CVE-2013-4002

EPSS 24.74%
Veröffentlicht 23.07.2013 11:03:19
Zuletzt bearbeitet 29.04.2026 01:13:23
Erkennungen
Login

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, Java SE Embedded 7u40 and earlier, and possibly other products allows remote attackers to cause a denial of service via vectors related to XML attribute names.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 52

NVD 90 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Java Version 5.0.0.0

Ibm ≫ Java Version 5.0.11.0

Ibm ≫ Java Version 5.0.11.1

Ibm ≫ Java Version 5.0.11.2

Ibm ≫ Java Version 5.0.12.0

Ibm ≫ Java Version 5.0.12.1

Ibm ≫ Java Version 5.0.12.2

Ibm ≫ Java Version 5.0.12.3

Ibm ≫ Java Version 5.0.12.4

Ibm ≫ Java Version 5.0.12.5

Ibm ≫ Java Version 5.0.13.0

Ibm ≫ Java Version 5.0.14.0

Ibm ≫ Java Version 5.0.15.0

Ibm ≫ Java Version 5.0.16.0

Ibm ≫ Java Version 5.0.16.1

Ibm ≫ Java Version 5.0.16.2

Ibm ≫ Java Version 6.0.0.0

Ibm ≫ Java Version 6.0.1.0

Ibm ≫ Java Version 6.0.2.0

Ibm ≫ Java Version 6.0.3.0

Ibm ≫ Java Version 6.0.4.0

Ibm ≫ Java Version 6.0.5.0

Ibm ≫ Java Version 6.0.6.0

Ibm ≫ Java Version 6.0.7.0

Ibm ≫ Java Version 6.0.8.0

Ibm ≫ Java Version 6.0.8.1

Ibm ≫ Java Version 6.0.9.0

Ibm ≫ Java Version 6.0.9.1

Ibm ≫ Java Version 6.0.9.2

Ibm ≫ Java Version 6.0.10.0

Ibm ≫ Java Version 6.0.10.1

Ibm ≫ Java Version 6.0.11.0

Ibm ≫ Java Version 6.0.12.0

Ibm ≫ Java Version 6.0.13.0

Ibm ≫ Java Version 6.0.13.1

Ibm ≫ Java Version 6.0.13.2

Ibm ≫ Java Version 7.0.0.0

Ibm ≫ Java Version 7.0.1.0

Ibm ≫ Java Version 7.0.2.0

Ibm ≫ Java Version 7.0.3.0

Ibm ≫ Java Version 7.0.4.0

Ibm ≫ Java Version 7.0.4.1

Ibm ≫ Java Version 7.0.4.2

Oracle ≫ Jdk Version 1.5.0 Update update51

Oracle ≫ Jdk Version 1.6.0 Update update60

Oracle ≫ Jdk Version 1.7.0 Update update40

Oracle ≫ Jre Version 1.5.0 Update update51

Oracle ≫ Jre Version 1.6.0 Update update60

Oracle ≫ Jre Version 1.7.0 Update update40

Oracle ≫ Jrockit Version >= r27.7.0 <= r27.7.6

Oracle ≫ Jrockit Version >= r28.0.0 <= r28.2.8

Ibm ≫ Sterling B2b Integrator Version 5.2.4

Ibm ≫ Host On-demand Version 11.0

Microsoft ≫ Windows Version -

Ibm ≫ Host On-demand Version 11.0.1

Microsoft ≫ Windows Version -

Ibm ≫ Host On-demand Version 11.0.2

Microsoft ≫ Windows Version -

Ibm ≫ Host On-demand Version 11.0.3

Microsoft ≫ Windows Version -

Ibm ≫ Host On-demand Version 11.0.4

Microsoft ≫ Windows Version -

Ibm ≫ Host On-demand Version 11.0.5

Microsoft ≫ Windows Version -

Ibm ≫ Host On-demand Version 11.0.5.1

Microsoft ≫ Windows Version -

Ibm ≫ Host On-demand Version 11.0.6

Microsoft ≫ Windows Version -

Ibm ≫ Host On-demand Version 11.0.6.1

Microsoft ≫ Windows Version -

Ibm ≫ Host On-demand Version 11.0.7

Microsoft ≫ Windows Version -

Ibm ≫ Host On-demand Version 11.0.8

Microsoft ≫ Windows Version -

Ibm ≫ Tivoli Application Dependency Discovery Manager Version 7.2.2

   Ibm ≫ Aix Version -
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -
   Oracle ≫ Solaris Version - HwPlatform -

Ibm ≫ Sterling B2b Integrator Version 5.1

   Hp ≫ Hp-ux Version -
   Ibm ≫ Aix Version -
   Ibm ≫ I Version -
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -
   Oracle ≫ Solaris Version - HwPlatform -

Ibm ≫ Sterling B2b Integrator Version 5.2

   Hp ≫ Hp-ux Version -
   Ibm ≫ Aix Version -
   Ibm ≫ I Version -
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -
   Oracle ≫ Solaris Version - HwPlatform -

Ibm ≫ Sterling File Gateway Version 2.1

   Hp ≫ Hp-ux Version -
   Ibm ≫ Aix Version -
   Ibm ≫ I Version -
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -
   Oracle ≫ Solaris Version - HwPlatform -

