CVE-2012-0876
libxmlrpc-c++8t64: The XML parser (xmlparse.c) in expat before 2.1.0 computes hash valueswithout restricting the ability to trigger hash...
CVE-2012-0876 is fixed in 5 products on 1 platform, first by libxmlrpc-c++8t64 1.16.33-3.1ubuntu6, released July 3, 2012. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0572
93rd percentile
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash valueswithout restricting the ability to trigger hash collisions predictably,which allows context-dependent attackers to cause a denial of service (CPUconsumption) via an XML file with many identifiers with the same value.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libxmlrpc-c++8t64 · Ubuntu 24.10 (oracular) | 1.16.33-3.1ubuntu6 | libxmlrpc-c++8t64 1.16.33-3.1ubuntu6 | Jul 3, 2012 |
| libxmlrpc-c++9 · Ubuntu 25.04 (plucky) | 1.16.33-3.1ubuntu6 | libxmlrpc-c++9 1.16.33-3.1ubuntu6 | Jul 3, 2012 |
| libxmlrpc-core-c3t64 · Ubuntu 24.10 (oracular) | 1.16.33-3.1ubuntu6 | libxmlrpc-core-c3t64 1.16.33-3.1ubuntu6 | Jul 3, 2012 |
| libxmlrpc-core-c3t64 · Ubuntu 25.04 (plucky) | 1.16.33-3.1ubuntu6 | libxmlrpc-core-c3t64 1.16.33-3.1ubuntu6 | Jul 3, 2012 |
| libxmlrpc-util4 · Ubuntu 25.04 (plucky) | 1.16.33-3.1ubuntu6 | libxmlrpc-util4 1.16.33-3.1ubuntu6 | Jul 3, 2012 |
| xmlrpc-api-utils · Ubuntu 24.10 (oracular) | 1.16.33-3.1ubuntu6 | xmlrpc-api-utils 1.16.33-3.1ubuntu6 | Jul 3, 2012 |
| xmlrpc-api-utils · Ubuntu 25.04 (plucky) | 1.16.33-3.1ubuntu6 | xmlrpc-api-utils 1.16.33-3.1ubuntu6 | Jul 3, 2012 |