NetSight
IP …
medium4.3

CVE-2012-0876

The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows con…

Impact

The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.

Affected products

VendorProductAffected versions
Libexpat ProjectLibexpat
before 2.1.0
PythonPython
from 2.6.0 before 2.6.8
from 2.7.0 before 2.7.3
from 3.1.0 before 3.1.5
from 3.2.0 before 3.2.3
DebianDebian Linux
Versions 6.0, 7.0
CanonicalUbuntu Linux
Versions 8.04, 10.04, 11.04, 11.10, 12.04
OracleSolaris
Version 11.3
RedhatStorage
Version 2.0
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0
RedhatEnterprise Linux Eus
Version 6.2
RedhatEnterprise Linux Server
Versions 5.0, 6.0
RedhatEnterprise Linux Server Aus
Version 6.2
RedhatEnterprise Linux Workstation
Versions 5.0, 6.0

Weakness classification

CWE-400

References