2017-10-16 12:31:07 -04:00
{
2019-03-18 01:46:49 +00:00
"CVE_data_meta" : {
"ASSIGNER" : "secalert@redhat.com" ,
"ID" : "CVE-2014-3584" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a" ,
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
} ,
"vendor_name" : "n/a"
}
]
}
} ,
"data_format" : "MITRE" ,
"data_type" : "CVE" ,
"data_version" : "4.0" ,
"description" : {
"description_data" : [
2017-10-16 12:31:07 -04:00
{
2019-03-18 01:46:49 +00:00
"lang" : "eng" ,
"value" : "The SamlHeaderInHandler in Apache CXF before 2.6.11, 2.7.x before 2.7.8, and 3.0.x before 3.0.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted SAML token in the authorization header of a request to a JAX-RS service."
2017-10-16 12:31:07 -04:00
}
2019-03-18 01:46:49 +00:00
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "n/a"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"name" : "[oss-security] 20141024 New security advisories released for Apache CXF" ,
"refsource" : "MLIST" ,
"url" : "http://seclists.org/oss-sec/2014/q4/437"
} ,
{
"name" : "61909" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/61909"
} ,
{
"name" : "70738" ,
"refsource" : "BID" ,
"url" : "http://www.securityfocus.com/bid/70738"
} ,
{
"name" : "apache-cxf-cve20143584-dos(97753)" ,
"refsource" : "XF" ,
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/97753"
} ,
{
"name" : "http://cxf.apache.org/security-advisories.data/CVE-2014-3584.txt.asc" ,
"refsource" : "CONFIRM" ,
"url" : "http://cxf.apache.org/security-advisories.data/CVE-2014-3584.txt.asc"
2020-01-16 15:01:13 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[cxf-commits] 20200116 svn commit: r1055336 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-12423.txt.asc security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html" ,
"url" : "https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E"
2020-03-19 12:01:22 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[cxf-commits] 20200319 svn commit: r1058035 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html" ,
"url" : "https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E"
2020-04-01 11:01:17 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[cxf-commits] 20200401 svn commit: r1058573 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2020-1954.txt.asc security-advisories.html" ,
"url" : "https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E"
2020-11-12 14:01:34 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[cxf-commits] 20201112 svn commit: r1067927 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2020-13954.txt.asc security-advisories.html" ,
"url" : "https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E"
2021-04-02 12:00:46 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[cxf-commits] 20210402 svn commit: r1073270 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2021-22696.txt.asc security-advisories.html" ,
"url" : "https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E"
2021-06-16 12:00:59 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[cxf-commits] 20210616 svn commit: r1075801 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2021-30468.txt.asc security-advisories.html" ,
"url" : "https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E"
2019-03-18 01:46:49 +00:00
}
]
}
}