CVE-2012-0880

Apache Xerces-C++ allows remote attackers to cause a denial of service (CPU consumption) via a crafted message sent to an XML service that causes hash table collisions.

• CWE-399

• http://seclists.org/oss-sec/2014/q3/96Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=787103Issue Tracking, Third Party Advisory, VDB Entry
• http://seclists.org/oss-sec/2014/q3/96Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=787103Issue Tracking, Third Party Advisory, VDB Entry

Published

Aug 8, 2017

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-0874The (1) JMXInvokerHAServlet and (2) EJBInvokerHAServlet invo…
• CVE-2012-0875SystemTap 1.7, 1.6.7, and probably other versions, when unpr…
• CVE-2012-0876The XML parser (xmlparse.c) in expat before 2.1.0 computes h…
• CVE-2012-0877PyXML: Hash table collisions CPU usage Denial of Service7.5
• CVE-2012-0878Paste Script 1.7.5 and earlier does not properly set group m…
• CVE-2012-0879The I/O implementation for block devices in the Linux kernel…5.5
• CVE-2012-0881Apache Xerces2 Java Parser before 2.12.0 allows remote attac…
• CVE-2012-0882Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possib…
• CVE-2012-0883envvars (aka envvars-std) in the Apache HTTP Server before 2…
• CVE-2012-0884The implementation of Cryptographic Message Syntax (CMS) and…
• CVE-2012-0885chan_sip.c in Asterisk Open Source 1.8.x before 1.8.8.2 and …
• CVE-2012-0891Multiple cross-site scripting (XSS) vulnerabilities in Puppe…