CVE-2013-5823
First published: Tue Oct 15 2013(Updated: )
A denial of service flaw was discovered in the com.sun.org.apache.xml.internal.security.utils.UnsyncByteArrayOutputStream class. A remote attacker could use this flaw to supply crafted XML that would lead to a denial of service.
Credit: secalert_us@oracle.com secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/icedtea | <2.4.3 | 2.4.3 |
| redhat/icedtea | <1.11.14 | 1.11.14 |
| redhat/icedtea | <1.12.7 | 1.12.7 |
| Oracle JRockit | <=r27.7.6 | |
| Oracle JRockit | =r27.7.1 | |
| Oracle JRockit | =r27.7.2 | |
| Oracle JRockit | =r27.7.3 | |
| Oracle JRockit | =r27.7.4 | |
| Oracle JRockit | =r27.7.5 | |
| Oracle JRE | <=1.7.0 | |
| Oracle JRE | =1.7.0 | |
| Oracle JRE | =1.7.0-update1 | |
| Oracle JRE | =1.7.0-update10 | |
| Oracle JRE | =1.7.0-update11 | |
| Oracle JRE | =1.7.0-update13 | |
| Oracle JRE | =1.7.0-update15 | |
| Oracle JRE | =1.7.0-update17 | |
| Oracle JRE | =1.7.0-update2 | |
| Oracle JRE | =1.7.0-update21 | |
| Oracle JRE | =1.7.0-update25 | |
| Oracle JRE | =1.7.0-update3 | |
| Oracle JRE | =1.7.0-update4 | |
| Oracle JRE | =1.7.0-update5 | |
| Oracle JRE | =1.7.0-update6 | |
| Oracle JRE | =1.7.0-update7 | |
| Oracle JRE | =1.7.0-update9 | |
| Oracle JDK | <=1.6.0 | |
| Oracle JDK | =1.6.0-update22 | |
| Oracle JDK | =1.6.0-update23 | |
| Oracle JDK | =1.6.0-update24 | |
| Oracle JDK | =1.6.0-update25 | |
| Oracle JDK | =1.6.0-update26 | |
| Oracle JDK | =1.6.0-update27 | |
| Oracle JDK | =1.6.0-update29 | |
| Oracle JDK | =1.6.0-update30 | |
| Oracle JDK | =1.6.0-update31 | |
| Oracle JDK | =1.6.0-update32 | |
| Oracle JDK | =1.6.0-update33 | |
| Oracle JDK | =1.6.0-update34 | |
| Oracle JDK | =1.6.0-update35 | |
| Oracle JDK | =1.6.0-update37 | |
| Oracle JDK | =1.6.0-update38 | |
| Oracle JDK | =1.6.0-update39 | |
| Oracle JDK | =1.6.0-update41 | |
| Oracle JDK | =1.6.0-update43 | |
| Oracle JDK | =1.6.0-update45 | |
| Oracle JDK | =1.6.0-update51 | |
| Sun JDK | =1.6.0 | |
| Sun JDK | =1.6.0-update_10 | |
| Sun JDK | =1.6.0-update_11 | |
| Sun JDK | =1.6.0-update_12 | |
| Sun JDK | =1.6.0-update_13 | |
| Sun JDK | =1.6.0-update_14 | |
| Sun JDK | =1.6.0-update_15 | |
| Sun JDK | =1.6.0-update_16 | |
| Sun JDK | =1.6.0-update_17 | |
| Sun JDK | =1.6.0-update_18 | |
| Sun JDK | =1.6.0-update_19 | |
| Sun JDK | =1.6.0-update_20 | |
| Sun JDK | =1.6.0-update_21 | |
| Sun JDK | =1.6.0-update_3 | |
| Sun JDK | =1.6.0-update_4 | |
| Sun JDK | =1.6.0-update_5 | |
| Sun JDK | =1.6.0-update_6 | |
| Sun JDK | =1.6.0-update_7 | |
| Sun JDK | =1.6.0-update1 | |
| Sun JDK | =1.6.0-update1_b06 | |
| Sun JDK | =1.6.0-update2 | |
| Oracle JDK | <=1.7.0 | |
| Oracle JDK | =1.7.0 | |
| Oracle JDK | =1.7.0-update1 | |
| Oracle JDK | =1.7.0-update10 | |
| Oracle JDK | =1.7.0-update11 | |
| Oracle JDK | =1.7.0-update13 | |
| Oracle JDK | =1.7.0-update15 | |
| Oracle JDK | =1.7.0-update17 | |
| Oracle JDK | =1.7.0-update2 | |
| Oracle JDK | =1.7.0-update21 | |
| Oracle JDK | =1.7.0-update25 | |
| Oracle JDK | =1.7.0-update3 | |
| Oracle JDK | =1.7.0-update4 | |
| Oracle JDK | =1.7.0-update5 | |
| Oracle JDK | =1.7.0-update6 | |
| Oracle JDK | =1.7.0-update7 | |
| Oracle JDK | =1.7.0-update9 | |
