https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 26 Oct 2026 18:13:31 +0000 https://cve.radiocsirt.org/vuln/cnvd-2016-13109 cnvd-2016-13109 https://cve.radiocsirt.org/vuln/cnvd-2016-13109 https://cve.radiocsirt.org/vuln/euvd-2026-88187 EUVD-2026-88187 https://cve.radiocsirt.org/vuln/euvd-2026-88187 https://cve.radiocsirt.org/vuln/fkie_cve-2016-9955 <p>The SimpleSAML_XML_Validator class constructor in SimpleSAMLphp before 1.14.11 might allow remote attackers to spoof signatures on SAML 1 responses or possibly cause a denial of service (memory consumption) by leveraging improper conversion of return values to boolean.</p> <p>The SimpleSAML_XML_Validator class constructor in SimpleSAMLphp before 1.14.11 might allow remote attackers to spoof signatures on SAML 1 responses or possibly cause a denial of service (memory consumption) by leveraging improper conversion of return values to boolean.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-9955 https://cve.radiocsirt.org/vuln/ghsa-p9cm-r7jg-8q3g <p><strong>Affected:</strong> Packagist: simplesamlphp/simplesamlphp</p> <p>### Background An incorrect check of return values in the signature validation utilities allows an attacker to get invalid signatures accepted as valid by forcing an error during validation.</p> <p>### Description The `SimpleSAML_XML_Validator` class allows the verification of the XML digital signature of a SAML 1 message with a given key. In particular, the constructor of the class receives an XML node and a key to verify it and throws an exception in case there is an error, either caused by incorrect input or an invalid signature. This method uses the `verify()` method from the `RobRichards\XMLSecDSig` class to verify the signature with the given key, which in turn will end up calling `openssl_verify()` depending on the signature algorithm used.</p> <p>The `openssl_verify()` function returns `1` when the signature was successfully verified, `0` if it failed to verify with the given key and `-1` in case an error occurs. PHP allows translating numerical values to boolean implicitly, with the following correspondences:</p> <p>- `0` equals `false` - Non-zero equals `true`</p> <p>This means that an implicit conversion to _boolean_ of the values returned by `openssl_verify()` will convert an error state, signaled by the value `-1`, to successful verification of the signature (represented by the _boolean_ `true`).</p> <p>The aforementioned constructor was performing an implicit conversion to boolean of the values returned by the `verify()` method, which subsequently will return the same output as `openssl_ver…</p> <p><strong>Affected:</strong> Packagist: simplesamlphp/simplesamlphp</p> <p>### Background An incorrect check of return values in the signature validation utilities allows an attacker to get invalid signatures accepted as valid by forcing an error during validation.</p> <p>### Description The `SimpleSAML_XML_Validator` class allows the verification of the XML digital signature of a SAML 1 message with a given key. In particular, the constructor of the class receives an XML node and a key to verify it and throws an exception in case there is an error, either caused by incorrect input or an invalid signature. This method uses the `verify()` method from the `RobRichards\XMLSecDSig` class to verify the signature with the given key, which in turn will end up calling `openssl_verify()` depending on the signature algorithm used.</p> <p>The `openssl_verify()` function returns `1` when the signature was successfully verified, `0` if it failed to verify with the given key and `-1` in case an error occurs. PHP allows translating numerical values to boolean implicitly, with the following correspondences:</p> <p>- `0` equals `false` - Non-zero equals `true`</p> <p>This means that an implicit conversion to _boolean_ of the values returned by `openssl_verify()` will convert an error state, signaled by the value `-1`, to successful verification of the signature (represented by the _boolean_ `true`).</p> <p>The aforementioned constructor was performing an implicit conversion to boolean of the values returned by the `verify()` method, which subsequently will return the same output as `openssl_ver…</p> https://cve.radiocsirt.org/vuln/ghsa-p9cm-r7jg-8q3g https://cve.radiocsirt.org/vuln/gsd-2016-9955 gsd-2016-9955 https://cve.radiocsirt.org/vuln/gsd-2016-9955 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-9955 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: simplesamlphp</p> <p>The SimpleSAML_XML_Validator class constructor in SimpleSAMLphp before 1.14.11 might allow remote attackers to spoof signatures on SAML 1 responses or possibly cause a denial of service (memory consumption) by leveraging improper conversion of return values to boolean.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: simplesamlphp</p> <p>The SimpleSAML_XML_Validator class constructor in SimpleSAMLphp before 1.14.11 might allow remote attackers to spoof signatures on SAML 1 responses or possibly cause a denial of service (memory consumption) by leveraging improper conversion of return values to boolean.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-9955