Security · High impactFan score 22 · Tier C
[Coordinated disclosure] sblim-sfcb: pre-auth remote DoS (and latent OOB NUL write) via unbounded quoted-attribute scan in CIM-XML parser (cimXmlParser.c getValue)
The Brief
- Espilon VR reported a remote, pre-authentication denial-of-service defect in the CIM-XML request parser of SBLIM SFCB.
- The flaw is an unbounded quoted-attribute scan in cimXmlParser.c getValue, and it has a latent, weak out-of-bounds NUL write side effect.
- The report was made through coordinated disclosure to the MITRE CNA and the sblim-sfcb distribution security teams.
Why it matters
An SFCB CIM server reachable over the network can be crashed by an unauthenticated request, so operators of exposed CIM-XML endpoints should treat it as a service-availability risk.
Who’s affected
- Operators running the sblim-sfcb CIM server
- #security
- #vulnerability
- #denial-of-service
- #cim-xml
- #sblim-sfcb
Posted by Eun0us / Espilon on Nov 10 To the MITRE CNA team and the sblim-sfcb distribution security teams, Espilon VR reports a remote, pre-authentication denial-of-service defect (with a latent, weak out-of-bounds write side effect) in the CIM-XML request parser of SBLIM SFCB…
Timeline
Vulnerability disclosed on the oss-security mailing list through coordinated disclosure
Open Source Security
[Coordinated disclosure] sblim-sfcb: pre-auth remote DoS (and latent OOB NUL write) via unbounded quoted-attribute scan in CIM-XML parser (cimXmlParser.c getValue)