Vulnerability Details : CVE-2016-9955
The SimpleSAML_XML_Validator class constructor in SimpleSAMLphp before 1.14.11 might allow remote attackers to spoof signatures on SAML 1 responses or possibly cause a denial of service (memory consumption) by leveraging improper conversion of return values to boolean.
Vulnerability category: Input validationDenial of service
Products affected by CVE-2016-9955
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:simplesamlphp:simplesamlphp:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2016-9955
0.53%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 74 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2016-9955
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.0
|
MEDIUM | AV:N/AC:H/Au:N/C:N/I:P/A:P |
4.9
|
4.9
|
NIST | |
|
6.3
|
MEDIUM | CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H |
1.0
|
5.2
|
NIST |
CWE ids for CVE-2016-9955
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
References for CVE-2016-9955
-
http://www.securityfocus.com/bid/94946
SimpleSAMLphp CVE-2016-9955 Security Bypass VulnerabilityThird Party Advisory;VDB Entry
-
https://simplesamlphp.org/security/201612-02
SimpleSAMLphpVendor Advisory
-
https://lists.debian.org/debian-lts-announce/2018/03/msg00001.html
[SECURITY] [DLA 1297-1] simplesamlphp security updateThird Party Advisory
Jump to