CVE-2011-2516: Buffer Overflow
Off-by-one error in the XML signature feature in Apache XML Security for C++ 1.6.0, as used in Shibboleth before 2.4.3 and possibly other products, allows remote attackers to cause a denial of service (crash) via a signature using a large RSA key, which triggers a buffer overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2516?
CVE-2011-2516 is categorized as a denial of service vulnerability that may lead to application crashes.
How do I fix CVE-2011-2516?
To fix CVE-2011-2516, upgrade to a corrected version of Apache XML Security for C++ or Shibboleth that addresses this vulnerability.
Which versions are affected by CVE-2011-2516?
CVE-2011-2516 affects Apache XML Security for C++ 1.6.0 and versions of Shibboleth before 2.4.3, including several specific 1.x and 2.x versions.
What type of attack does CVE-2011-2516 enable?
CVE-2011-2516 enables remote attackers to crash the application through a crafted XML signature that triggers a buffer overflow.
Is CVE-2011-2516 a network-accessible vulnerability?
Yes, CVE-2011-2516 is network-accessible as it can be exploited by remote attackers without physical access.