{"id":"CVE-2012-0841","aliases":["DEBIAN-CVE-2012-0841","DSA-2417-1","EUVD-2012-0866","GHSA-339p-rqfr-wg3j","RHSA-2012:0324","RHSA-2013:0217"],"status":"published","title":"libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash...","description":"libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0326,"percentile":0.88452,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-399"],"published":"2012-02-22T00:00:00Z","modified":"2026-10-23T17:47:34Z","fixes":[{"ecosystem":"Debian:12","package":"libxml2","fixed_in":["2.7.8.dfsg-8"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libxml2","fixed_in":["2.7.8.dfsg-8"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libxml2","fixed_in":["2.7.8.dfsg-8"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"libxml2","fixed_in":["2.7.8.dfsg-2+squeeze3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"libxml2","fixed_in":["0:2.6.26-2.1.15.el5_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"libxml2-debuginfo","fixed_in":["0:2.6.26-2.1.15.el5_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"libxml2-python","fixed_in":["0:2.6.26-2.1.15.el5_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"libxml2","fixed_in":["0:2.6.26-2.1.15.el5_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"libxml2-debuginfo","fixed_in":["0:2.6.26-2.1.15.el5_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"libxml2-devel","fixed_in":["0:2.6.26-2.1.15.el5_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"libxml2","fixed_in":["0:2.6.26-2.1.15.el5_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"libxml2-debuginfo","fixed_in":["0:2.6.26-2.1.15.el5_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"libxml2-devel","fixed_in":["0:2.6.26-2.1.15.el5_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"libxml2-python","fixed_in":["0:2.6.26-2.1.15.el5_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libxml2","fixed_in":["0:2.7.6-4.el6_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libxml2-debuginfo","fixed_in":["0:2.7.6-4.el6_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libxml2-python","fixed_in":["0:2.7.6-4.el6_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libxml2-devel","fixed_in":["0:2.7.6-4.el6_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libxml2-static","fixed_in":["0:2.7.6-4.el6_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libxml2","fixed_in":["0:2.7.6-4.el6_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libxml2-debuginfo","fixed_in":["0:2.7.6-4.el6_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libxml2-python","fixed_in":["0:2.7.6-4.el6_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libxml2-devel","fixed_in":["0:2.7.6-4.el6_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libxml2-static","fixed_in":["0:2.7.6-4.el6_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libxml2","fixed_in":["0:2.7.6-4.el6_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libxml2-debuginfo","fixed_in":["0:2.7.6-4.el6_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libxml2-devel","fixed_in":["0:2.7.6-4.el6_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libxml2-python","fixed_in":["0:2.7.6-4.el6_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libxml2-static","fixed_in":["0:2.7.6-4.el6_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libxml2","fixed_in":["0:2.7.6-4.el6_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libxml2-debuginfo","fixed_in":["0:2.7.6-4.el6_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libxml2-devel","fixed_in":["0:2.7.6-4.el6_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libxml2-python","fixed_in":["0:2.7.6-4.el6_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libxml2-static","fixed_in":["0:2.7.6-4.el6_2.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.8.dfsg-8"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.8.dfsg-8"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.8.dfsg-8"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.8.dfsg-2+squeeze3"}]}],"versions":["2.7.8.dfsg-2","2.7.8.dfsg-2+squeeze1","2.7.8.dfsg-2+squeeze2"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.26-2.1.15.el5_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.26-2.1.15.el5_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.26-2.1.15.el5_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.26-2.1.15.el5_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.26-2.1.15.el5_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.26-2.1.15.el5_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.26-2.1.15.el5_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.26-2.1.15.el5_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.26-2.1.15.el5_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.26-2.1.15.el5_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-4.el6_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-4.el6_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-4.el6_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-4.el6_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-4.el6_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-4.el6_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-4.el6_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-4.el6_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-4.el6_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-4.el6_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-4.el6_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-4.el6_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-4.el6_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-4.el6_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-4.el6_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-4.el6_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-4.el6_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-4.el6_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-4.el6_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-4.el6_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mingw32-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-6.el6_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mingw32-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-6.el6_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mingw32-libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-6.el6_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mingw32-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-6.el6_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mingw32-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-6.el6_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mingw32-libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-6.el6_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mingw32-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-6.el6_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mingw32-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-6.el6_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mingw32-libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-6.el6_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mingw32-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-6.el6_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mingw32-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-6.el6_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mingw32-libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-6.el6_3"}]}],"bundled":11}],"products":[{"vendor":"apple","product":"iphone_os"},{"vendor":"xmlsoft","product":"libxml2"}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0324.