CVE-2012-0880 Apache Xerces-C++ allows remote attackers to cause a denial of service (CPU consumption) via a crafted message sent to an XML service that causes hash table collisions.
HighCVSS 7.5
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Apache Xerces-C++ allows remote attackers to cause a denial of service (CPU consumption) via a crafted message sent to an XML service that causes hash table collisions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu/xerces-c(Ubuntu:22.04) | All versions | No fix listed |
| debian/xerces-c(Debian:12) | All versions | No fix listed |
| debian/xerces-c(Debian:12) | = 3.3.0-1~exp1 | No fix listed |
| debian/xerces-c(Debian:13) | All versions | No fix listed |
| debian/xerces-c(Debian:13) | = 3.3.0-1~exp1 | No fix listed |
| debian/xerces-c(Debian:14) | All versions | No fix listed |
| debian/xerces-c(Debian:14) | = 3.3.0-1~exp1 | No fix listed |
| apache xerces-c++ | All versions | No fix listed |
| ubuntu/xerces-c(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/xerces-c(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/xerces-c(Ubuntu:26.10) | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2012-0880 vendor-advisory
- [oss-security] 20140708 Summer bug cleaning - some Hash DoS stuff mailing-list third-party-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory vdb-entry