All CVEs — page 415 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The Apache XmlSchema walker has a flaw where it fails to detect cycles in type derivation, substitution groups, model groups, or attribute groups, leading to infinite recursion and stack overflow when processing malicious schemas. This creates a reliable denial-of-service vulnerability that can crash applications using the xmlschema-walker component.
Apache XmlSchema allows unlimited nesting depth in schema structures, leading to stack overflow during parsing and resulting in denial of service. This vulnerability affects applications that process XML schemas and can be triggered by maliciously crafted schemas.
Apache XmlSchema allows unlimited nesting of schema imports and includes, leading to stack overflow during parsing and resulting in denial of service. This vulnerability can be exploited by sending a maliciously crafted XML schema that causes deep recursion.