CVE-2017-1000061

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-1000061
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000061.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-1000061
Related
Published
2017-07-17T13:18:17Z
Modified
2025-04-20T03:28:55.023032Z
Downstream
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H CVSS Calculator
Summary
[none]
Details

xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting in possible information disclosure or denial of service

References

Affected packages

Debian:11 / xmlsec1

Package

Name
xmlsec1
Purl
pkg:deb/debian/xmlsec1?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2.24-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / xmlsec1

Package

Name
xmlsec1
Purl
pkg:deb/debian/xmlsec1?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2.24-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / xmlsec1

Package

Name
xmlsec1
Purl
pkg:deb/debian/xmlsec1?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2.24-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / github.com/lsh123/xmlsec

Affected ranges

Type
GIT
Repo
https://github.com/lsh123/xmlsec
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0dcb578db2c1073460958a1d08fafc379c747c98

Affected versions

Other

XMLSEC_0211104
XMLSEC_0_0_X_START
XMLSEC_1_2_X_START
XMLSEC_MIGRATION_TO_GITHUB
XMLSEC_MSCRYPTO_083103_START
start
xmlsec-
xmlsec-0_0_10
xmlsec-0_0_5
xmlsec-0_0_7
xmlsec-0_0_8
xmlsec-0_0_8a
xmlsec-0_0_9
xmlsec-0_1_0
xmlsec-0_1_1
xmlsec-1_0_0
xmlsec-1_0_0pre1
xmlsec-1_0_0rc1
xmlsec-1_0_1
xmlsec-1_0_2
xmlsec-1_0_3
xmlsec-1_0_4
xmlsec-1_1_0
xmlsec-1_1_1
xmlsec-1_1_2
xmlsec-1_2_0
xmlsec-1_2_1
xmlsec-1_2_10
xmlsec-1_2_11
xmlsec-1_2_13
xmlsec-1_2_14
xmlsec-1_2_15
xmlsec-1_2_16
xmlsec-1_2_17
xmlsec-1_2_18
xmlsec-1_2_19
xmlsec-1_2_2
xmlsec-1_2_20
xmlsec-1_2_21
xmlsec-1_2_22
xmlsec-1_2_23
xmlsec-1_2_3
xmlsec-1_2_4
xmlsec-1_2_5
xmlsec-1_2_6
xmlsec-1_2_7
xmlsec-1_2_8
xmlsec-1_2_9