CVE-2011-2516
- State
- Published
- Severity
- Not scored
- Published
- Jul 11, 2011
- Updated
- Aug 6, 2024
- Reserved
- Jun 15, 2011
Description
Off-by-one error in the XML signature feature in Apache XML Security for C++ 1.6.0, as used in Shibboleth before 2.4.3 and possibly other products, allows remote attackers to cause a denial of service (crash) via a signature using a large RSA key, which triggers a buffer overflow.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- DSA-2277vendor-advisory
- 45491third-party-advisory
- 45151third-party-advisory
- 20110707 Security Advisory: CVE-2011-2516mailing-list
- apache-xml-dos(68420)vdb-entry
- https://issues.apache.org/jira/browse/SANTUARIO-271
- http://santuario.apache.org/secadv/CVE-2011-2516.txt
- FEDORA-2011-9501vendor-advisory
- 45198third-party-advisory
- 45191third-party-advisory
- http://shibboleth.internet2.edu/secadv/secadv_20110706.txt
- 1025755vdb-entry
- FEDORA-2011-9494vendor-advisory
- 48611vdb-entry
- [santuario-commits] 20190823 svn commit: r1049214 - in /websites/production/santuario/content: cache/main.pageCache download.html index.html javaindex.html javareleasenotes.html secadv.data/CVE-2019-12400.asc secadv.htmlmailing-list
- [santuario-commits] 20210917 svn commit: r1076843 - in /websites/production/santuario/content: cache/main.pageCache index.html javaindex.html secadv.data/CVE-2021-40690.txt.asc secadv.htmlmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.