| Oracle JRockit | <=r28.2.8 | |
| Oracle JRockit | =r28.0.0 | |
| Oracle JRockit | =r28.0.1 | |
| Oracle JRockit | =r28.0.2 | |
| Oracle JRockit | =r28.1.0 | |
| Oracle JRockit | =r28.1.1 | |
| Oracle JRockit | =r28.1.3 | |
| Oracle JRockit | =r28.1.4 | |
| Oracle JRockit | =r28.1.5 | |
| Oracle JRockit | =r28.2.2 | |
| Oracle JRockit | =r28.2.3 | |
| Oracle JRockit | =r28.2.4 | |
| Oracle JRockit | =r28.2.5 | |
| Oracle JRockit | =r28.2.6 | |
| Oracle JRE | <=1.6.0 | |
| Oracle JRE | =1.6.0-update22 | |
| Oracle JRE | =1.6.0-update23 | |
| Oracle JRE | =1.6.0-update24 | |
| Oracle JRE | =1.6.0-update25 | |
| Oracle JRE | =1.6.0-update26 | |
| Oracle JRE | =1.6.0-update27 | |
| Oracle JRE | =1.6.0-update29 | |
| Oracle JRE | =1.6.0-update30 | |
| Oracle JRE | =1.6.0-update31 | |
| Oracle JRE | =1.6.0-update32 | |
| Oracle JRE | =1.6.0-update33 | |
| Oracle JRE | =1.6.0-update34 | |
| Oracle JRE | =1.6.0-update35 | |
| Oracle JRE | =1.6.0-update37 | |
| Oracle JRE | =1.6.0-update38 | |
| Oracle JRE | =1.6.0-update39 | |
| Oracle JRE | =1.6.0-update41 | |
| Oracle JRE | =1.6.0-update43 | |
| Oracle JRE | =1.6.0-update45 | |
| Oracle JRE | =1.6.0-update51 | |
| Sun JRE | =1.6.0 | |
| Sun JRE | =1.6.0-update_1 | |
| Sun JRE | =1.6.0-update_10 | |
| Sun JRE | =1.6.0-update_11 | |
| Sun JRE | =1.6.0-update_12 | |
| Sun JRE | =1.6.0-update_13 | |
| Sun JRE | =1.6.0-update_14 | |
| Sun JRE | =1.6.0-update_15 | |
| Sun JRE | =1.6.0-update_16 | |
| Sun JRE | =1.6.0-update_17 | |
| Sun JRE | =1.6.0-update_18 | |
| Sun JRE | =1.6.0-update_19 | |
| Sun JRE | =1.6.0-update_2 | |
| Sun JRE | =1.6.0-update_20 | |
| Sun JRE | =1.6.0-update_21 | |
| Sun JRE | =1.6.0-update_3 | |
| Sun JRE | =1.6.0-update_4 | |
| Sun JRE | =1.6.0-update_5 | |
| Sun JRE | =1.6.0-update_6 | |
| Sun JRE | =1.6.0-update_7 | |
| Sun JRE | =1.6.0-update_9 | |
| maven/org.apache.santuario:xmlsec | >=1.5.0<1.5.3 | 1.5.3 |
| maven/org.apache.santuario:xmlsec | >=1.4.0<1.4.8 | 1.4.8 |
| <=r27.7.6 | ||
| =r27.7.1 | ||
| =r27.7.2 | ||
| =r27.7.3 | ||
| =r27.7.4 | ||
| =r27.7.5 | ||
| <=1.7.0 | ||
| =1.7.0 | ||
| =1.7.0-update1 | ||
| =1.7.0-update10 | ||
| =1.7.0-update11 | ||
| =1.7.0-update13 | ||
| =1.7.0-update15 | ||
| =1.7.0-update17 | ||
| =1.7.0-update2 | ||
| =1.7.0-update21 | ||
| =1.7.0-update25 | ||
| =1.7.0-update3 | ||
| =1.7.0-update4 | ||
| =1.7.0-update5 | ||
| =1.7.0-update6 | ||
| =1.7.0-update7 | ||
| =1.7.0-update9 | ||
| <=1.6.0 | ||
| =1.6.0-update22 | ||
| =1.6.0-update23 | ||
| =1.6.0-update24 | ||
| =1.6.0-update25 | ||
| =1.6.0-update26 | ||
| =1.6.0-update27 | ||
| =1.6.0-update29 | ||
| =1.6.0-update30 | ||
| =1.6.0-update31 | ||
| =1.6.0-update32 | ||
| =1.6.0-update33 | ||
| =1.6.0-update34 | ||
| =1.6.0-update35 | ||
| =1.6.0-update37 | ||
| =1.6.0-update38 | ||
| =1.6.0-update39 | ||
| =1.6.0-update41 | ||
| =1.6.0-update43 | ||
| =1.6.0-update45 | ||
| =1.6.0-update51 | ||
| =1.6.0 | ||
| =1.6.0-update_10 | ||
| =1.6.0-update_11 | ||
| =1.6.0-update_12 | ||
| =1.6.0-update_13 | ||
| =1.6.0-update_14 | ||
| =1.6.0-update_15 | ||
| =1.6.0-update_16 | ||
| =1.6.0-update_17 | ||
| =1.6.0-update_18 | ||
| =1.6.0-update_19 | ||
| =1.6.0-update_20 | ||
| =1.6.0-update_21 | ||
