CVE-2019-5427
c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration.
- Score
- CVSS 3.1 7.5 High
- Status
- Analyzed - support@hackerone.com
- Published
- 2019-04-22
- Last modified
- 2024-08-04
- Weaknesses
- CWE-776
Affected products
- Fedora (Fedoraproject)
- C3p0 (Mchange)
- Communications Ip Service Activator (Oracle)
- Communications Session Route Manager (Oracle)
- Documaker (Oracle)
- Enterprise Manager Base Platform (Oracle)
- Enterprise Manager Ops Center (Oracle)
- Flexcube Private Banking (Oracle)
- Hyperion Infrastructure Technology (Oracle)
- Retail Xstore Point Of Service (Oracle)
- Webcenter Sites (Oracle)
References
- https://hackerone.com/reports/509315
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFIVX6HOVNLAM7W3SUAMHY…
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MQ47OFV57Y2DAHMGA5H3JO…
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://www.oracle.com/security-alerts/cpujan2021.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://www.oracle.com/security-alerts/cpuoct2021.html
