Test ID:	1.3.6.1.4.1.25623.1.1.10.2014.0558
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2014-0558)
Summary:	The remote host is missing an update for the 'xml-security' package(s) announced via the MGASA-2014-0558 advisory.
Description:	Summary: The remote host is missing an update for the 'xml-security' package(s) announced via the MGASA-2014-0558 advisory. Vulnerability Insight: Updated xml-security packages fixes security vulnerability: Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures (CVE-2013-4517). Affected Software/OS: 'xml-security' package(s) on Mageia 4. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4517 BugTraq ID: 64437 http://www.securityfocus.com/bid/64437 http://seclists.org/fulldisclosure/2013/Dec/169 https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3@%3Ccommits.santuario.apache.org%3E https://lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd@%3Ccommits.santuario.apache.org%3E http://osvdb.org/101169 RedHat Security Advisories: RHSA-2014:0170 http://rhn.redhat.com/errata/RHSA-2014-0170.html RedHat Security Advisories: RHSA-2014:0171 http://rhn.redhat.com/errata/RHSA-2014-0171.html RedHat Security Advisories: RHSA-2014:0172 http://rhn.redhat.com/errata/RHSA-2014-0172.html RedHat Security Advisories: RHSA-2014:0195 http://rhn.redhat.com/errata/RHSA-2014-0195.html RedHat Security Advisories: RHSA-2014:1725 http://rhn.redhat.com/errata/RHSA-2014-1725.html RedHat Security Advisories: RHSA-2014:1726 http://rhn.redhat.com/errata/RHSA-2014-1726.html RedHat Security Advisories: RHSA-2014:1727 http://rhn.redhat.com/errata/RHSA-2014-1727.html RedHat Security Advisories: RHSA-2014:1728 http://rhn.redhat.com/errata/RHSA-2014-1728.html RedHat Security Advisories: RHSA-2015:0675 http://rhn.redhat.com/errata/RHSA-2015-0675.html RedHat Security Advisories: RHSA-2015:0850 http://rhn.redhat.com/errata/RHSA-2015-0850.html RedHat Security Advisories: RHSA-2015:0851 http://rhn.redhat.com/errata/RHSA-2015-0851.html http://www.securitytracker.com/id/1029524 http://secunia.com/advisories/55639 XForce ISS Database: santuario-xmlsecurity-cve20134517-dos(89891) https://exchange.xforce.ibmcloud.com/vulnerabilities/89891
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.