CVE-2012-0876
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the...
4.3 MediumFix available
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
Exploit likelihood
5.66%Up 3.0 points since Feb 4, 2022
What each source reports
NVD Score used
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
- Record
CVE-2012-0876- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-400
- Updated
- 2026-11-02
CVE List No score
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
- Record
CVE-2012-0876- Updated
- 2026-11-02
EUVDEUVD-2012-0901 No score
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
- Record
EUVD-2012-0901- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q8w9-7fww-v592 No score
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the...
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
- Record
GHSA-q8w9-7fww-v592- Weakness
- CWE-400
- Updated
- 2026-11-02
OSVRHSA-2012:0731
Red Hat Security Advisory: expat security update
- Record
RHSA-2012:0731- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV No score
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
- Record
CVE-2012-0876- Updated
- 2026-11-02
Show 5 moreShow less
OSVDEBIAN-CVE-2012-0876 No score
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
- Record
DEBIAN-CVE-2012-0876- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10077-1 No score
expat-2.2.0-3.1 on GA media
These are all security issues fixed in the expat-2.2.0-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10077-1- Updated
- 2026-11-02
OSVPSF-2012-4 No score
Expat 2.2.1
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
- Record
PSF-2012-4- Updated
- 2026-11-02
OSVSUSE-SU-2020:0497-1 No score
Security update for python3
This update for python3 fixes the following issues:
Update to 3.4.10 (jsc#SLE-9427, bsc#1159208) from 3.4.6:
Security issues fixed:
- Update expat copy from 2.1.1 to 2.2.0 to fix the following issues: CVE-2012-0876, CVE-2016-0718, CVE-2016-4472, CVE-2017-9233, CVE-2016-9063
- CVE-2017-1000158: Fix an integer overflow in thePyString_DecodeEscape function in stringobject.c, resulting in heap-based bufferoverflow (bsc#1068664).
- Record
SUSE-SU-2020:0497-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-0876 No score
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
- Record
UBUNTU-CVE-2012-0876- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
expatDebian:12 |
before 2.1.0~beta3-1 | 2.1.0~beta3-1 |
expatDebian:13 |
before 2.1.0~beta3-1 | 2.1.0~beta3-1 |
expatDebian:14 |
before 2.1.0~beta3-1 | 2.1.0~beta3-1 |
libxmltokDebian:12 |
All versions, plus listed versions 1.2-41.2-4.11.2-4.1~exp11.2-4.2 |
None known |
xmlrpc-cDebian:12 |
before 1.16.33-3.2 | 1.16.33-3.2 |
xmlrpc-cDebian:13 |
before 1.16.33-3.2 | 1.16.33-3.2 |
xmlrpc-cDebian:14 |
before 1.16.33-3.2 | 1.16.33-3.2 |
expatDebian:6.0 From an advisory covering 2 CVEs |
before 2.0.1-7+squeeze1, plus listed versions 2.0.1-7 |
2.0.1-7+squeeze1 |
expatRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:1.95.8-11.el5_8 | 0:1.95.8-11.el5_8 |
expat-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:1.95.8-11.el5_8 | 0:1.95.8-11.el5_8 |
Show 100 moreShow less
| Package | Affected | Fixed |
|---|---|---|
expatRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:1.95.8-11.el5_8 | 0:1.95.8-11.el5_8 |
expat-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:1.95.8-11.el5_8 | 0:1.95.8-11.el5_8 |
expat-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:1.95.8-11.el5_8 | 0:1.95.8-11.el5_8 |
expatRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:1.95.8-11.el5_8 | 0:1.95.8-11.el5_8 |
expat-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:1.95.8-11.el5_8 | 0:1.95.8-11.el5_8 |
expat-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:1.95.8-11.el5_8 | 0:1.95.8-11.el5_8 |
expatRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:2.0.1-11.el6_2 | 0:2.0.1-11.el6_2 |
expat-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:2.0.1-11.el6_2 | 0:2.0.1-11.el6_2 |
expat-develRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:2.0.1-11.el6_2 | 0:2.0.1-11.el6_2 |
expatRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:2.0.1-11.el6_2 | 0:2.0.1-11.el6_2 |
expat-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:2.0.1-11.el6_2 | 0:2.0.1-11.el6_2 |
expat-develRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:2.0.1-11.el6_2 | 0:2.0.1-11.el6_2 |
expatRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.0.1-11.el6_2 | 0:2.0.1-11.el6_2 |
expat-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.0.1-11.el6_2 | 0:2.0.1-11.el6_2 |
expat-develRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.0.1-11.el6_2 | 0:2.0.1-11.el6_2 |
expatRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:2.0.1-11.el6_2 | 0:2.0.1-11.el6_2 |
expat-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:2.0.1-11.el6_2 | 0:2.0.1-11.el6_2 |
expat-develRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:2.0.1-11.el6_2 | 0:2.0.1-11.el6_2 |
