Off-by-one error in the XML signature feature in Apache XML Security for C++ 1.6.0, as used in Shibboleth before 2.4.3 and possibly other products, allows remote attackers to cause a denial of service (crash) via a signature using a large RSA key, which triggers a buffer overflow.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2011-07-11T20:00:00
Updated: 2024-08-06T23:00:34.179Z
Reserved: 2011-06-15T00:00:00
Link: CVE-2011-2516
Vulnrichment
No data.
NVD
Status : Modified
Published: 2011-07-11T20:55:01.380
Modified: 2024-11-21T01:28:26.680
Link: CVE-2011-2516
Redhat
No data.