CVE-2015-0851: Xmltooling Project Xmltooling

Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days.

XMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibboleth Service Provider (SP), does not properly handle integer conversion exceptions, which allows remote attackers to cause a denial of service (crash) via schema-invalid XML data.

Affected products

• Xmltooling Project Xmltooling: up to and including 1.5.4

Published 2015-08-12. Last modified 2026-06-17.