https://bugzilla.redhat.com/show_bug.cgi?id=1443585
Bug ID: 1443585
Summary: CVE-2017-5661 fop: XML external entity processing
vulnerability
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: anemec(a)redhat.com
CC: bmcclain(a)redhat.com, c.david86(a)gmail.com,
dblechte(a)redhat.com, eedri(a)redhat.com,
gklein(a)redhat.com, java-maint(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
lsurette(a)redhat.com, mgoldboi(a)redhat.com,
michal.skrivanek(a)redhat.com, mizdebsk(a)redhat.com,
msimacek(a)redhat.com, rbalakri(a)redhat.com,
rhbugs(a)n-dimensional.de, Rhev-m-bugs(a)redhat.com,
r.landmann(a)redhat.com, sbonazzo(a)redhat.com,
sherold(a)redhat.com, srevivo(a)redhat.com,
ydary(a)redhat.com, ykaul(a)redhat.com
In Apache FOP before 2.2, files lying on the filesystem of the server which
uses FOP can be revealed to arbitrary users who send maliciously formed SVG
files. The file types that can be shown depend on the user context in which the
exploitable application is running. If the user is root a full compromise of
the server - including confidential or sensitive files - would be possible. XXE
can also be used to attack the availability of the server via denial of service
as the references within a xml document can trivially trigger an amplification
attack.
References:
https://xmlgraphics.apache.org/security.html
http://seclists.org/oss-sec/2017/q2/86
--
You are receiving this mail because:
You are on the CC list for the bug.