CVE-2012-0876
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the...
4.3 MediumFix available
CVE-2012-0876 is a medium vulnerability (CVSS 4.3) in Canonical Ubuntu Linux, published July 3, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.72%, the 93rd percentile. Fixed in expat 2.1.0~beta3-1.
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
Exploit likelihood
5.72%Up 3.0 points since Feb 4, 2022
What each source reports
NVD Score used
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
- Record
CVE-2012-0876- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-400
- Updated
- 2026-11-02
CVE List No score
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
- Record
CVE-2012-0876- Updated
- 2026-11-02
EUVDEUVD-2012-0901 No score
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
- Record
EUVD-2012-0901- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q8w9-7fww-v592 No score
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the...
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
- Record
GHSA-q8w9-7fww-v592- Weakness
- CWE-400
- Updated
- 2026-11-02
OSVRHSA-2012:0731
Red Hat Security Advisory: expat security update
- Record
RHSA-2012:0731- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV No score
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
- Record
CVE-2012-0876- Updated
- 2026-11-02
Show 5 moreShow less
OSVDEBIAN-CVE-2012-0876 No score
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
- Record
DEBIAN-CVE-2012-0876- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10077-1 No score
expat-2.2.0-3.1 on GA media
These are all security issues fixed in the expat-2.2.0-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10077-1- Updated
- 2026-11-02
OSVPSF-2012-4 No score
Expat 2.2.1
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
- Record
PSF-2012-4- Updated
- 2026-11-02
OSVSUSE-SU-2020:0497-1 No score
Security update for python3
This update for python3 fixes the following issues:
Update to 3.4.10 (jsc#SLE-9427, bsc#1159208) from 3.4.6:
Security issues fixed:
- Update expat copy from 2.1.1 to 2.2.0 to fix the following issues: CVE-2012-0876, CVE-2016-0718, CVE-2016-4472, CVE-2017-9233, CVE-2016-9063
- CVE-2017-1000158: Fix an integer overflow in thePyString_DecodeEscape function in stringobject.c, resulting in heap-based bufferoverflow (bsc#1068664).
- Record
SUSE-SU-2020:0497-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-0876 No score
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
- Record
UBUNTU-CVE-2012-0876- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
expatDebian:12 |
before 2.1.0~beta3-1 | 2.1.0~beta3-1 |
expatDebian:13 |
before 2.1.0~beta3-1 | 2.1.0~beta3-1 |
expatDebian:14 |
before 2.1.0~beta3-1 | 2.1.0~beta3-1 |
libxmltokDebian:12 |
All versions, plus listed versions 1.2-41.2-4.11.2-4.1~exp11.2-4.2 |
None known |
xmlrpc-cDebian:12 |
before 1.16.33-3.2 | 1.16.33-3.2 |
xmlrpc-cDebian:13 |
before 1.16.33-3.2 | 1.16.33-3.2 |
xmlrpc-cDebian:14 |
before 1.16.33-3.2 | 1.16.33-3.2 |
expatDebian:6.0 |
before 2.0.1-7+squeeze1, plus listed versions 2.0.1-7 |
2.0.1-7+squeeze1 |
expatRed Hat:enterprise_linux:5::client |
before 0:1.95.8-11.el5_8 | 0:1.95.8-11.el5_8 |
expat-debuginfoRed Hat:enterprise_linux:5::client |
before 0:1.95.8-11.el5_8 | 0:1.95.8-11.el5_8 |
Show 100 moreShow less
| Package | Affected | Fixed |
|---|---|---|
expatRed Hat:enterprise_linux:5::client_workstation |
before 0:1.95.8-11.el5_8 | 0:1.95.8-11.el5_8 |
expat-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:1.95.8-11.el5_8 | 0:1.95.8-11.el5_8 |
expat-develRed Hat:enterprise_linux:5::client_workstation |
before 0:1.95.8-11.el5_8 | 0:1.95.8-11.el5_8 |
expatRed Hat:enterprise_linux:5::server |
before 0:1.95.8-11.el5_8 | 0:1.95.8-11.el5_8 |
expat-debuginfoRed Hat:enterprise_linux:5::server |
before 0:1.95.8-11.el5_8 | 0:1.95.8-11.el5_8 |
expat-develRed Hat:enterprise_linux:5::server |
before 0:1.95.8-11.el5_8 | 0:1.95.8-11.el5_8 |
expatRed Hat:enterprise_linux:6::client |
before 0:2.0.1-11.el6_2 | 0:2.0.1-11.el6_2 |
expat-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.0.1-11.el6_2 | 0:2.0.1-11.el6_2 |
expat-develRed Hat:enterprise_linux:6::client |
before 0:2.0.1-11.el6_2 | 0:2.0.1-11.el6_2 |
expatRed Hat:enterprise_linux:6::computenode |
before 0:2.0.1-11.el6_2 | 0:2.0.1-11.el6_2 |
expat-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.0.1-11.el6_2 | 0:2.0.1-11.el6_2 |
expat-develRed Hat:enterprise_linux:6::computenode |
