Lucene search
Ubuntu.comUB:CVE-2012-1147HistoryJul 03, 2012 - 12:00 a.m.
CVE-2012-1147
2012-07-0300:00:00
ubuntu.com
ubuntu.com
14
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.002 Low
EPSS
Percentile
56.0%
readfilemap.c in expat before 2.1.0 allows context-dependent attackers to
cause a denial of service (file descriptor consumption) via a large number
of crafted XML files.
Bugs
- http://sourceforge.net/tracker/?func=detail&aid=2895533&group_id=10127&atid=110127
- <https://bugzilla.redhat.com/show_bug.cgi?id=801634>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=663579>
Notes
| Author | Note |
|---|---|
| mdeslaur | readfilemap.c isn’t used on linux, only unixfilemap.c |
| ebarretto | tla uses system expat as of 1.3.5+dfsg-15 |
| ccdm94 | cmake 3.20.5 and forward uses expat 2.2.10+. |
Related
cve
cve
CVE-2012-1147
2012-07-03 19:55:00
prion
prion
Design/Logic Flaw
2012-07-03 19:55:00
debiancve
debiancve
CVE-2012-1147
2012-07-03 19:55:00
nessus
nessus
SuSE 10 Security Update : expat (ZYPP Patch Number 8015)
2012-06-21 00:00:00
SuSE 11.1 Security Update : expat (SAT Patch Number 6200)
2013-01-25 00:00:00
GLSA-201209-06 : Expat: Multiple vulnerabilities
2012-09-25 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2012:0772-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2012:0773-1)
2021-06-09 00:00:00
Gentoo Security Advisory GLSA 201209-06 (expat)
2012-09-26 00:00:00
gentoo
gentoo
Expat: Multiple vulnerabilities
2012-09-24 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in Open Source Expact affect Tivoli Network Manager IP Edition
2018-06-17 15:34:31
Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple expat vulnerabilities
2018-06-18 01:32:58
Security Bulletin: Multiple Expat XML Parser vulnerabilities in Prospect
2018-06-17 15:27:43
apple
apple
About the security content of iTunes 12.6
2017-03-21 00:00:00
About the security content of iTunes 12.6 - Apple Support
2017-03-22 07:40:40
About the security content of iTunes 12.6 for Windows
2017-03-21 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.002 Low
EPSS
Percentile
56.0%
Related for UB:CVE-2012-1147