CVE-2012-0841
Fixed in a distro release EPSS 3%
libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data.
Products: xmlsoft libxml2, apple iphone_os
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libxml2 | 2.7.8.dfsg-8 |
| Debian 13 | libxml2 | 2.7.8.dfsg-8 |
| Debian 14 | libxml2 | 2.7.8.dfsg-8 |
| Debian 6.0 | libxml2 | 2.7.8.dfsg-2+squeeze3 |
| Red Hat Enterprise Linux 5 | libxml2 | 0:2.6.26-2.1.15.el5_8.2 |
| Red Hat Enterprise Linux 5 | libxml2-debuginfo | 0:2.6.26-2.1.15.el5_8.2 |
| Red Hat Enterprise Linux 5 | libxml2-devel | 0:2.6.26-2.1.15.el5_8.2 |
| Red Hat Enterprise Linux 5 | libxml2-python | 0:2.6.26-2.1.15.el5_8.2 |
| Red Hat Enterprise Linux 6 | libxml2 | 0:2.7.6-4.el6_2.4 |
| Red Hat Enterprise Linux 6 | libxml2-debuginfo | 0:2.7.6-4.el6_2.4 |
| Red Hat Enterprise Linux 6 | libxml2-devel | 0:2.7.6-4.el6_2.4 |
| Red Hat Enterprise Linux 6 | libxml2-python | 0:2.7.6-4.el6_2.4 |
| Red Hat Enterprise Linux 6 | libxml2-static | 0:2.7.6-4.el6_2.4 |
| Red Hat Enterprise Linux 6 | mingw32-libxml2 | 0:2.7.6-6.el6_3 |
| Red Hat Enterprise Linux 6 | mingw32-libxml2-debuginfo | 0:2.7.6-6.el6_3 |
| Red Hat Enterprise Linux 6 | mingw32-libxml2-static | 0:2.7.6-6.el6_3 |