# [Coordinated disclosure] sblim-sfcb: pre-auth remote DoS (and latent OOB NUL write) via unbounded quoted-attribute scan in CIM-XML parser (cimXmlParser.c getValue)

Source: [Open Source Security](https://seclists.org/oss-sec/2026/q4/627) · 2026-11-10 · Security
Page: https://themorning.dev/story/coordinated-disclosure-sblim-sfcb-pre-auth-remote-dos-and-latent-oob-nul-write-v-d340f4ffe8b458cf
Kind: security · Impact: high

## In brief

- Espilon VR reported a remote, pre-authentication denial-of-service defect in the CIM-XML request parser of SBLIM SFCB.
- The flaw is an unbounded quoted-attribute scan in cimXmlParser.c getValue, and it has a latent, weak out-of-bounds NUL write side effect.
- The report was made through coordinated disclosure to the MITRE CNA and the sblim-sfcb distribution security teams.

## Why it matters

An SFCB CIM server reachable over the network can be crashed by an unauthenticated request, so operators of exposed CIM-XML endpoints should treat it as a service-availability risk.

## Timeline

- 2026-11-10: Vulnerability disclosed on the oss-security mailing list through coordinated disclosure

## Coverage

- [[Coordinated disclosure] sblim-sfcb: pre-auth remote DoS (and latent OOB NUL write) via unbounded quoted-attribute scan in CIM-XML parser (cimXmlParser.c getValue)](https://seclists.org/oss-sec/2026/q4/627) — Open Source Security, 2026-11-10

Tags: security, vulnerability, denial-of-service, cim-xml, sblim-sfcb

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev