suse · CVE-2013-1824

Quick triage

Priority: high Published: 2021-05-30 13:10:43 UTC Updated: 2026-04-18 18:59:52 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2013-1824 severity important: SUSE including 193 source package names (apache2-mod_php5-5.6.28-1.1, apache2-mod_php7-7.0.14-1.4, …), 195 product×package rows across 12 product lines (SUSE Linux Enterprise Point of Service 11 SP3, SUSE Linux Enterprise Server 11 SP3 for Teradata, … (12 product lines)): Fixed 192, Known Not Affected 3.

Description:

The SOAP parser in PHP before 5.3.22 and 5.4.x before 5.4.12 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the soap_xmlParseFile and soap_xmlParseMemory functions.

cvelogic Threat Intelligence