| =1.6.0-update_3 | ||
| =1.6.0-update_4 | ||
| =1.6.0-update_5 | ||
| =1.6.0-update_6 | ||
| =1.6.0-update_7 | ||
| =1.6.0-update1 | ||
| =1.6.0-update1_b06 | ||
| =1.6.0-update2 | ||
| <=1.7.0 | ||
| =1.7.0 | ||
| =1.7.0-update1 | ||
| =1.7.0-update10 | ||
| =1.7.0-update11 | ||
| =1.7.0-update13 | ||
| =1.7.0-update15 | ||
| =1.7.0-update17 | ||
| =1.7.0-update2 | ||
| =1.7.0-update21 | ||
| =1.7.0-update25 | ||
| =1.7.0-update3 | ||
| =1.7.0-update4 | ||
| =1.7.0-update5 | ||
| =1.7.0-update6 | ||
| =1.7.0-update7 | ||
| =1.7.0-update9 | ||
| <=r28.2.8 | ||
| =r28.0.0 | ||
| =r28.0.1 | ||
| =r28.0.2 | ||
| =r28.1.0 | ||
| =r28.1.1 | ||
| =r28.1.3 | ||
| =r28.1.4 | ||
| =r28.1.5 | ||
| =r28.2.2 | ||
| =r28.2.3 | ||
| =r28.2.4 | ||
| =r28.2.5 | ||
| =r28.2.6 | ||
| <=1.6.0 | ||
| =1.6.0-update22 | ||
| =1.6.0-update23 | ||
| =1.6.0-update24 | ||
| =1.6.0-update25 | ||
| =1.6.0-update26 | ||
| =1.6.0-update27 | ||
| =1.6.0-update29 | ||
| =1.6.0-update30 | ||
| =1.6.0-update31 | ||
| =1.6.0-update32 | ||
| =1.6.0-update33 | ||
| =1.6.0-update34 | ||
| =1.6.0-update35 | ||
| =1.6.0-update37 | ||
| =1.6.0-update38 | ||
| =1.6.0-update39 | ||
| =1.6.0-update41 | ||
| =1.6.0-update43 | ||
| =1.6.0-update45 | ||
| =1.6.0-update51 | ||
| =1.6.0 | ||
| =1.6.0-update_1 | ||
| =1.6.0-update_10 | ||
| =1.6.0-update_11 | ||
| =1.6.0-update_12 | ||
| =1.6.0-update_13 | ||
| =1.6.0-update_14 | ||
| =1.6.0-update_15 | ||
| =1.6.0-update_16 | ||
| =1.6.0-update_17 | ||
| =1.6.0-update_18 | ||
| =1.6.0-update_19 | ||
| =1.6.0-update_2 | ||
| =1.6.0-update_20 | ||
| =1.6.0-update_21 | ||
| =1.6.0-update_3 | ||
| =1.6.0-update_4 | ||
| =1.6.0-update_5 | ||
| =1.6.0-update_6 | ||
| =1.6.0-update_7 | ||
| =1.6.0-update_9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
- http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/a7758faab30d
- https://rhn.redhat.com/errata/RHSA-2013-1440.html
- https://rhn.redhat.com/errata/RHSA-2013-1447.html
- https://rhn.redhat.com/errata/RHSA-2013-1451.html
- https://rhn.redhat.com/errata/RHSA-2013-1505.html
- https://rhn.redhat.com/errata/RHSA-2013-1508.html
- https://rhn.redhat.com/errata/RHSA-2013-1507.html
- https://rhn.redhat.com/errata/RHSA-2013-1793.html
- http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-October/025087.html
- http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-November/025278.html
- http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-November/025328.html
- https://rhn.redhat.com/errata/RHSA-2014-0414.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1019145
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html
- http://lists.opensuse.org/opensuse-updates/2013-11/msg00023.html
- http://marc.info/?l=bugtraq&m=138674031212883&w=2
- http://marc.info/?l=bugtraq&m=138674073720143&w=2
- http://rhn.redhat.com/errata/RHSA-2013-1440.html
- http://rhn.redhat.com/errata/RHSA-2013-1447.html
- http://rhn.redhat.com/errata/RHSA-2013-1451.html
- http://rhn.redhat.com/errata/RHSA-2013-1505.html
- http://rhn.redhat.com/errata/RHSA-2013-1507.html
- http://rhn.redhat.com/errata/RHSA-2013-1508.html
- http://rhn.redhat.com/errata/RHSA-2013-1793.html
- http://security.gentoo.org/glsa/glsa-201406-32.xml
