NVD

Id
38006  
Name
CVE-2013-1864  
Description
The Portable Tool Library (aka PTLib) before 2.10.10, as used in Ekiga before 4.0.1, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted PXML document containing a large number of nested entity references, aka a "billion laughs attack."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2014-05-23  
Modified Date
2015-01-14  
Seq
2013-1864  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
194156 38006 CVE-2013-1864 FEDORA-2013-2998  View
194157 38006 CVE-2013-1864 [oss-security] 20130315 Re: CVE request: billion laughs flaw in ptlib  View
194158 38006 CVE-2013-1864 http://sourceforge.net/p/opalvoip/code/28856  View
194159 38006 CVE-2013-1864 http://www.ekiga.org/news/2013-02-21/ekiga-4.0.1-stable-available  View
194160 38006 CVE-2013-1864 58520  View
194161 38006 CVE-2013-1864 ptlib-xml-dos(82885)  View
194162 38006 CVE-2013-1864 SUSE-SU-2014:0237  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24945 JVNDB-2013-006520 Ekiga で使用される Portable Tool Library におけるサービス運用妨害 (DoS) の脆弱性 Ekiga で使用される Portable Tool Library (別名 PTLib) は、エンティティ展開中の再帰呼出を適切に検知しないため、サービス運用妨害 (メモリおよび CPU 資源の消費) 状態にされる脆弱性が存在します。 CVE-2013-1864 61806 CVE-2013-1864 38006 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006520.html 2013-01-12 2014-05-28 View