PT-2016-3605 · Pivotal+1 · Spring Framework+1

Toshiaki Maki

·

Publicado

2015-07-28

·

Atualizado

2022-04-11

·

CVE-2015-3192

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Pivotal Spring Framework versions prior to 3.2.14 Pivotal Spring Framework versions 4.x prior to 4.1.7
Description The issue allows remote attackers to cause a denial of service, resulting in memory consumption and out-of-memory errors, by processing a crafted XML file with inline DTD declarations when DTD is not entirely disabled.
Recommendations For versions prior to 3.2.14, update to version 3.2.14 or later to resolve the issue. For versions 4.x prior to 4.1.7, update to version 4.1.7 or later to resolve the issue.

Exploit

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2015-3192
DLA-1853-1
GHSA-6V7W-535J-RQ5M
MGASA-2015-0294
USN-4774-1

Produtos afetados

Spring Framework
Ubuntu