CVE-2016-10149 Pysaml2 does not sanitize XML responses
Remote attackers can read arbitrary files via crafted SAML XML requests in the PySAML2 library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-10149?
CVE-2016-10149 is a high-severity vulnerability in Debian Debian Linux, published on 24 Mar 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
XML External Entity (XXE) vulnerability in PySAML2 4.4.0 and earlier allows remote attackers to read arbitrary files via a crafted SAML XML request or response.
Weakness: CWE-611
Which versions are affected by CVE-2016-10149?
3 open source packages ship an affected version, including pysaml2. It affects 2 products.
| Package | Affected | Fixed in |
|---|---|---|
pysaml2 PyPI | All versions | 4.5.0 |
pysaml2 PyPI | All versions | 4.5.0 |
pysaml2 PyPI | All versions | 4.5.0 |
Linux distribution packages (6)
python-defusedxml Red Hat:openstack:10::el7 | All versions | 0:0.5.0-1.el7ost |
python-pysaml2 Red Hat:openstack:10::el7 | All versions | 0:3.0.2-3.el7ost |
python-defusedxml Red Hat:openstack:8::el7 | All versions | 0:0.5.0-1.el7ost |
python-pysaml2 Red Hat:openstack:8::el7 | All versions | 0:3.0.2-3.el7ost |
python-defusedxml Red Hat:openstack:9::el7 | All versions | 0:0.5.0-1.el7ost |
python-pysaml2 Red Hat:openstack:9::el7 | All versions | 0:3.0.2-3.el7ost |
Products include Debian Debian Linux, Pysaml2 Project Pysaml2.
How do I fix CVE-2016-10149?
Upgrade pysaml2 to 4.5.0 or later.
Is CVE-2016-10149 being exploited?
There is no known exploitation of CVE-2016-10149 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as DEBIAN-CVE-2016-10149, DSA-3759-1, GHSA-c2vx-49jm-h3f6, PYSEC-2017-25, RHSA-2017:0936, RHSA-2017:0937 and 3 more.