CVE-2012-0841

libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 71%
VendorProductVersion
xmlsoftlibxml2
𝑥
≤ 2.7.8
xmlsoftlibxml2
1.7.0
xmlsoftlibxml2
1.7.1
xmlsoftlibxml2
1.7.2
xmlsoftlibxml2
1.7.3
xmlsoftlibxml2
1.7.4
xmlsoftlibxml2
1.8.0
xmlsoftlibxml2
1.8.1
xmlsoftlibxml2
1.8.2
xmlsoftlibxml2
1.8.3
xmlsoftlibxml2
1.8.4
xmlsoftlibxml2
1.8.5
xmlsoftlibxml2
1.8.6
xmlsoftlibxml2
1.8.7
xmlsoftlibxml2
1.8.9
xmlsoftlibxml2
1.8.10
xmlsoftlibxml2
1.8.13
xmlsoftlibxml2
1.8.14
xmlsoftlibxml2
1.8.16
xmlsoftlibxml2
2.0.0
xmlsoftlibxml2
2.1.0
xmlsoftlibxml2
2.1.1
xmlsoftlibxml2
2.2.0
xmlsoftlibxml2
2.2.0:beta
xmlsoftlibxml2
2.2.1
xmlsoftlibxml2
2.2.2
xmlsoftlibxml2
2.2.3
xmlsoftlibxml2
2.2.4
xmlsoftlibxml2
2.2.5
xmlsoftlibxml2
2.2.6
xmlsoftlibxml2
2.2.7
xmlsoftlibxml2
2.2.8
xmlsoftlibxml2
2.2.9
xmlsoftlibxml2
2.2.10
xmlsoftlibxml2
2.2.11
xmlsoftlibxml2
2.3.0
xmlsoftlibxml2
2.3.1
xmlsoftlibxml2
2.3.2
xmlsoftlibxml2
2.3.3
xmlsoftlibxml2
2.3.4
xmlsoftlibxml2
2.3.5
xmlsoftlibxml2
2.3.6
xmlsoftlibxml2
2.3.7
xmlsoftlibxml2
2.3.8
xmlsoftlibxml2
2.3.9
xmlsoftlibxml2
2.3.10
xmlsoftlibxml2
2.3.11
xmlsoftlibxml2
2.3.12
xmlsoftlibxml2
2.3.13
xmlsoftlibxml2
2.3.14
xmlsoftlibxml2
2.4.1
xmlsoftlibxml2
2.4.2
xmlsoftlibxml2
2.4.3
xmlsoftlibxml2
2.4.4
xmlsoftlibxml2
2.4.5
xmlsoftlibxml2
2.4.6
xmlsoftlibxml2
2.4.7
xmlsoftlibxml2
2.4.8
xmlsoftlibxml2
2.4.9
xmlsoftlibxml2
2.4.10
xmlsoftlibxml2
2.4.11
xmlsoftlibxml2
2.4.12
xmlsoftlibxml2
2.4.13
xmlsoftlibxml2
2.4.14
xmlsoftlibxml2
2.4.15
xmlsoftlibxml2
2.4.16
xmlsoftlibxml2
2.4.17
xmlsoftlibxml2
2.4.18
xmlsoftlibxml2
2.4.19
xmlsoftlibxml2
2.4.20
xmlsoftlibxml2
2.4.21
xmlsoftlibxml2
2.4.22
xmlsoftlibxml2
2.4.23
xmlsoftlibxml2
2.4.24
xmlsoftlibxml2
2.4.25
xmlsoftlibxml2
2.4.26
xmlsoftlibxml2
2.4.27
xmlsoftlibxml2
2.4.28
xmlsoftlibxml2
2.4.29
xmlsoftlibxml2
2.4.30
xmlsoftlibxml2
2.5.0
xmlsoftlibxml2
2.5.4
xmlsoftlibxml2
2.5.7
xmlsoftlibxml2
2.5.8
xmlsoftlibxml2
2.5.10
xmlsoftlibxml2
2.5.11
xmlsoftlibxml2
2.6.0
xmlsoftlibxml2
2.6.1
xmlsoftlibxml2
2.6.2
xmlsoftlibxml2
2.6.3
xmlsoftlibxml2
2.6.4
xmlsoftlibxml2
2.6.5
xmlsoftlibxml2
2.6.6
xmlsoftlibxml2
2.6.7
xmlsoftlibxml2
2.6.8
xmlsoftlibxml2
2.6.9
xmlsoftlibxml2
2.6.11
xmlsoftlibxml2
2.6.12
xmlsoftlibxml2
2.6.13
xmlsoftlibxml2
2.6.14
xmlsoftlibxml2
2.6.16
xmlsoftlibxml2
2.6.17
xmlsoftlibxml2
2.6.18
xmlsoftlibxml2
2.6.20
xmlsoftlibxml2
2.6.21
xmlsoftlibxml2
2.6.22
xmlsoftlibxml2
2.6.23
xmlsoftlibxml2
2.6.24
xmlsoftlibxml2
2.6.25
xmlsoftlibxml2
2.6.26
xmlsoftlibxml2
2.6.27
xmlsoftlibxml2
2.6.28
xmlsoftlibxml2
2.6.29
xmlsoftlibxml2
2.6.30
xmlsoftlibxml2
2.6.31
xmlsoftlibxml2
2.6.32
xmlsoftlibxml2
2.7.0
xmlsoftlibxml2
2.7.1
xmlsoftlibxml2
2.7.2
xmlsoftlibxml2
2.7.3
xmlsoftlibxml2
2.7.4
xmlsoftlibxml2
2.7.5
xmlsoftlibxml2
2.7.6
xmlsoftlibxml2
2.7.7
appleiphone_os
𝑥
≤ 6.1.4
appleiphone_os
1.0.0
appleiphone_os
1.0.1
appleiphone_os
1.0.2
appleiphone_os
1.1.0
appleiphone_os
1.1.1
appleiphone_os
1.1.2
appleiphone_os
1.1.3
appleiphone_os
1.1.4
appleiphone_os
1.1.5
appleiphone_os
2.0
appleiphone_os
2.0.0
appleiphone_os
2.0.1
appleiphone_os
2.0.2
appleiphone_os
2.1
appleiphone_os
2.1.1
appleiphone_os
2.2
appleiphone_os
