Advisory details:
gitlab / maven/org.apache.cxf/apache-cxf/CVE-2013-2160
| Advisory ID | gitlab/maven/org.apache.cxf/apache-cxf/CVE-2013-2160 |
| Aliases |
CVE-2013-2160
|
| Summary | Uncontrolled Resource Consumption The streaming XML parser in Apache CXF allows remote attackers to cause a denial of service (CPU and memory consumption) via crafted XML with a large number of (1) elements, (2) attributes, (3) nested constructs, and possibly other vectors. |
| Status | Published |
| Exploitability | 2.0 |
| Weighted Severity | 0.0 |
| Risk | |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| System | Score | Found at |
|---|---|---|
| cvssv2 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/apache-cxf/CVE-2013-2160.yml |
| Reference id | Reference type | URL |
|---|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2160 | ||
| CVE-2013-2160;OSVDB-95011 | Exploit | http://cxf.apache.org/security-advisories.data/CVE-2013-2160.txt.asc |
| Data source | Exploit-DB |
|---|---|
| Date added | July 9, 2013 |
| Description | Apache CXF < 2.5.10/2.6.7/2.7.4 - Denial of Service |
| Ransomware campaign use | Known |
| Source publication date | July 9, 2013 |
| Exploit type | dos |
| Platform | multiple |
| Source update date | July 9, 2013 |
| Source URL | http://cxf.apache.org/security-advisories.data/CVE-2013-2160.txt.asc |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
| Exploitability (E) | Access Vector (AV) | Access Complexity (AC) | Authentication (Au) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|
high functional unproven proof_of_concept not_defined |
local adjacent_network network |
high medium low |
multiple single none |
none partial complete |
none partial complete |
none partial complete |
There are no SSVC decisions available.