CVE-2012-0880

Опубликовано: 08 авг. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 7.8

EPSS Низкий

Описание

Apache Xerces-C++ allows remote attackers to cause a denial of service (CPU consumption) via a crafted message sent to an XML service that causes hash table collisions.

Ссылки

http://seclists.org/oss-sec/2014/q3/96
Mailing List
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=787103
Issue Tracking
Third Party Advisory
VDB Entry
http://seclists.org/oss-sec/2014/q3/96
Mailing List
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=787103
Issue Tracking
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apache:xerces-c\+\+:-:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.04403

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-399

Связанные уязвимости

CVE-2012-0880

CVSS3: 7.5

ubuntu

почти 9 лет назад

Apache Xerces-C++ allows remote attackers to cause a denial of service (CPU consumption) via a crafted message sent to an XML service that causes hash table collisions.

CVE-2012-0880

redhat

около 12 лет назад

Apache Xerces-C++ allows remote attackers to cause a denial of service (CPU consumption) via a crafted message sent to an XML service that causes hash table collisions.

CVE-2012-0880

CVSS3: 7.5

debian

почти 9 лет назад

Apache Xerces-C++ allows remote attackers to cause a denial of service ...

GHSA-j4rv-442r-v8h9

CVSS3: 7.5

github

около 4 лет назад

Apache Xerces-C++ allows remote attackers to cause a denial of service (CPU consumption) via a crafted message sent to an XML service that causes hash table collisions.

EPSS

Процентиль: 90%

0.04403

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-399