CVE-2012-0841

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

3.26%

Published

Dec 21, 2012

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data.

Weaknesses (CWE)

CWE-399

Affected Products (172)

xmlsoft · libxml2vulnerable

xmlsoft · libxml2

References (20)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=660846

http://git.gnome.org/browse/libxml2/commit/?id=8973d58b7498fa5100a876815476b81fd1a2412a

http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html

http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html

http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html

http://rhn.redhat.com/errata/RHSA-2012-0324.html

http://rhn.redhat.com/errata/RHSA-2013-0217.html

http://secunia.com/advisories/54886

KEV Catalog EPSS Scores Vendors All CVEs