python3SUSE:HPE Helion OpenStack 8 From an advisory covering 6 CVEs |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:HPE Helion OpenStack 8 From an advisory covering 6 CVEs |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:OpenStack Cloud 7 From an advisory covering 6 CVEs |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:OpenStack Cloud 7 From an advisory covering 6 CVEs |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:OpenStack Cloud 8 From an advisory covering 6 CVEs |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:OpenStack Cloud 8 From an advisory covering 6 CVEs |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:OpenStack Cloud Crowbar 8 From an advisory covering 6 CVEs |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:OpenStack Cloud Crowbar 8 From an advisory covering 6 CVEs |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Desktop 12 SP4 From an advisory covering 6 CVEs |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Desktop 12 SP4 From an advisory covering 6 CVEs |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Module for Web and Scripting 12 From an advisory covering 6 CVEs |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Module for Web and Scripting 12 From an advisory covering 6 CVEs |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 6 CVEs |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 6 CVEs |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server for SAP Applications 12 SP2 From an advisory covering 6 CVEs |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server for SAP Applications 12 SP2 From an advisory covering 6 CVEs |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 6 CVEs |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 6 CVEs |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Software Development Kit 12 SP4 From an advisory covering 6 CVEs |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Software Development Kit 12 SP4 From an advisory covering 6 CVEs |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 6 CVEs |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 6 CVEs |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server 12 SP1-LTSS From an advisory covering 6 CVEs |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server 12 SP1-LTSS From an advisory covering 6 CVEs |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server 12 SP2-LTSS From an advisory covering 6 CVEs |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server 12 SP2-LTSS From an advisory covering 6 CVEs |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 6 CVEs |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 6 CVEs |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server 12 SP3-LTSS From an advisory covering 6 CVEs |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server 12 SP3-LTSS From an advisory covering 6 CVEs |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server 12 SP3-BCL From an advisory covering 6 CVEs |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server 12 SP3-BCL From an advisory covering 6 CVEs |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server 12 SP4 From an advisory covering 6 CVEs |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server 12 SP4 From an advisory covering 6 CVEs |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 6 CVEs |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 6 CVEs |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 6 CVEs |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 6 CVEs |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 6 CVEs |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 6 CVEs |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Enterprise Storage 5 From an advisory covering 6 CVEs |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Enterprise Storage 5 From an advisory covering 6 CVEs |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
coin3Ubuntu:Pro:14.04:LTS |
All versions, plus listed versions 3.1.4~abc9f50-33.1.4~abc9f50-43.1.4~abc9f50-4ubuntu23.1.4~abc9f50-4ubuntu2+esm13.1.4~abc9f50-4ubuntu2+esm2 |
None known |
vnc4Ubuntu:Pro:14.04:LTS |
All versions, plus listed versions 4.1.1+xorg4.3.0-37ubuntu54.1.1+xorg4.3.0-37ubuntu5.0.14.1.1+xorg4.3.0-37ubuntu5.0.24.1.1+xorg4.3.0-37ubuntu5.0.2+esm1 |
None known |
ayttmUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 0.6.3-3build10.6.3-3ubuntu0.1~esm1 |
None known |
cableswigUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 0.1.0+git20150808-10.1.0+git20150808-20.1.0+git20150808-2ubuntu0.1~esm1 |
None known |
cadaverUbuntu:16.04:LTS |
All versions, plus listed versions 0.23.3-2ubuntu2 |
None known |
coin3Ubuntu:Pro:16.04:LTS |
All versions, plus listed versions 3.1.4~abc9f50+dfsg1-13.1.4~abc9f50+dfsg1-1ubuntu0.1~esm13.1.4~abc9f50+dfsg1-1ubuntu0.1~esm2 |
None known |
insighttoolkitUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 3.20.1+git20120521-63.20.1+git20120521-6build13.20.1+git20120521-6ubuntu0.1~esm1 |
None known |
matanzaUbuntu:16.04:LTS |
All versions, plus listed versions 0.13+ds1-5 |
