Uploaded image for project: 'Derby'
  1. Derby
  2. DERBY-6807

XXE attack possible by using XmlVTI and the XML datatype

          Details

          • Type: Bug
          • Status: Closed
          • Priority: Major
          • Resolution: Fixed
          • Affects Version/s: 10.11.1.1
          • Fix Version/s: 10.12.1.1
          • Component/s: SQL
          • Labels:
            None
          • Urgency:
            Blocker
          • Issue & fix info:
            Patch Available, Release Note Needed
          • Bug behavior facts:
            Security

            Description

            The Derby XML datatype and XmlVTI can be exploited, via XXE-based attacks, to expose sensitive information or launch denial-of-service assaults. This issue has CVE id CVE-2015-1832. This issue was brought to our attention by Philippe Arteau.

              Attachments

              1. xmltest.diff
                2 kB
                Abhinav Gupta
              2. sqlxmlutil.diff
                2 kB
                Bryan Pendleton
              3. secureXmlVTI.diff
                2 kB
                Bryan Pendleton
              4. releaseNote.html
                1 kB
                Bryan Pendleton
              5. externalGeneralEntities.diff
                0.6 kB
                Bryan Pendleton
              6. error-stacktrace.out
                3 kB
                Bryan Pendleton

                Issue Links

                is related to

                Bug - A problem which impairs or prevents the functions of the product. DERBY-2131 External DTD files are accessed without a privileged block when Derby parses XML values that reference such DTDs.

                • Major - Major loss of function.
                • Closed

                Task - A task that needs to be done. DERBY-1758 Enable xmlSuite to run as part of derbyall in environments that have the required external jars.

                • Major - Major loss of function.
                • Closed

                Task - A task that needs to be done. JCR-4186 Use current Derby version

                • Minor - Minor loss of function, or other problem where easy workaround is present.
                • Closed
                There are no Sub-Tasks for this issue.

                  Activity

                    People

                    • Assignee:
                      bryanpendleton Bryan Pendleton
                      Reporter:
                      rhillegas Rick Hillegas
                    • Votes:
                      0 Vote for this issue
                      Watchers:
                      4 Start watching this issue

                      Dates

                      • Created:
                        Updated:
                        Resolved: