Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Off-by-one error in the XML signature feature in Apache XML Security for C++ 1.6.0, as used in Shibboleth before 2.4.3 and possibly other products, allows remote attackers to cause a denial of service (crash) via a signature using a large RSA key, which triggers a buffer overflow.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Shibboleth Apache XML Security签名密钥解析拒绝服务漏洞
Vulnerability Description
在Shibboleth 2.4.3之前版本和其他产品中使用的Apache XML Security for C++ 1.6.0版本中存在拒绝服务漏洞。该漏洞源于创建或验证带有RSA，DSA或ECDSA密钥签名文件的XML签名时的off-by-one错误。远程攻击者可借助超大RSA密钥导致应用程序崩溃。
CVSS Information
N/A
Vulnerability Type
N/A