- http://support.apple.com/kb/HT5982
- http://www-01.ibm.com/support/docview.wss?uid=swg21655201
- http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS13-025/index.html
- http://www.ubuntu.com/usn/USN-2033-1
- http://www.ubuntu.com/usn/USN-2089-1
- https://access.redhat.com/errata/RHSA-2014:0414
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18783
- https://nvd.nist.gov/vuln/detail/CVE-2013-5823
- https://github.com/apache/santuario-java/commit/cea3c91106fb8be35e2f1bb3f1fe0cfddd0ec710
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-5823
- https://lists.opensuse.org/opensuse-updates/2013-11/msg00023.html
- https://marc.info/?l=bugtraq&m=138674031212883&w=2
- https://marc.info/?l=bugtraq&m=138674073720143&w=2
- https://security.gentoo.org/glsa/glsa-201406-32.xml
- https://github.com/apache/santuario-java/commit/55a48497dfbf3fe63a81e67c13160b3f41ebb1f3
- https://github.com/apache/santuario-java/commit/f9a61f2df9473237aa71308c28113540b4063d33
- https://issues.apache.org/jira/browse/SANTUARIO-334
- https://github.com/advisories/GHSA-8gwc-x7mg-7p7p (Advisory)
- collector/nvd-index
- agent/first-publish-date
- agent/type
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-8gwc-x7mg-7p7p
- alias/CVE-2013-5823
- agent/software-canonical-lookup
- agent/severity
- agent/last-modified-date
- agent/references
- agent/description
- agent/author
- agent/softwarecombine
- agent/event
- collector/nvd-cve
- source/NVD
- collector/redhat-bugzilla
- source/Red Hat
- collector/github-advisory
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/oracle
- canonical/oracle jrockit
- version/oracle jrockit/r27.7.6
- version/oracle jrockit/r27.7.1
- version/oracle jrockit/r27.7.2
- version/oracle jrockit/r27.7.3
- version/oracle jrockit/r27.7.4
- version/oracle jrockit/r27.7.5
- canonical/oracle jre
- version/oracle jre/1.7.0
- version/oracle jre/1.7.0-update1
- version/oracle jre/1.7.0-update10
- version/oracle jre/1.7.0-update11
- version/oracle jre/1.7.0-update13
- version/oracle jre/1.7.0-update15
- version/oracle jre/1.7.0-update17
- version/oracle jre/1.7.0-update2
- version/oracle jre/1.7.0-update21
- version/oracle jre/1.7.0-update25
- version/oracle jre/1.7.0-update3
- version/oracle jre/1.7.0-update4
- version/oracle jre/1.7.0-update5
- version/oracle jre/1.7.0-update6
- version/oracle jre/1.7.0-update7
- version/oracle jre/1.7.0-update9
- canonical/oracle jdk
- version/oracle jdk/1.6.0
- version/oracle jdk/1.6.0-update22
- version/oracle jdk/1.6.0-update23
- version/oracle jdk/1.6.0-update24
- version/oracle jdk/1.6.0-update25
- version/oracle jdk/1.6.0-update26
- version/oracle jdk/1.6.0-update27
- version/oracle jdk/1.6.0-update29
- version/oracle jdk/1.6.0-update30
- version/oracle jdk/1.6.0-update31
- version/oracle jdk/1.6.0-update32
- version/oracle jdk/1.6.0-update33
- version/oracle jdk/1.6.0-update34
- version/oracle jdk/1.6.0-update35
- version/oracle jdk/1.6.0-update37
- version/oracle jdk/1.6.0-update38
- version/oracle jdk/1.6.0-update39
- version/oracle jdk/1.6.0-update41
- version/oracle jdk/1.6.0-update43
- version/oracle jdk/1.6.0-update45
- version/oracle jdk/1.6.0-update51
- vendor/sun
- canonical/sun jdk
- version/sun jdk/1.6.0