None known |
swish-eUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 2.4.7-42.4.7-4build12.4.7-4ubuntu0.1~esm1 |
None known |
vnc4Ubuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.1.1+xorg4.3.0-37.3ubuntu24.1.1+xorg4.3.0-37.3ubuntu2.1+esm1 |
None known |
cadaverUbuntu:18.04:LTS |
All versions, plus listed versions 0.23.3-2ubuntu3 |
None known |
coin3Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 3.1.4~abc9f50+dfsg1-23.1.4~abc9f50+dfsg2-13.1.4~abc9f50+dfsg3-13.1.4~abc9f50+dfsg3-23.1.4~abc9f50+dfsg3-2ubuntu0.1~esm1 |
None known |
matanzaUbuntu:18.04:LTS |
All versions, plus listed versions 0.13+ds1-5build10.13+ds1-6 |
None known |
swish-eUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2.4.7-5ubuntu12.4.7-5ubuntu1+esm1 |
None known |
vnc4Ubuntu:18.04:LTS |
All versions, plus listed versions 4.1.1+xorg4.3.0-37.3ubuntu2 |
None known |
cadaverUbuntu:20.04:LTS |
All versions, plus listed versions 0.23.3-2.1build1 |
None known |
matanzaUbuntu:20.04:LTS |
All versions, plus listed versions 0.13+ds1-60.13+ds2-1 |
None known |
swish-eUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 2.4.7-6build12.4.7-6build22.4.7-6ubuntu0.1~esm1 |
None known |
cadaverUbuntu:22.04:LTS |
All versions, plus listed versions 0.23.3-2.1build1 |
None known |
matanzaUbuntu:22.04:LTS |
All versions, plus listed versions 0.13+ds2-1 |
None known |
swish-eUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 2.4.7-6build32.4.7-6.12.4.7-6.1build12.4.7-6.1ubuntu0.1~esm1 |
None known |
cadaverUbuntu:24.04:LTS |
All versions, plus listed versions 0.24+dfsg-20.24+dfsg-30.24+dfsg-3build10.24+dfsg-3build2 |
None known |
matanzaUbuntu:24.04:LTS |
All versions, plus listed versions 0.13+ds2-10.13+ds2-1build10.13+ds2-1build2 |
None known |
swish-eUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 2.4.7-6.22.4.7-6.2build12.4.7-6.2build22.4.7-6.2build32.4.7-6.2ubuntu0.1~esm1 |
None known |
cadaverUbuntu:25.10 |
All versions, plus listed versions 0.26+dfsg-2 |
None known |
matanzaUbuntu:25.10 |
All versions, plus listed versions 0.13+ds2-2 |
None known |
paraviewUbuntu:25.10 |
All versions, plus listed versions 5.13.2+dfsg-2ubuntu15.13.2+dfsg-2ubuntu25.13.2+dfsg-3 |
None known |
sitecopyUbuntu:25.10 |
All versions, plus listed versions 1:0.16.6-161:0.16.6-16build1 |
None known |
swish-eUbuntu:25.10 |
All versions, plus listed versions 2.4.7-6.32.4.7-6.3build12.4.7-7 |
None known |
cadaverUbuntu:26.10 |
All versions, plus listed versions 0.28+dfsg-2 |
None known |
matanzaUbuntu:26.10 |
All versions, plus listed versions 0.13+ds2-2build1 |
None known |
paraviewUbuntu:26.10 |
All versions, plus listed versions 6.0.1+dfsg1-76.0.1+dfsg1-86.1.1+dfsg1-2build1 |
None known |
sitecopyUbuntu:26.10 |
All versions, plus listed versions 1:0.16.6-16build1 |
None known |
swish-eUbuntu:26.10 |
All versions, plus listed versions 2.4.7-7.12.4.7-7.22.4.7-7.2build1 |
None known |
cadaverUbuntu:26.04:LTS |
All versions, plus listed versions 0.26+dfsg-20.28+dfsg-10.28+dfsg-2 |
None known |
matanzaUbuntu:26.04:LTS |
All versions, plus listed versions 0.13+ds2-20.13+ds2-2build1 |
None known |
paraviewUbuntu:26.04:LTS |
All versions, plus listed versions 5.13.2+dfsg-35.13.2+dfsg-3ubuntu15.13.2+dfsg-3.16.0.1+dfsg1-6ubuntu16.0.1+dfsg1-7 |
None known |
sitecopyUbuntu:26.04:LTS |
All versions, plus listed versions 1:0.16.6-16build1 |
None known |
swish-eUbuntu:Pro:26.04:LTS |
All versions, plus listed versions 2.4.7-72.4.7-7.12.4.7-7.1ubuntu0.1~esm1 |
None known |
expatopenSUSE:Tumbleweed From an advisory covering 11 CVEs |
before 2.2.0-3.1 | 2.2.0-3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-0876 is a medium vulnerability (CVSS 4.3) in Canonical Ubuntu Linux, published July 3, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.66%, the 93rd percentile. Fixed in expat 2.1.0~beta3-1.
References
secunia.com/advisories/49504
sourceforge.net/tracker?func=detail&atid=110127&aid=3496608&group_id=10127
tenable.com/security/tns-2016-20
ubuntu.com/usn/USN-1527-1
bugs.python.org/issue13703
support.apple.com/HT205637
Show 57 moreShow less
rhn.redhat.com/errata/RHSA-2012-0731.html
securityfocus.com/bid/52379
lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
debian.org/security/2012/dsa-2525
oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
mandriva.com/security/advisories?name=MDVSA-2012:041
mail.libexpat.org/pipermail/expat-discuss/2012-March/002768.html
kc.mcafee.com/corporate/index?page=content&id=SB10365
nvd.nist.gov/vuln/detail/CVE-2012-0876
github.com/advisories/GHSA-q8w9-7fww-v592
security-tracker.debian.org/tracker/CVE-2012-0876
libexpat.github.io/doc/cve-2017-9233
access.redhat.com/errata/RHSA-2012:0731
bugzilla.redhat.com/show_bug.cgi?id=786617
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0731.json
cve.org/CVERecord?id=CVE-2012-0876
suse.com/support/update/announcement/2020/suse-su-20200497-1
bugzilla.suse.com/1068664
ubuntu.com/security/CVE-2012-0876
blog.gmane.org/gmane.text.xml.expat.bugs/month=20120301
openwall.com/lists/oss-security/2012/03/09/1