Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2012-0841HistoryDec 21, 2012 - 5:46 a.m.
CVE-2012-0841
2012-12-2105:46:00
Debian Security Bug Tracker
security-tracker.debian.org
18
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.009 Low
EPSS
Percentile
82.7%
libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libxml2 | < 2.7.8.dfsg-8 | libxml2_2.7.8.dfsg-8_all.deb |
| Debian | 11 | all | libxml2 | < 2.7.8.dfsg-8 | libxml2_2.7.8.dfsg-8_all.deb |
| Debian | 10 | all | libxml2 | < 2.7.8.dfsg-8 | libxml2_2.7.8.dfsg-8_all.deb |
| Debian | 999 | all | libxml2 | < 2.7.8.dfsg-8 | libxml2_2.7.8.dfsg-8_all.deb |
| Debian | 13 | all | libxml2 | < 2.7.8.dfsg-8 | libxml2_2.7.8.dfsg-8_all.deb |
Related
redhat
redhat
(RHSA-2012:0324) Moderate: libxml2 security update
2012-02-21 00:00:00
(RHSA-2012:1324) Important: rhev-hypervisor5 security and bug fix update
2012-10-02 00:00:00
(RHSA-2013:0217) Important: mingw32-libxml2 security update
2013-01-31 00:00:00
oraclelinux
oraclelinux
libxml2 security update
2012-02-21 00:00:00
libxml2 security update
2012-09-18 00:00:00
mingw32-libxml2 security update
2013-01-31 00:00:00
nessus
nessus
Scientific Linux Security Update : libxml2 on SL5.x, SL6.x i386/x86_64 (20120221)
2012-08-01 00:00:00
Oracle Linux 5 / 6 : libxml2 (ELSA-2012-0324)
2013-07-12 00:00:00
openvas
openvas
RedHat Update for libxml2 RHSA-2012:0324-01
2012-02-27 00:00:00
Ubuntu: Security Advisory (USN-1376-1)
2012-03-07 00:00:00
Debian: Security Advisory (DSA-2417-1)
2012-03-12 00:00:00
cvelist
cvelist
CVE-2012-0841
2012-12-21 02:00:00
veracode
veracode
Denial Of Service (DoS) CPU Consumption
2019-05-02 04:52:19
ubuntucve
ubuntucve
CVE-2012-0841
2012-02-22 00:00:00
debian
debian
[SECURITY] [DSA 2417-1] libxml2 security update
2012-02-22 23:06:48
prion
prion
Code injection
2012-12-21 05:46:00
gentoo
gentoo
libxml2: Denial of service
2012-03-06 00:00:00
cve
cve
CVE-2012-0841
2012-12-21 05:46:00
securityvulns
securityvulns
libxmls library DoS
2012-02-24 00:00:00
[ MDVSA-2012:023 ] libxml2
2012-02-24 00:00:00
APPLE-SA-2014-01-22-1 iTunes 11.1.4
2014-01-29 00:00:00
centos
centos
libxml2 security update
2012-02-22 14:26:48
mingw32 security update
2013-02-01 00:53:30
amazon
amazon
Medium: libxml2
2012-03-04 16:12:00
ubuntu
ubuntu
libxml2 vulnerability
2012-02-27 00:00:00
vmware
vmware
VMware ESXi update to third party library
2012-07-12 00:00:00
VMware ESXi update to third party library
2012-07-12 00:00:00
VMware vSphere and vCOps updates to third party libraries
2012-08-30 00:00:00
suse
suse
Security update for libxml2 (important)
2013-11-04 17:04:12
Security update for libxml2 (important)
2013-11-04 18:04:12
fedora
fedora
[SECURITY] Fedora 16 Update: libxml2-2.7.8-8.fc16
2012-09-27 04:35:19
[SECURITY] Fedora 17 Update: libxml2-2.7.8-9.fc17
2012-09-26 08:56:06
oracle
oracle
Oracle Critical Patch Update - April 2013
2013-04-16 00:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.009 Low
EPSS
Percentile
82.7%
Related for DEBIANCVE:CVE-2012-0841