- version/sun jdk/1.6.0-update_10
- version/sun jdk/1.6.0-update_11
- version/sun jdk/1.6.0-update_12
- version/sun jdk/1.6.0-update_13
- version/sun jdk/1.6.0-update_14
- version/sun jdk/1.6.0-update_15
- version/sun jdk/1.6.0-update_16
- version/sun jdk/1.6.0-update_17
- version/sun jdk/1.6.0-update_18
- version/sun jdk/1.6.0-update_19
- version/sun jdk/1.6.0-update_20
- version/sun jdk/1.6.0-update_21
- version/sun jdk/1.6.0-update_3
- version/sun jdk/1.6.0-update_4
- version/sun jdk/1.6.0-update_5
- version/sun jdk/1.6.0-update_6
- version/sun jdk/1.6.0-update_7
- version/sun jdk/1.6.0-update1
- version/sun jdk/1.6.0-update1_b06
- version/sun jdk/1.6.0-update2
- version/oracle jdk/1.7.0
- version/oracle jdk/1.7.0-update1
- version/oracle jdk/1.7.0-update10
- version/oracle jdk/1.7.0-update11
- version/oracle jdk/1.7.0-update13
- version/oracle jdk/1.7.0-update15
- version/oracle jdk/1.7.0-update17
- version/oracle jdk/1.7.0-update2
- version/oracle jdk/1.7.0-update21
- version/oracle jdk/1.7.0-update25
- version/oracle jdk/1.7.0-update3
- version/oracle jdk/1.7.0-update4
- version/oracle jdk/1.7.0-update5
- version/oracle jdk/1.7.0-update6
- version/oracle jdk/1.7.0-update7
- version/oracle jdk/1.7.0-update9
- version/oracle jrockit/r28.2.8
- version/oracle jrockit/r28.0.0
- version/oracle jrockit/r28.0.1
- version/oracle jrockit/r28.0.2
- version/oracle jrockit/r28.1.0
- version/oracle jrockit/r28.1.1
- version/oracle jrockit/r28.1.3
- version/oracle jrockit/r28.1.4
- version/oracle jrockit/r28.1.5
- version/oracle jrockit/r28.2.2
- version/oracle jrockit/r28.2.3
- version/oracle jrockit/r28.2.4
- version/oracle jrockit/r28.2.5
- version/oracle jrockit/r28.2.6
- version/oracle jre/1.6.0
- version/oracle jre/1.6.0-update22
- version/oracle jre/1.6.0-update23
- version/oracle jre/1.6.0-update24
- version/oracle jre/1.6.0-update25
- version/oracle jre/1.6.0-update26
- version/oracle jre/1.6.0-update27
- version/oracle jre/1.6.0-update29
- version/oracle jre/1.6.0-update30
- version/oracle jre/1.6.0-update31
- version/oracle jre/1.6.0-update32
- version/oracle jre/1.6.0-update33
- version/oracle jre/1.6.0-update34
- version/oracle jre/1.6.0-update35
- version/oracle jre/1.6.0-update37
- version/oracle jre/1.6.0-update38
- version/oracle jre/1.6.0-update39
- version/oracle jre/1.6.0-update41
- version/oracle jre/1.6.0-update43
- version/oracle jre/1.6.0-update45
- version/oracle jre/1.6.0-update51
- canonical/sun jre
- version/sun jre/1.6.0
- version/sun jre/1.6.0-update_1
- version/sun jre/1.6.0-update_10
- version/sun jre/1.6.0-update_11
- version/sun jre/1.6.0-update_12
- version/sun jre/1.6.0-update_13
- version/sun jre/1.6.0-update_14
- version/sun jre/1.6.0-update_15
- version/sun jre/1.6.0-update_16
- version/sun jre/1.6.0-update_17
- version/sun jre/1.6.0-update_18
- version/sun jre/1.6.0-update_19
- version/sun jre/1.6.0-update_2
- version/sun jre/1.6.0-update_20
- version/sun jre/1.6.0-update_21
- version/sun jre/1.6.0-update_3
- version/sun jre/1.6.0-update_4
- version/sun jre/1.6.0-update_5
- version/sun jre/1.6.0-update_6
- version/sun jre/1.6.0-update_7
- version/sun jre/1.6.0-update_9
- package-manager/maven
- package-manager/redhat