2015-8978 94487  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11976 JVNDB-2015-007297 Soap Lite におけるサービス運用妨害 (DoS) の脆弱性 Soap Lite (別名 Perl 用 SOAP::Lite エクステンション) には、XML エンティティ拡張 (XEE) 攻撃に関する処理に不備があるため、サービス運用妨害 (メモリ消費) 状態にされる脆弱性が存在します。 CVE-2015-8978 86203 CVE-2015-8978 28957 5 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007297.html 2015-07-21 2016-11-25 View