CVE-2013-7298 - Vulnerability Details - OpenCVE

query_params.cpp in cxxtools before 2.2.1 allows remote attackers to cause a denial of service (infinite recursion and crash) via an HTTP query that contains %% (double percent) characters.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Tntnet	Cxxtools

Configuration 1 [-]

cpe:2.3:a:tntnet:cxxtools:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://lists.fedoraproject.org/pipermail/package-announce/2014-January/127445.html
http://seclists.org/oss-sec/2014/q1/112
http://seclists.org/oss-sec/2014/q1/116
http://secunia.com/advisories/56363
http://www.securityfocus.com/bid/65020
http://www.tntnet.org/download/cxxtools-2.2.1/Releasenotes-2.2.1.markdown
https://exchange.xforce.ibmcloud.com/vulnerabilities/90564

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2014-01-26T20:00:00

Updated: 2024-08-06T18:01:20.310Z

Reserved: 2014-01-18T00:00:00

Link: CVE-2013-7298

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2014-01-26T20:55:06.330

Modified: 2025-04-11T00:51:21.963

Link: CVE-2013-7298

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2014-01-17T00:00:00", "descriptions": [{"lang": "en", "value": "query_params.cpp in cxxtools before 2.2.1 allows remote attackers to cause a denial of service (infinite recursion and crash) via an HTTP query that contains %% (double percent) characters."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "cxxtools-cve20137298-dos(90564)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90564"}, {"name": "65020", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/65020"}, {"name": "[oss-security] 20140118 Re: CVE requests / advisory: cxxtools <= 2.2, Tntnet <= 2.2", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://seclists.org/oss-sec/2014/q1/116"}, {"name": "[oss-security] 20140118 CVE requests / advisory: cxxtools <= 2.2, Tntnet <= 2.2", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://seclists.org/oss-sec/2014/q1/112"}, {"name": "56363", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/56363"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.tntnet.org/download/cxxtools-2.2.1/Releasenotes-2.2.1.markdown"}, {"name": "FEDORA-2014-1207", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-January/127445.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2013-7298", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "query_params.cpp in cxxtools before 2.2.1 allows remote attackers to cause a denial of service (infinite recursion and crash) via an HTTP query that contains %% (double percent) characters."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "cxxtools-cve20137298-dos(90564)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90564"}, {"name": "65020", "refsource": "BID", "url": "http://www.securityfocus.com/bid/65020"}, {"name": "[oss-security] 20140118 Re: CVE requests / advisory: cxxtools <= 2.2, Tntnet <= 2.2", "refsource": "MLIST", "url": "http://seclists.org/oss-sec/2014/q1/116"}, {"name": "[oss-security] 20140118 CVE requests / advisory: cxxtools <= 2.2, Tntnet <= 2.2", "refsource": "MLIST", "url": "http://seclists.org/oss-sec/2014/q1/112"}, {"name": "56363", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/56363"}, {"name": "http://www.tntnet.org/download/cxxtools-2.2.1/Releasenotes-2.2.1.markdown", "refsource": "CONFIRM", "url": "http://www.tntnet.org/download/cxxtools-2.2.1/Releasenotes-2.2.1.markdown"}, {"name": "FEDORA-2014-1207", "refsource": "FEDORA", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-January/127445.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T18:01:20.310Z"}, "title": "CVE Program Container", "references": [{"name": "cxxtools-cve20137298-dos(90564)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90564"}, {"name": "65020", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/65020"}, {"name": "[oss-security] 20140118 Re: CVE requests / advisory: cxxtools <= 2.2, Tntnet <= 2.2", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://seclists.org/oss-sec/2014/q1/116"}, {"name": "[oss-security] 20140118 CVE requests / advisory: cxxtools <= 2.2, Tntnet <= 2.2", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://seclists.org/oss-sec/2014/q1/112"}, {"name": "56363", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/56363"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.tntnet.org/download/cxxtools-2.2.1/Releasenotes-2.2.1.markdown"}, {"name": "FEDORA-2014-1207", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-January/127445.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2013-7298", "datePublished": "2014-01-26T20:00:00", "dateReserved": "2014-01-18T00:00:00", "dateUpdated": "2024-08-06T18:01:20.310Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:tntnet:cxxtools:*:*:*:*:*:*:*:*", "matchCriteriaId": "D717B2F6-C77C-46D2-B110-8A4236815233", "versionEndIncluding": "2.2", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "query_params.cpp in cxxtools before 2.2.1 allows remote attackers to cause a denial of service (infinite recursion and crash) via an HTTP query that contains %% (double percent) characters."}, {"lang": "es", "value": "query_params.cpp en cxxtools anterior a v2.2.1 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (recursi\u00f3n infinita y ca\u00edda) a trav\u00e9s de una consulta HTTP que contenga caracteres %% (doble porcentaje)."}], "id": "CVE-2013-7298", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2014-01-26T20:55:06.330", "references": [{"source": "cve@mitre.org", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-January/127445.html"}, {"source": "cve@mitre.org", "url": "http://seclists.org/oss-sec/2014/q1/112"}, {"source": "cve@mitre.org", "url": "http://seclists.org/oss-sec/2014/q1/116"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/56363"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/65020"}, {"source": "cve@mitre.org", "url": "http://www.tntnet.org/download/cxxtools-2.2.1/Releasenotes-2.2.1.markdown"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90564"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-January/127445.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://seclists.org/oss-sec/2014/q1/112"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://seclists.org/oss-sec/2014/q1/116"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/56363"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/65020"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.tntnet.org/download/cxxtools-2.2.1/Releasenotes-2.2.1.markdown"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90564"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-399"}], "source": "nvd@nist.gov", "type": "Primary"}]}