apache xml-rpc 3.1 vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a XML-RPC client causing it to execute arbitrary code. Apache XML-RPC is no longer maint...

Apache Xml-rpc 3.1.3 Apache Xml-rpc 3.1.2 Apache Xml-rpc 3.1 Apache Xml-rpc 3.1.1 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 16.04 Fedoraproject Fedora 31 Fedoraproject Fedora 32 Redhat Software Collections 1.0

4 Github repositories

7.5

CVSSv2

The XML-RPC protocol support in Apache Roller prior to 5.0.3 allows malicious users to conduct XML External Entity (XXE) attacks via unspecified vectors.

Apache Roller 4.0.1 Apache Roller 3.1 Apache Roller 4.0 Apache Roller 5.0 Apache Roller 5.0.1 Apache Roller 5.0.2

1 EDB exploit

5

CVSSv2

The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent malicious users to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that t...

Libexpat Project Libexpat 2.0.1 Apache Http Server

5

CVSSv2

The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent malicious users to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer over-re...

Libexpat Project Libexpat 2.0.1 Apache Http Server

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook