CVE-2013-5372: Medium severity ibm websphere message broker vulnerability
The XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0 before 8.0.0.4 and IBM Integration Bus 9.0 before 9.0.0.1 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document that triggers expansion for many entities.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5372?
CVE-2013-5372 is classified as a denial of service vulnerability due to memory consumption issues caused by XML parsing.
How do I fix CVE-2013-5372?
To fix CVE-2013-5372, upgrade to IBM WebSphere Message Broker version 6.1.0.12, 7.0.0.7, 8.0.0.4, or IBM Integration Bus version 9.0.0.1 or later.
Who is affected by CVE-2013-5372?
CVE-2013-5372 affects users of IBM WebSphere Message Broker versions 6.1, 7.0, 8.0 and IBM Integration Bus versions prior to 9.0.0.1.
What causes the CVE-2013-5372 vulnerability?
CVE-2013-5372 is caused by an XML4J parser bug that leads to excessive memory consumption through crafted XML documents.
What can typically happen if CVE-2013-5372 is exploited?
Exploitation of CVE-2013-5372 can result in a denial of service, making the affected application unresponsive.