Aller au contenu
en Se connecter
Non notée

CVE-2026-102496 Apache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema model, so a…

Description

Apache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema model, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial of service. Users are recommended to upgrade to version 2.3.3, which fixes this issue.

Produits et versions touchés

Produit Versions touchées Corrigé en
Apache XMLSchema 2.3 premières → < 2.3.3 2.3.3

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Apache XMLSchema

Les 3 CVE de Apache XMLSchema →
CVE-2026-102497 The Apache XmlSchema walker (xmlschema-walker) doesn't detect cycles in type derivation, substitution groups, model… Non notée CVE-2026-102495 Apache XmlSchema doesn't limit how deeply schema imports and includes can be nested, so a malicious schema can make… Non notée
Suivre cette CVE