sblim-sfcb CIM-XML parser bug enables pre-auth remote denial of service
Original title: [Coordinated disclosure] sblim-sfcb: pre-auth remote DoS (and latent OOB NUL write) via unbounded quoted-attribute scan in CIM-XML parser (cimXmlParser.c getValue)
Espilon VR is seeking a CVE because upstream sfcb, last released as 1.4.9 in 2017, is abandoned.
Espilon VR reported a pre-authentication remote denial-of-service defect, with a latent weak out-of-bounds NUL write, in SBLIM SFCB’s CIM-XML parser. The issue is in an unbounded quoted-attribute scan in getValue in cimXmlParser.c. Upstream is abandoned, so the reporter asked MITRE for a CVE and notified distributions that still ship sfcb.
Unconfirmed: No CVE identifier is stated, and the snippet does not show the fix or confirm exploitation.
- The report says the last upstream release was 1.4.9 in 2017.
- Distributions that still ship sfcb are described as the realistic fix path.
- The posting mentions a one-line fix, but the feed snippet cuts off.
Impact: Pre-authentication remote denial of service
| Product | Affected |
|---|---|
| SBLIM sfcb | — |
- 1.Check whether a distribution still ships sfcb and apply its remediation when available.
- Products
- sblim-sfcb
- Organizations
- MITRE
From the original article
Posted by Eun0us / Espilon on Nov 10 To the MITRE CNA team and the sblim-sfcb distribution security teams, Espilon VR reports a remote, pre-authentication denial-of-service defect (with a latent, weak out-of-bounds write side effect) in the CIM-XML request parser of SBLIM SFCB. Upstream is abandoned (last release 1. 4.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.