Ibm ≫ Sterling File Gateway Version 2.2

   Hp ≫ Hp-ux Version -
   Ibm ≫ Aix Version -
   Ibm ≫ I Version -
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -
   Oracle ≫ Solaris Version - HwPlatform -

Opensuse ≫ Opensuse Version 12.2

Opensuse ≫ Opensuse Version 12.3

Suse ≫ Linux Enterprise Desktop Version 10 Update sp4 SwEdition -

Suse ≫ Linux Enterprise Desktop Version 11 Update sp3

Suse ≫ Linux Enterprise Java Version 10 Update sp4

Suse ≫ Linux Enterprise Java Version 11 Update sp2

Suse ≫ Linux Enterprise Java Version 11 Update sp3

Suse ≫ Linux Enterprise Sdk Version 11 Update sp2

Suse ≫ Linux Enterprise Sdk Version 11 Update sp3

Suse ≫ Linux Enterprise Server Version 9

Suse ≫ Linux Enterprise Server Version 10 Update sp3 SwEdition ltss

Suse ≫ Linux Enterprise Server Version 10 Update sp4 SwEdition -

Suse ≫ Linux Enterprise Server Version 11 Update sp2 SwPlatform -

Suse ≫ Linux Enterprise Server Version 11 Update sp2 SwPlatform vmware

Suse ≫ Linux Enterprise Server Version 11 Update sp3 SwPlatform -

Suse ≫ Linux Enterprise Server Version 11 Update sp3 SwPlatform vmware

Canonical ≫ Ubuntu Linux Version 10.04 SwEdition -

Canonical ≫ Ubuntu Linux Version 12.04 SwEdition -

Canonical ≫ Ubuntu Linux Version 12.10

Canonical ≫ Ubuntu Linux Version 13.04

Canonical ≫ Ubuntu Linux Version 13.10

Apache ≫ Xerces2 Java Version >= 2.4.0 < 2.12.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	24.74%	0.976

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.1	8.6	6.9	AV:N/AC:M/Au:N/C:N/I:N/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E

http://security.gentoo.org/glsa/glsa-201406-32.xml

Third Party Advisory

https://www.oracle.com/security-alerts/cpuapr2022.html

http://www-01.ibm.com/support/docview.wss?uid=swg21644197

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2013-1059.html

Broken Link

http://rhn.redhat.com/errata/RHSA-2013-1060.html

Broken Link

http://rhn.redhat.com/errata/RHSA-2013-1081.html

Broken Link

https://access.redhat.com/errata/RHSA-2014:0414

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html

Third Party Advisory

http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_July_2013

Vendor Advisory

http://lists.apple.com/archives/security-announce/2013/Oct/msg00001.html

Broken Link

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00010.html

Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2013-11/msg00023.html

Third Party Advisory

http://marc.info/?l=bugtraq&m=138674031212883&w=2

Third Party Advisory

Mailing List

Issue Tracking

http://marc.info/?l=bugtraq&m=138674073720143&w=2

Third Party Advisory

Mailing List

Issue Tracking

http://rhn.redhat.com/errata/RHSA-2013-1440.html

Broken Link

http://rhn.redhat.com/errata/RHSA-2013-1447.html

Broken Link

http://rhn.redhat.com/errata/RHSA-2013-1451.html

Broken Link

http://rhn.redhat.com/errata/RHSA-2013-1505.html

Broken Link

http://rhn.redhat.com/errata/RHSA-2014-1818.html

Broken Link

http://rhn.redhat.com/errata/RHSA-2014-1821.html

Broken Link

http://rhn.redhat.com/errata/RHSA-2014-1822.html

Broken Link

http://rhn.redhat.com/errata/RHSA-2014-1823.html

Broken Link

http://rhn.redhat.com/errata/RHSA-2015-0675.html

Broken Link

http://rhn.redhat.com/errata/RHSA-2015-0720.html

Broken Link

http://rhn.redhat.com/errata/RHSA-2015-0765.html

Broken Link

http://rhn.redhat.com/errata/RHSA-2015-0773.html

Broken Link

http://secunia.com/advisories/56257

Third Party Advisory

http://support.apple.com/kb/HT5982

Third Party Advisory

http://svn.apache.org/viewvc/xerces/java/trunk/src/org/apache/xerces/impl/XMLScanner.java?r1=965250&r2=1499506&view=patch

Patch

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg1IC98015

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21653371

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21657539

Vendor Advisory

http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS13-025/index.html

Third Party Advisory

http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_ibm_filenet_content_manager_and_ibm_content_foundation_xml_4j_denial_of_service_attack_cve_2013_4002

Vendor Advisory

http://www.ibm.com/support/docview.wss?uid=swg21648172

Broken Link

http://www.securityfocus.com/bid/61310

Third Party Advisory

VDB Entry

http://www.ubuntu.com/usn/USN-2033-1

Third Party Advisory

http://www.ubuntu.com/usn/USN-2089-1

Third Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/85260

Vendor Advisory

VDB Entry

https://issues.apache.org/jira/browse/XERCESJ-1679

Vendor Advisory

Issue Tracking

https://lists.apache.org/thread.html/49dc6702104a86ecbb40292dcd329ce9ae4c32b74733199ecab14a73%40%3Cj-users.xerces.apache.org%3E

https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E

https://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2013-4002

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-4002

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-4002

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2013-4002