The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted identifiers in an XML document. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0876.

References

www.debian.org/security/2016/dsa-3597

www.openwall.com/lists/oss-security/2016/06/04/4

www.openwall.com/lists/oss-security/2016/06/04/5

www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html

www.securityfocus.com/bid/91159

www.ubuntu.com/usn/USN-3010-1

kc.mcafee.com/corporate/index?page=content&id=SB10365

lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E

lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E

security.gentoo.org/glsa/201701-21

source.android.com/security/bulletin/2016-11-01.html

www.tenable.com/security/tns-2016-20

redhatcve 1

cve 2

alpinelinux 1

debiancve 2

f5 4

openvas 61

nessus 55

cvelist 2

veracode 3

prion 2

nvd 2

debian 4

ubuntucve 3

archlinux 2

mageia 1

freebsd 3

osv 4

fedora 6

ibm 19

centos 1

ubuntu 5

securityvulns 3

amazon 1

oraclelinux 3

cloudfoundry 1

redhat 3

slackware 2

gentoo 2

vmware 1

redhatcve

CVE-2016-5300

2016-06-06 13:18:38

cve

CVE-2016-5300

2016-06-16 18:59:10

CVE-2012-0876

2012-07-03 19:55:02

alpinelinux

CVE-2016-5300

2016-06-16 18:59:10

debiancve

CVE-2016-5300

2016-06-16 18:59:10

CVE-2012-0876

2012-07-03 19:55:02

SOL70938105 - Expat XML library vulnerability CVE-2016-5300

2016-10-26 00:00:00

K70938105 : Expat XML library vulnerability CVE-2016-5300

2016-10-26 00:00:00

K16949 : Expat vulnerabilities CVE-2012-0876 and CVE-2012-1148

2015-07-11 00:00:00

openvas

F5 BIG-IP - Expat XML library vulnerability CVE-2016-5300

2016-10-28 00:00:00

Debian: Security Advisory (DSA-3597-1)

2016-06-06 00:00:00

Debian: Security Advisory (DLA-508-1)

2023-03-08 00:00:00

nessus

F5 Networks BIG-IP : Expat XML library vulnerability (K70938105)

2016-10-27 00:00:00

FreeBSD : expat -- multiple vulnerabilities (c9c252f5-2def-11e6-ae88-002590263bf5)

2016-06-09 00:00:00

SUSE SLED12 / SLES12 Security Update : expat (SUSE-SU-2017:0424-1)

2017-02-09 00:00:00

cvelist

CVE-2016-5300

2016-06-16 18:00:00

CVE-2012-0876

2012-07-03 19:00:00

veracode

Denial Of Service (DoS)

2017-02-01 06:06:40

Denial Of Service (DoS)

2019-01-15 08:52:02

Denial Of Service (DoS)

2019-05-02 04:41:51

prion

Code injection

2016-06-16 18:59:00

Code injection

2012-07-03 19:55:00

nvd

CVE-2016-5300

2016-06-16 18:59:10

CVE-2012-0876

2012-07-03 19:55:02

debian

[SECURITY] [DSA 3597-1] expat security update

2016-06-07 16:44:57

[SECURITY] [DLA 508-1] expat security update

2016-06-08 09:29:13

[SECURITY] [DSA 3597-1] expat security update

2016-06-07 16:44:57

ubuntucve

CVE-2016-5300

2016-06-06 00:00:00

CVE-2012-0876

2012-07-03 00:00:00

CVE-2012-6702

2012-12-31 00:00:00

archlinux

expat: multiple issues

2016-06-13 00:00:00

lib32-expat: multiple issues

2016-06-13 00:00:00

mageia

Updated expat packages fix security vulnerabilities

2016-06-17 08:58:14

freebsd

expat -- multiple vulnerabilities

2016-03-18 00:00:00

Python 2.7 -- multiple vulnerabilities

2017-08-26 00:00:00

python 2.7 -- multiple vulnerabilities

2018-05-01 00:00:00

osv

expat - security update

2016-06-08 00:00:00

expat - security update

2016-06-07 00:00:00

expat - several

2012-08-06 00:00:00

fedora

[SECURITY] Fedora 15 Update: expat-2.1.0-1.fc15

2012-05-15 23:27:15

[SECURITY] Fedora 16 Update: expat-2.1.0-1.fc16

2012-05-01 00:51:58

[SECURITY] Fedora 17 Update: expat-2.1.0-1.fc17

2012-04-12 03:36:59

ibm

Security Bulletin: Vulnerabilities in Open Source Expact affect Tivoli Network Manager IP Edition

2018-06-17 15:34:31

Security Bulletin: Security vulnerabilities have been identified in IBM Tivoli Monitoring shipped with IBM Cloud Orchestrator Enterprise (CVE-2012-6702, CVE-2016-5300)

2018-06-17 22:33:28

Security Bulletin: Multiple Security Vulnerabilities in Expat affect IBM Netezza Analytics

2019-10-18 03:10:29

centos

expat security update

2012-06-13 17:07:10

ubuntu

XML-RPC for C and C++ vulnerabilities

2012-09-10 00:00:00

Expat vulnerabilities

2012-08-10 00:00:00

Expat vulnerabilities

2016-06-20 00:00:00

securityvulns

expat security vulnerability

2012-04-02 00:00:00

[ MDVSA-2012:041 ] expat

2012-04-02 00:00:00

[ MDVSA-2012:096-1 ] python

2012-07-09 00:00:00

amazon

Medium: expat

2012-06-19 15:59:00

oraclelinux

expat security update

2012-06-13 00:00:00

python security update

2012-06-18 00:00:00

python security update

2012-06-18 00:00:00

cloudfoundry

USN-3010-1 Expat vulnerabilities | Cloud Foundry

2016-07-13 00:00:00

redhat

(RHSA-2012:0731) Moderate: expat security update

2012-06-13 00:00:00

(RHSA-2016:0062) Moderate: Red Hat JBoss Web Server 2.1.0 security update

2016-01-21 15:45:11

(RHSA-2017:3239) Important: Red Hat JBoss Enterprise Application Platform 6.4.18 security update

2017-11-16 19:09:33

slackware

[slackware-security] python

2018-05-04 20:53:50

[slackware-security] expat

2016-12-24 19:24:21

gentoo

Expat: Multiple vulnerabilities

2012-09-24 00:00:00

Expat: Multiple vulnerabilities

2017-01-11 00:00:00

vmware

VMware security updates for vSphere API and ESX Service Console

2012-11-15 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

EPSS

0.008

Percentile

81.3%

JSON

Related for OSV:CVE-2016-5300