before 0:2.0.1-11.el6_2 | 0:2.0.1-11.el6_2 |
expatRed Hat:enterprise_linux:6::server |
before 0:2.0.1-11.el6_2 | 0:2.0.1-11.el6_2 |
expat-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.0.1-11.el6_2 | 0:2.0.1-11.el6_2 |
expat-develRed Hat:enterprise_linux:6::server |
before 0:2.0.1-11.el6_2 | 0:2.0.1-11.el6_2 |
expatRed Hat:enterprise_linux:6::workstation |
before 0:2.0.1-11.el6_2 | 0:2.0.1-11.el6_2 |
expat-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.0.1-11.el6_2 | 0:2.0.1-11.el6_2 |
expat-develRed Hat:enterprise_linux:6::workstation |
before 0:2.0.1-11.el6_2 | 0:2.0.1-11.el6_2 |
python3SUSE:HPE Helion OpenStack 8 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:HPE Helion OpenStack 8 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:OpenStack Cloud 7 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:OpenStack Cloud 7 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:OpenStack Cloud 8 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:OpenStack Cloud 8 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:OpenStack Cloud Crowbar 8 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:OpenStack Cloud Crowbar 8 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Desktop 12 SP4 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Desktop 12 SP4 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Module for Web and Scripting 12 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Module for Web and Scripting 12 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server for SAP Applications 12 SP2 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server for SAP Applications 12 SP2 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Software Development Kit 12 SP4 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Software Development Kit 12 SP4 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server 12 SP1-LTSS |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server 12 SP1-LTSS |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server 12 SP2-LTSS |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server 12 SP2-LTSS |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server 12 SP2-BCL |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server 12 SP2-BCL |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server 12 SP3-LTSS |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server 12 SP3-LTSS |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server 12 SP3-BCL |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server 12 SP3-BCL |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server 12 SP4 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server 12 SP4 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server 12 SP5 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server 12 SP5 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Enterprise Storage 5 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Enterprise Storage 5 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
coin3Ubuntu:Pro:14.04:LTS |
All versions, plus listed versions 3.1.4~abc9f50-33.1.4~abc9f50-43.1.4~abc9f50-4ubuntu23.1.4~abc9f50-4ubuntu2+esm13.1.4~abc9f50-4ubuntu2+esm2 |
None known |
vnc4Ubuntu:Pro:14.04:LTS |
All versions, plus listed versions 4.1.1+xorg4.3.0-37ubuntu54.1.1+xorg4.3.0-37ubuntu5.0.14.1.1+xorg4.3.0-37ubuntu5.0.24.1.1+xorg4.3.0-37ubuntu5.0.2+esm1 |
None known |
ayttmUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 0.6.3-3build10.6.3-3ubuntu0.1~esm1 |
None known |
cableswigUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 0.1.0+git20150808-10.1.0+git20150808-20.1.0+git20150808-2ubuntu0.1~esm1 |
None known |
cadaverUbuntu:16.04:LTS |
All versions, plus listed versions 0.23.3-2ubuntu2 |
None known |
coin3Ubuntu:Pro:16.04:LTS |
All versions, plus listed versions 3.1.4~abc9f50+dfsg1-13.1.4~abc9f50+dfsg1-1ubuntu0.1~esm13.1.4~abc9f50+dfsg1-1ubuntu0.1~esm2 |
None known |
insighttoolkitUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 3.20.1+git20120521-63.20.1+git20120521-6build13.20.1+git20120521-6ubuntu0.1~esm1 |
None known |
matanzaUbuntu:16.04:LTS |
All versions, plus listed versions 0.13+ds1-5 |
None known |
swish-eUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 2.4.7-42.4.7-4build12.4.7-4ubuntu0.1~esm1 |
None known |
vnc4Ubuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.1.1+xorg4.3.0-37.3ubuntu24.1.1+xorg4.3.0-37.3ubuntu2.1+esm1 |
None known |
cadaverUbuntu:18.04:LTS |