2.2.1
appleiphone_os
3.0
appleiphone_os
3.0.1
appleiphone_os
3.1
appleiphone_os
3.1.2
appleiphone_os
3.1.3
appleiphone_os
3.2
appleiphone_os
3.2.1
appleiphone_os
3.2.2
appleiphone_os
4.0
appleiphone_os
4.0.1
appleiphone_os
4.0.2
appleiphone_os
4.1
appleiphone_os
4.2.1
appleiphone_os
4.2.5
appleiphone_os
4.2.8
appleiphone_os
4.3.0
appleiphone_os
4.3.1
appleiphone_os
4.3.2
appleiphone_os
4.3.3
appleiphone_os
4.3.5
appleiphone_os
5.0
appleiphone_os
5.0.1
appleiphone_os
5.1
appleiphone_os
5.1.1
appleiphone_os
6.0
appleiphone_os
6.0.1
appleiphone_os
6.0.2
appleiphone_os
6.1
appleiphone_os
6.1.2
appleiphone_os
6.1.3
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libxml2
bullseye
2.9.10+dfsg-6.7+deb11u4
fixed
bullseye (security)
2.9.10+dfsg-6.7+deb11u5
fixed
bookworm
2.9.14+dfsg-1.3~deb12u1
fixed
sid
2.12.7+dfsg+really2.9.14-0.1
fixed
trixie
2.12.7+dfsg+really2.9.14-0.1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libxml2
oneiric
Fixed 2.7.8.dfsg-4ubuntu0.2
released
natty
Fixed 2.7.8.dfsg-2ubuntu0.3
released
maverick
Fixed 2.7.7.dfsg-4ubuntu0.4
released
lucid
Fixed 2.7.6.dfsg-1ubuntu1.4
released
hardy
Fixed 2.6.31.dfsg-2ubuntu1.8
released
Common Weakness Enumeration
References
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=660846
http://git.gnome.org/browse/libxml2/commit/?id=8973d58b7498fa5100a876815476b81fd1a2412a
http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html
http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html
http://rhn.redhat.com/errata/RHSA-2012-0324.html
http://rhn.redhat.com/errata/RHSA-2013-0217.html
http://secunia.com/advisories/54886
http://secunia.com/advisories/55568
http://securitytracker.com/id?1026723
http://support.apple.com/kb/HT5934
http://support.apple.com/kb/HT6001
http://www.debian.org/security/2012/dsa-2417
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
http://www.openwall.com/lists/oss-security/2012/02/22/1
http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html
http://www.securityfocus.com/bid/52107
http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
http://xmlsoft.org/news.html
https://blogs.oracle.com/sunsecurity/entry/cve_2012_0841_denial_of
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=660846
http://git.gnome.org/browse/libxml2/commit/?id=8973d58b7498fa5100a876815476b81fd1a2412a
http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html
http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html
http://rhn.redhat.com/errata/RHSA-2012-0324.html
http://rhn.redhat.com/errata/RHSA-2013-0217.html
http://secunia.com/advisories/54886
http://secunia.com/advisories/55568
http://securitytracker.com/id?1026723
http://support.apple.com/kb/HT5934
http://support.apple.com/kb/HT6001
http://www.debian.org/security/2012/dsa-2417
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
http://www.openwall.com/lists/oss-security/2012/02/22/1
http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html
http://www.securityfocus.com/bid/52107
http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
http://xmlsoft.org/news.html
https://blogs.oracle.com/sunsecurity/entry/cve_2012_0841_denial_of