CVE-2012-1148

2012-07-0300:00:00

ubuntu.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.009 Low

EPSS

Percentile

82.6%

JSON

Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat
before 2.1.0 allows context-dependent attackers to cause a denial of
service (memory consumption) via a large number of crafted XML files that
cause improperly-handled reallocation failures when expanding entities.

Bugs

Notes

Author	Note
ebarretto	tla uses system expat as of 1.3.5+dfsg-15
ccdm94	cmake 3.20.5 and forward uses expat 2.2.10+.

OSVersionArchitecturePackageVersionFilename
ubuntu23.10noarchaudacity< anyUNKNOWN
ubuntu16.04noarchayttm< anyUNKNOWN
ubuntu16.04noarchcableswig< anyUNKNOWN
ubuntu18.04noarchcadaver< anyUNKNOWN
ubuntu20.04noarchcadaver< anyUNKNOWN
ubuntu22.04noarchcadaver< anyUNKNOWN
ubuntu23.10noarchcadaver< anyUNKNOWN
ubuntu16.04noarchcadaver< anyUNKNOWN
ubuntu18.04noarchcoin3< anyUNKNOWN
ubuntu14.04noarchcoin3< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	23.10	noarch	audacity	< any	UNKNOWN
ubuntu	16.04	noarch	ayttm	< any	UNKNOWN
ubuntu	16.04	noarch	cableswig	< any	UNKNOWN
ubuntu	18.04	noarch	cadaver	< any	UNKNOWN
ubuntu	20.04	noarch	cadaver	< any	UNKNOWN
ubuntu	22.04	noarch	cadaver	< any	UNKNOWN
ubuntu	23.10	noarch	cadaver	< any	UNKNOWN
ubuntu	16.04	noarch	cadaver	< any	UNKNOWN
ubuntu	18.04	noarch	coin3	< any	UNKNOWN
ubuntu	14.04	noarch	coin3	< any	UNKNOWN