CVE-2012-0876
UnknownEPSS 5.72%
Last modified
CVE-2012-0876 is a vulnerability of currently unknown severity. The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.. EPSS estimates a 5.72% chance of exploitation in the next 30 days.
Description
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Libexpat Project | Libexpat | < 2.1.0 |
| Python | Python | >= 2.6.0, < 2.6.8 |
| Python | Python | >= 2.7.0, < 2.7.3 |
| Python | Python | >= 3.1.0, < 3.1.5 |
| Python | Python | >= 3.2.0, < 3.2.3 |
| Debian | Debian Linux | 6.0 |
| Debian | Debian Linux | 7.0 |
| Canonical | Ubuntu Linux | 8.04 |
| Canonical | Ubuntu Linux | 10.04 |
| Canonical | Ubuntu Linux | 11.04 |
| Canonical | Ubuntu Linux | 11.10 |
| Canonical | Ubuntu Linux | 12.04 |
| Oracle | Solaris | 11.3 |
| Redhat | Storage | 2.0 |
| Redhat | Enterprise Linux Desktop | 5.0 |
| Redhat | Enterprise Linux Desktop | 6.0 |
| Redhat | Enterprise Linux Eus | 6.2 |
| Redhat | Enterprise Linux Server | 5.0 |
| Redhat | Enterprise Linux Server | 6.0 |
| Redhat | Enterprise Linux Server Aus | 6.2 |
| Redhat | Enterprise Linux Workstation | 5.0 |
| Redhat | Enterprise Linux Workstation | 6.0 |
References
- http://bugs.python.org/issue13703#msg151870Issue Tracking, Third Party Advisory
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.htmlBroken Link, Mailing List
- http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.htmlBroken Link, Mailing List
- http://rhn.redhat.com/errata/RHSA-2012-0731.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-0062.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-2957.htmlThird Party Advisory
- http://secunia.com/advisories/49504Not Applicable
- http://secunia.com/advisories/51024Not Applicable
- http://secunia.com/advisories/51040Not Applicable
- http://sourceforge.net/projects/expat/files/expat/2.1.0/Release Notes, Third Party Advisory
- http://www.debian.org/security/2012/dsa-2525Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.htmlThird Party Advisory
- http://www.securityfocus.com/bid/52379Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-1527-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-1613-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-1613-2Third Party Advisory
- https://support.apple.com/HT205637Third Party Advisory
- https://www.tenable.com/security/tns-2016-20Third Party Advisory
- http://bugs.python.org/issue13703#msg151870Issue Tracking, Third Party Advisory
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.htmlBroken Link, Mailing List
- http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.htmlBroken Link, Mailing List
- http://rhn.redhat.com/errata/RHSA-2012-0731.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-0062.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-2957.htmlThird Party Advisory
- http://secunia.com/advisories/49504Not Applicable
- http://secunia.com/advisories/51024Not Applicable
- http://secunia.com/advisories/51040Not Applicable
- http://sourceforge.net/projects/expat/files/expat/2.1.0/Release Notes, Third Party Advisory
- http://www.debian.org/security/2012/dsa-2525Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.htmlThird Party Advisory
- http://www.securityfocus.com/bid/52379Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-1527-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-1613-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-1613-2Third Party Advisory
- https://support.apple.com/HT205637Third Party Advisory
- https://www.tenable.com/security/tns-2016-20Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-0876?
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
How severe is CVE-2012-0876?
Severity scoring for CVE-2012-0876 is pending analysis. The EPSS model estimates a 5.72% probability of exploitation in the next 30 days.
How do I fix CVE-2012-0876?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
Are you affected by CVE-2012-0876?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST