CVE-2012-0876
Fixed in a distro release EPSS 6%
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
Products: libexpat_project libexpat, python, debian_linux, canonical ubuntu_linux, oracle solaris, redhat storage, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | expat | 2.1.0~beta3-1 |
| Debian 12 | libxmltok | no fix |
| Debian 12 | xmlrpc-c | 1.16.33-3.2 |
| Debian 13 | expat | 2.1.0~beta3-1 |
| Debian 13 | xmlrpc-c | 1.16.33-3.2 |
| Debian 14 | expat | 2.1.0~beta3-1 |
| Debian 14 | xmlrpc-c | 1.16.33-3.2 |
| Debian 6.0 | expat | 2.0.1-7+squeeze1 |
| Red Hat Enterprise Linux 5 | expat | 0:1.95.8-11.el5_8 |
| Red Hat Enterprise Linux 5 | expat-debuginfo | 0:1.95.8-11.el5_8 |
| Red Hat Enterprise Linux 5 | expat-devel | 0:1.95.8-11.el5_8 |
| Red Hat Enterprise Linux 6 | expat | 0:2.0.1-11.el6_2 |
| Red Hat Enterprise Linux 6 | expat-debuginfo | 0:2.0.1-11.el6_2 |
| Red Hat Enterprise Linux 6 | expat-devel | 0:2.0.1-11.el6_2 |
| SUSE Enterprise Storage 5 | python3 | 3.4.10-25.39.3 |
| SUSE Enterprise Storage 5 | python3-base | 3.4.10-25.39.2 |
| SUSE HPE Helion OpenStack 8 | python3 | 3.4.10-25.39.3 |
| SUSE HPE Helion OpenStack 8 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Desktop 12 SP4 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Desktop 12 SP4 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Module for Web and Scripting 12 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Module for Web and Scripting 12 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Server 12 SP2-BCL | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Server 12 SP2-BCL | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Server 12 SP3-BCL | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Server 12 SP3-BCL | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Server 12 SP4 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Server 12 SP4 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Server 12 SP5 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Server 12 SP5 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | python3-base | 3.4.10-25.39.2 |
| SUSE OpenStack Cloud 7 | python3 | 3.4.10-25.39.3 |
| SUSE OpenStack Cloud 7 | python3-base | 3.4.10-25.39.2 |
| SUSE OpenStack Cloud 8 | python3 | 3.4.10-25.39.3 |
| SUSE OpenStack Cloud 8 | python3-base | 3.4.10-25.39.2 |
| SUSE OpenStack Cloud Crowbar 8 | python3 | 3.4.10-25.39.3 |
| SUSE OpenStack Cloud Crowbar 8 | python3-base | 3.4.10-25.39.2 |
| Ubuntu 16.04 LTS | cadaver | no fix |
| Ubuntu 16.04 LTS | matanza | no fix |
| Ubuntu 18.04 LTS | cadaver | no fix |
| Ubuntu 18.04 LTS | matanza | no fix |
| Ubuntu 18.04 LTS | vnc4 | no fix |
| Ubuntu 20.04 LTS | cadaver | no fix |
| Ubuntu 20.04 LTS | matanza | no fix |
| Ubuntu 22.04 LTS | cadaver | no fix |
| Ubuntu 22.04 LTS | matanza | no fix |
| Ubuntu 24.04 LTS | cadaver | no fix |
| Ubuntu 24.04 LTS | matanza | no fix |
| Ubuntu 25.10 | cadaver | no fix |
| Ubuntu 25.10 | matanza | no fix |
| Ubuntu 25.10 | paraview | no fix |
| Ubuntu 25.10 | sitecopy | no fix |
| Ubuntu 25.10 | swish-e | no fix |
| Ubuntu 26.04 LTS | cadaver | no fix |
| Ubuntu 26.04 LTS | matanza | no fix |
| Ubuntu 26.04 LTS | paraview | no fix |
| Ubuntu 26.04 LTS | sitecopy | no fix |
| Ubuntu 26.10 | cadaver | no fix |
| Ubuntu 26.10 | matanza | no fix |
| Ubuntu 26.10 | paraview | no fix |
| Ubuntu 26.10 | sitecopy | no fix |
| Ubuntu 26.10 | swish-e | no fix |
| Ubuntu Pro 14.04 LTS | coin3 | no fix |
| Ubuntu Pro 14.04 LTS | vnc4 | no fix |
| Ubuntu Pro 16.04 LTS | ayttm | no fix |
| Ubuntu Pro 16.04 LTS | cableswig | no fix |
| Ubuntu Pro 16.04 LTS | coin3 | no fix |
| Ubuntu Pro 16.04 LTS | insighttoolkit | no fix |
| Ubuntu Pro 16.04 LTS | swish-e | no fix |
| Ubuntu Pro 16.04 LTS | vnc4 | no fix |
| Ubuntu Pro 18.04 LTS | coin3 | no fix |
| Ubuntu Pro 18.04 LTS | swish-e | no fix |
| Ubuntu Pro 20.04 LTS | swish-e | no fix |
| Ubuntu Pro 22.04 LTS | swish-e | no fix |
| Ubuntu Pro 24.04 LTS | swish-e | no fix |
| Ubuntu Pro 26.04 LTS | swish-e | no fix |
| openSUSE Tumbleweed | expat | 2.2.0-3.1 |