CVE-2011-2516

no score yetEPSS 7.7%

Off-by-one error in the XML signature feature in Apache XML Security for C++ 1.6.0, as used in Shibboleth before 2.4.3 and possibly other products, allows remote attackers to cause a denial of service (crash) via a signature using a large RSA key, which triggers a buffer overflow.

EPSS: 7.7% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-189
Published: 2011-07-11
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

apache:xml_security_for_c\+\+
shibboleth:shibboleth-sp

References

http://lists.fedoraproject.org/pipermail/package-announce/2011-July/063159.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-July/063229.html
http://santuario.apache.org/secadv/CVE-2011-2516.txt
http://secunia.com/advisories/45151
http://secunia.com/advisories/45191

Check your stack JSON