The SimpleSAML_XML_Validator class constructor in SimpleSAMLphp before 1.14.11 might allow remote attackers to spoof signatures on SAML 1 responses or possibly cause a denial of service (memory consumption) by leveraging improper conversion of return values to boolean.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The SimpleSAML_XML_Validator class constructor in SimpleSAMLphp before 1.14.11 might allow remote     attackers to spoof signatures on SAML 1 responses or possibly cause a denial of service (memory     consumption) by leveraging improper conversion of return values to boolean. (CVE-2016-9955)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The SimpleSAML_XML_Validator class constructor in SimpleSAMLphp before 1.14.11 might allow remote
    attackers to spoof signatures on SAML 1 responses or possibly cause a denial of service (memory
    consumption) by leveraging improper conversion of return values to boolean. (CVE-2016-9955)

Several vulnerabilities have been discovered in SimpleSAMLphp, a framework for authentication, primarily via the SAML protocol.

CVE-2016-9814 & CVE-2016-9955

An incorrect check of return values in the signature validation utilities allowed an attacker to get invalid signatures accepted as valid in the rare case of an error occurring during validation.

SSPSA-201802-01 (no CVE yet)

Critical signature validation vulnerability.

In addition this update adds a patch to solve excessive resource consumption in case of SimpleSAMLphp processing a large metadata file.

For Debian 7 'Wheezy', these problems have been fixed in version 1.9.2-1+deb7u3.

We recommend that you upgrade your simplesamlphp packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
254649	Linux Distros Unpatched Vulnerability : CVE-2016-9955	Nessus	Misc.	Local	medium
431706	SCA: security update for simplesamlphp/simplesamlphp (GHSA-p9cm-r7jg-8q3g)	Tenable Cloud Security	SCA Checks	Local	medium
431706	SCA: security update for simplesamlphp/simplesamlphp (GHSA-p9cm-r7jg-8q3g)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
107133	Debian DLA-1298-1 : simplesamlphp security update	Nessus	Debian Local Security Checks	Local	critical

Detections

Analytics

CVE-2016-9955

medium

Tenable Plugins

medium

medium

medium

critical