| Vulnerability Name: | CVE-2013-0339 (CCN-82369) | ||||||||||||||||||||||||||||||||||||||||
| Assigned: | 2012-12-06 | ||||||||||||||||||||||||||||||||||||||||
| Published: | 2013-02-20 | ||||||||||||||||||||||||||||||||||||||||
| Updated: | 2023-02-13 | ||||||||||||||||||||||||||||||||||||||||
| Summary: | |||||||||||||||||||||||||||||||||||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
| ||||||||||||||||||||||||||||||||||||||||
| CVSS v2 Severity: | 6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P) 5.0 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
| ||||||||||||||||||||||||||||||||||||||||
| Vulnerability Consequences: | Denial of Service | ||||||||||||||||||||||||||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2013-0339 Source: CCN Type: GNOME GIT Repository Detect excessive entities expansion upon replacement Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: SA52277 Libxml2 Entity Expansion Denial of Service Vulnerability Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: DEBIAN Type: DSA-2652 libxml2 -- external entity expansion Source: CCN Type: oss-sec Mailing List: Wed, 20 Feb 2013 Handling CVEs for the XML entity expansion issues Source: CCN Type: oss-sec Mailing List: Thu, 21 Feb 2013 CVEs for libxml2 and expat internal and external XML entity expansion Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: BID-59000 Libxml2 Entities Expansion CVE-2013-0339 Denial of Service Vulnerability Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: XMLsoft Web site Libxml2 Source: CCN Type: Red Hat Bugzilla - Bug 915149 CVE-2013-0339 libxml2: CPU consumption DoS when performing string substitutions during external entities expansion Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: XF Type: UNKNOWN libxml2-external-entities-dos(82369) Source: secalert@redhat.com Type: Exploit, Patch secalert@redhat.com | ||||||||||||||||||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration CCN 1: Denotes that component is vulnerable | ||||||||||||||||||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||||||||||||||||||