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/02/22/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0217.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://support.apple.com/kb/HT6001","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://xmlsoft.org/news.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://securitytracker.com/id?1026723","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://secunia.com/advisories/54886","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://support.apple.com/kb/HT5934","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.debian.org/security/2012/dsa-2417","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=660846","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://blogs.oracle.com/sunsecurity/entry/cve_2012_0841_denial_of","tags":["x_refsource_CONFIRM","x_transferred","article"]},{"url":"http://secunia.com/advisories/55568","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/52107","tags":["vdb-entry","x_refsource_BID","x_transferred","Patch","fix"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://git.gnome.org/browse/libxml2/commit/?id=8973d58b7498fa5100a876815476b81fd1a2412a","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0841","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:0324","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:0217","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-0841","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=787067","tags":["report"]},{"url":"https://github.com/advisories/GHSA-339p-rqfr-wg3j"},{"url":"https://security-tracker.debian.org/tracker/CVE-2012-0841","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0324.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-0841","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=645341","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=665963","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=709747","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=724906","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=735712","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=735751","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=767387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=771896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=822109","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=880466","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0217.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-4008","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-4008","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4008","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-4494","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-4494","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4494","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-0216","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-0216","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-0216","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-1944","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-1944","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-1944","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-2821","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2821","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2821","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-2834","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2834","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2834","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-3102","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-3102","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3102","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-3905","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-3905","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3905","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-3919","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-3919","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3919","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-5134","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-5134","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-5134","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2012-0841","description":"libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data.","status":"published","published":"2012-12-21T02:00:00Z","modified":"2024-08-06T18:38:14.956Z","updated_at":"2026-11-02T14:34:52.981189Z"}],"euvd":[{"id":"EUVD-2012-0866","description":"libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data.","status":"published","published":"2012-12-21T02:00:00Z","modified":"2024-08-06T18:38:14Z","updated_at":"2026-11-03T01:56:19.818597Z"}],"ghsa":[{"id":"GHSA-339p-rqfr-wg3j","title":"libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash...","description":"libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data.","status":"published","published":"2022-05-17T04:54:09Z","modified":"2023-02-10T05:06:55Z","updated_at":"2026-11-02T14:54:03.327923Z"}],"nvd":[{"id":"CVE-2012-0841","description":"libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data.","status":"published","published":"2012-12-21T05:46:14.993Z","modified":"2026-06-16T23:38:21.943Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-399"],"updated_at":"2026-11-02T14:02:16.958223Z"}],"osv":[{"id":"CVE-2012-0841","description":"libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data.","status":"published","published":"2012-12-21T05:46:14Z","modified":"2026-04-10T03:42:12.070237Z","updated_at":"2026-11-02T15:43:58.537032Z"},{"id":"DEBIAN-CVE-2012-0841","description":"libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data.","status":"published","published":"2012-12-21T05:46:14.993Z","modified":"2026-10-23T17:47:34.950226994Z","updated_at":"2026-11-02T15:45:24.92418Z"},{"id":"DSA-2417-1","title":"libxml2 - denial of service","status":"published","published":"2012-02-22T00:00:00Z","modified":"2026-03-09T01:21:45.018744Z","updated_at":"2026-11-02T15:46:15.489951Z"},{"id":"RHSA-2012:0324","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2024-09-15T19:43:29Z","modified":"2026-06-26T12:21:40.790321828Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2013:0217","title":"Red Hat Security Advisory: mingw32-libxml2 security update","status":"published","published":"2024-09-15T20:27:08Z","modified":"2026-06-28T10:07:20Z","updated_at":"2026-11-02T15:53:01.495018Z"}]}}