CVE-2012-1147

2012-07-0319:55:00

Debian Security Bug Tracker

security-tracker.debian.org

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

56.0%

JSON

readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.

OSVersionArchitecturePackageVersionFilename
Debian12allexpat< 2.5.0-1expat_2.5.0-1_all.deb
Debian11allexpat< 2.2.10-2+deb11u5expat_2.2.10-2+deb11u5_all.deb
Debian10allexpat< 2.2.6-2+deb10u4expat_2.2.6-2+deb10u4_all.deb
Debian999allexpat< 2.6.2-1expat_2.6.2-1_all.deb
Debian13allexpat< 2.6.2-1expat_2.6.2-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	expat	< 2.5.0-1	expat_2.5.0-1_all.deb
Debian	11	all	expat	< 2.2.10-2+deb11u5	expat_2.2.10-2+deb11u5_all.deb
Debian	10	all	expat	< 2.2.6-2+deb10u4	expat_2.2.6-2+deb10u4_all.deb
Debian	999	all	expat	< 2.6.2-1	expat_2.6.2-1_all.deb
Debian	13	all	expat	< 2.6.2-1	expat_2.6.2-1_all.deb