CVE-2012-0876

The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows…

published July 3, 2012

CVSS
—
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05724 · 93.0th percentile
Published
2012-07-03T19:00Z
EPSS history
Timeline
  • 03 JUL 19:00Z
    The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows…
    cvelistv5