VDB
RHSA-2014%3A0582
RHSA-2014%3A0582
PUBLISHED
CVSS 5 MEDIUM
Record from redhat · Published May 29, 2014
It was discovered that the Apache Santuario XML Security for Java project allowed Document Type Definitions (DTDs) to be processed when applying Transforms even when secure validation was enabled. A remote attacker could use this flaw to exhaust all available memory on the system, causing a denial of service.
Risk scores
CVSS 2.0
5
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat JBoss SOA Platform 5.3 |
Timeline
- May 29, 2014 CVE Published
- Apr 29, 2026 Distribution Patch (2 in total, the first dated here)
- Apr 29, 2026 Security Advisory (2 in total, the first dated here)
- May 14, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln RHSA-2014%3A0582
vulnetix vdb fixes RHSA-2014%3A0582Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/RHSA-2014%253A0582/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://access.redhat.com/errata/RHSA-2014:0582 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1045257 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0582.json advisory
- https://nvd.nist.gov/vuln/detail/CVE-2013-4517 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=soaplatform&downloadType=securityPatches&version=5.3.1+GA advisory
- https://access.redhat.com/security/cve/CVE-2013-4517 advisory
- https://www.cve.org/CVERecord?id=CVE-2013-4517 advisory