NVD

Id
9291  
Name
CVE-2011-2516  
Description
Off-by-one error in the XML signature feature in Apache XML Security for C++ 1.6.0, as used in Shibboleth before 2.4.3 and possibly other products, allows remote attackers to cause a denial of service (crash) via a signature using a large RSA key, which triggers a buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2011-07-11  
Modified Date
2012-10-31  
Seq
2011-2516  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
53175 9291 CVE-2011-2516 FEDORA-2011-9501  View
53176 9291 CVE-2011-2516 FEDORA-2011-9494  View
53177 9291 CVE-2011-2516 http://santuario.apache.org/secadv/CVE-2011-2516.txt  View
53178 9291 CVE-2011-2516 http://shibboleth.internet2.edu/secadv/secadv_20110706.txt  View
53179 9291 CVE-2011-2516 DSA-2277  View
53180 9291 CVE-2011-2516 20110707 Security Advisory: CVE-2011-2516  View
53181 9291 CVE-2011-2516 48611  View
53182 9291 CVE-2011-2516 1025755  View
53183 9291 CVE-2011-2516 apache-xml-dos(68420)  View
53184 9291 CVE-2011-2516 https://issues.apache.org/jira/browse/SANTUARIO-271  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34485 JVNDB-2011-004727 Shibboleth などで使用されるApache XML Security for C++ の XML 署名における一つずれエラーの脆弱性 Shibboleth などで使用される Apache XML Security for C++ の XML 署名には、サービス運用妨害 (クラッシュ) の状態にされる脆弱性が存在します。 CVE-2011-2516 50423 CVE-2011-2516 9291 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004727.html 2011-07-11 2012-03-27 View