The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2012-07-03T19:00:00
Updated: 2024-08-06T18:38:15.063Z
Reserved: 2012-01-19T00:00:00
Link: CVE-2012-0876
Vulnrichment
No data.
NVD
Status : Modified
Published: 2012-07-03T19:55:02.210
Modified: 2024-11-21T01:35:53.543
Link: CVE-2012-0876
Redhat