Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2012-0876HistoryJul 03, 2012 - 7:55 p.m.
CVE-2012-0876
2012-07-0319:55:00
Debian Security Bug Tracker
security-tracker.debian.org
12
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.004 Low
EPSS
Percentile
73.9%
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | expat | < 2.1.0~beta3-1 | expat_2.1.0~beta3-1_all.deb |
| Debian | 11 | all | expat | < 2.1.0~beta3-1 | expat_2.1.0~beta3-1_all.deb |
| Debian | 10 | all | expat | < 2.1.0~beta3-1 | expat_2.1.0~beta3-1_all.deb |
| Debian | 999 | all | expat | < 2.1.0~beta3-1 | expat_2.1.0~beta3-1_all.deb |
| Debian | 13 | all | expat | < 2.1.0~beta3-1 | expat_2.1.0~beta3-1_all.deb |
| Debian | 12 | all | xmlrpc-c | < 1.16.33-3.2 | xmlrpc-c_1.16.33-3.2_all.deb |
| Debian | 11 | all | xmlrpc-c | < 1.16.33-3.2 | xmlrpc-c_1.16.33-3.2_all.deb |
| Debian | 10 | all | xmlrpc-c | < 1.16.33-3.2 | xmlrpc-c_1.16.33-3.2_all.deb |
| Debian | 999 | all | xmlrpc-c | < 1.16.33-3.2 | xmlrpc-c_1.16.33-3.2_all.deb |
| Debian | 13 | all | xmlrpc-c | < 1.16.33-3.2 | xmlrpc-c_1.16.33-3.2_all.deb |
Related
openvas
openvas
Fedora Update for expat FEDORA-2012-4936
2012-08-30 00:00:00
Fedora Update for expat FEDORA-2012-5058
2012-05-04 00:00:00
Fedora Update for expat FEDORA-2012-6996
2012-05-17 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: expat-2.1.0-1.fc15
2012-05-15 23:27:15
[SECURITY] Fedora 16 Update: expat-2.1.0-1.fc16
2012-05-01 00:51:58
[SECURITY] Fedora 17 Update: expat-2.1.0-1.fc17
2012-04-12 03:36:59
nessus
nessus
Fedora 15 : expat-2.1.0-1.fc15 (2012-6996)
2012-05-16 00:00:00
Fedora 17 : expat-2.1.0-1.fc17 (2012-4936)
2012-04-12 00:00:00
Fedora 16 : expat-2.1.0-1.fc16 (2012-5058)
2012-05-01 00:00:00
ubuntucve
ubuntucve
prion
prion
Code injection
2012-07-03 19:55:00
Code injection
2016-06-16 18:59:00
cve
cve
CVE-2012-0876
2012-07-03 19:55:00
CVE-2016-5300
2016-06-16 18:59:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:52:02
Denial Of Service (DoS)
2019-05-02 04:41:51
Denial Of Service (DoS)
2017-02-01 06:06:40
debiancve
debiancve
CVE-2016-5300
2016-06-16 18:59:00
alpinelinux
alpinelinux
CVE-2016-5300
2016-06-16 18:59:00
ubuntu
ubuntu
XML-RPC for C and C++ vulnerabilities
2012-09-10 00:00:00
Expat vulnerabilities
2012-08-10 00:00:00
Python 2.5 vulnerabilities
2012-10-17 00:00:00
centos
centos
expat security update
2012-06-13 17:07:10
redhatcve
redhatcve
CVE-2016-5300
2016-06-06 13:18:38
osv
osv
CVE-2016-5300
2016-06-16 18:59:00
expat - several
2012-08-06 00:00:00
expat - security update
2016-06-07 00:00:00
securityvulns
securityvulns
expat security vulnerability
2012-04-02 00:00:00
[ MDVSA-2012:041 ] expat
2012-04-02 00:00:00
[ MDVSA-2012:096-1 ] python
2012-07-09 00:00:00
f5
f5
SOL16949 - Expat vulnerabilities CVE-2012-0876 and CVE-2012-1148
2015-07-10 00:00:00
K16949 : Expat vulnerabilities CVE-2012-0876 and CVE-2012-1148
2015-07-11 00:00:00
SOL70938105 - Expat XML library vulnerability CVE-2016-5300
2016-10-26 00:00:00
oraclelinux
oraclelinux
expat security update
2012-06-13 00:00:00
python security update
2012-06-18 00:00:00
python security update
2012-06-18 00:00:00
debian
debian
[SECURITY] [DSA 2525-1] expat security update
2012-08-06 20:37:11
[SECURITY] [DSA 3597-1] expat security update
2016-06-07 16:44:57
[SECURITY] [DSA 3597-1] expat security update
2016-06-07 16:44:57
amazon
amazon
Medium: expat
2012-06-19 15:59:00
redhat
redhat
(RHSA-2012:0731) Moderate: expat security update
2012-06-13 00:00:00
(RHSA-2016:0062) Moderate: Red Hat JBoss Web Server 2.1.0 security update
2016-01-21 15:45:11
freebsd
freebsd
expat -- multiple vulnerabilities
2016-03-18 00:00:00
Python 2.7 -- multiple vulnerabilities
2017-08-26 00:00:00
python 2.7 -- multiple vulnerabilities
2018-05-01 00:00:00
archlinux
archlinux
expat: multiple issues
2016-06-13 00:00:00
lib32-expat: multiple issues
2016-06-13 00:00:00
mageia
mageia
Updated expat packages fix security vulnerabilities
2016-06-17 08:58:14
gentoo
gentoo
Expat: Multiple vulnerabilities
2012-09-24 00:00:00
slackware
slackware
[slackware-security] python
2018-05-04 20:53:50
vmware
vmware
VMware security updates for vSphere API and ESX Service Console
2012-11-15 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.004 Low
EPSS
Percentile
73.9%
Related for DEBIANCVE:CVE-2012-0876