All versions, plus listed versions 0.23.3-2ubuntu3 |
None known |
coin3Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 3.1.4~abc9f50+dfsg1-23.1.4~abc9f50+dfsg2-13.1.4~abc9f50+dfsg3-13.1.4~abc9f50+dfsg3-23.1.4~abc9f50+dfsg3-2ubuntu0.1~esm1 |
None known |
matanzaUbuntu:18.04:LTS |
All versions, plus listed versions 0.13+ds1-5build10.13+ds1-6 |
None known |
swish-eUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2.4.7-5ubuntu12.4.7-5ubuntu1+esm1 |
None known |
vnc4Ubuntu:18.04:LTS |
All versions, plus listed versions 4.1.1+xorg4.3.0-37.3ubuntu2 |
None known |
cadaverUbuntu:20.04:LTS |
All versions, plus listed versions 0.23.3-2.1build1 |
None known |
matanzaUbuntu:20.04:LTS |
All versions, plus listed versions 0.13+ds1-60.13+ds2-1 |
None known |
swish-eUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 2.4.7-6build12.4.7-6build22.4.7-6ubuntu0.1~esm1 |
None known |
cadaverUbuntu:22.04:LTS |
All versions, plus listed versions 0.23.3-2.1build1 |
None known |
matanzaUbuntu:22.04:LTS |
All versions, plus listed versions 0.13+ds2-1 |
None known |
swish-eUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 2.4.7-6build32.4.7-6.12.4.7-6.1build12.4.7-6.1ubuntu0.1~esm1 |
None known |
cadaverUbuntu:24.04:LTS |
All versions, plus listed versions 0.24+dfsg-20.24+dfsg-30.24+dfsg-3build10.24+dfsg-3build2 |
None known |
matanzaUbuntu:24.04:LTS |
All versions, plus listed versions 0.13+ds2-10.13+ds2-1build10.13+ds2-1build2 |
None known |
swish-eUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 2.4.7-6.22.4.7-6.2build12.4.7-6.2build22.4.7-6.2build32.4.7-6.2ubuntu0.1~esm1 |
None known |
cadaverUbuntu:25.10 |
All versions, plus listed versions 0.26+dfsg-2 |
None known |
matanzaUbuntu:25.10 |
All versions, plus listed versions 0.13+ds2-2 |
None known |
paraviewUbuntu:25.10 |
All versions, plus listed versions 5.13.2+dfsg-2ubuntu15.13.2+dfsg-2ubuntu25.13.2+dfsg-3 |
None known |
sitecopyUbuntu:25.10 |
All versions, plus listed versions 1:0.16.6-161:0.16.6-16build1 |
None known |
swish-eUbuntu:25.10 |
All versions, plus listed versions 2.4.7-6.32.4.7-6.3build12.4.7-7 |
None known |
cadaverUbuntu:26.10 |
All versions, plus listed versions 0.28+dfsg-2 |
None known |
matanzaUbuntu:26.10 |
All versions, plus listed versions 0.13+ds2-2build1 |
None known |
paraviewUbuntu:26.10 |
All versions, plus listed versions 6.0.1+dfsg1-76.0.1+dfsg1-86.1.1+dfsg1-2build1 |
None known |
sitecopyUbuntu:26.10 |
All versions, plus listed versions 1:0.16.6-16build1 |
None known |
swish-eUbuntu:26.10 |
All versions, plus listed versions 2.4.7-7.12.4.7-7.22.4.7-7.2build1 |
None known |
cadaverUbuntu:26.04:LTS |
All versions, plus listed versions 0.26+dfsg-20.28+dfsg-10.28+dfsg-2 |
None known |
matanzaUbuntu:26.04:LTS |
All versions, plus listed versions 0.13+ds2-20.13+ds2-2build1 |
None known |
paraviewUbuntu:26.04:LTS |
All versions, plus listed versions 5.13.2+dfsg-35.13.2+dfsg-3ubuntu15.13.2+dfsg-3.16.0.1+dfsg1-6ubuntu16.0.1+dfsg1-7 |
None known |
sitecopyUbuntu:26.04:LTS |
All versions, plus listed versions 1:0.16.6-16build1 |
None known |
swish-eUbuntu:Pro:26.04:LTS |
All versions, plus listed versions 2.4.7-72.4.7-7.12.4.7-7.1ubuntu0.1~esm1 |
None known |
expatopenSUSE:Tumbleweed |
before 2.2.0-3.1 | 2.2.0-3.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
secunia.com/advisories/49504
sourceforge.net/tracker?func=detail&atid=110127&aid=3496608&group_id=10127
tenable.com/security/tns-2016-20
ubuntu.com/usn/USN-1527-1
bugs.python.org/issue13703
support.apple.com/HT205637
Show 57 moreShow less
rhn.redhat.com/errata/RHSA-2012-0731.html
securityfocus.com/bid/52379
lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
debian.org/security/2012/dsa-2525
oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
mandriva.com/security/advisories?name=MDVSA-2012:041
mail.libexpat.org/pipermail/expat-discuss/2012-March/002768.html
kc.mcafee.com/corporate/index?page=content&id=SB10365
nvd.nist.gov/vuln/detail/CVE-2012-0876
github.com/advisories/GHSA-q8w9-7fww-v592
security-tracker.debian.org/tracker/CVE-2012-0876
libexpat.github.io/doc/cve-2017-9233
access.redhat.com/errata/RHSA-2012:0731
bugzilla.redhat.com/show_bug.cgi?id=786617
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0731.json
cve.org/CVERecord?id=CVE-2012-0876
suse.com/support/update/announcement/2020/suse-su-20200497-1
bugzilla.suse.com/1068664
ubuntu.com/security/CVE-2012-0876
blog.gmane.org/gmane.text.xml.expat.bugs/month=20120301
openwall.com/lists/oss-security/2012/03/09/1