CVE-2012-1148 Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (memory consumption) via a large number of crafted XM...
MediumCVSS 5.0
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (memory consumption) via a large number of crafted XML files that cause improperly-handled reallocation failures when expanding entities.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/expat(Debian:12) | < 2.1.0~beta3-1 | 2.1.0~beta3-1 |
| debian/expat(Debian:13) | < 2.1.0~beta3-1 | 2.1.0~beta3-1 |
| debian/expat(Debian:14) | < 2.1.0~beta3-1 | 2.1.0~beta3-1 |
| debian/libxmltok(Debian:12) | All versions | No fix listed |
| debian/libxmltok(Debian:12) | = 1.2-4 | No fix listed |
| debian/libxmltok(Debian:12) | = 1.2-4.1 | No fix listed |
| debian/libxmltok(Debian:12) | = 1.2-4.1~exp1 | No fix listed |
| debian/libxmltok(Debian:12) | = 1.2-4.2 | No fix listed |
| debian/xmlrpc-c(Debian:12) | < 1.16.33-3.2 | 1.16.33-3.2 |
| debian/xmlrpc-c(Debian:13) | < 1.16.33-3.2 | 1.16.33-3.2 |
| debian/xmlrpc-c(Debian:14) | < 1.16.33-3.2 | 1.16.33-3.2 |
| libexpat project libexpat | <= 2.0.1 | No fix listed |
| libexpat project libexpat | = 1.95.1 | No fix listed |
| libexpat project libexpat | = 1.95.2 | No fix listed |
| libexpat project libexpat | = 1.95.4 | No fix listed |
| libexpat project libexpat | = 1.95.5 | No fix listed |
| libexpat project libexpat | = 1.95.6 | No fix listed |
| libexpat project libexpat | = 1.95.7 | No fix listed |
| libexpat project libexpat | = 1.95.8 | No fix listed |
| libexpat project libexpat | = 2.0.0 | No fix listed |
| apple mac os x | <= 10.11.1 | No fix listed |
| ubuntu/cadaver(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/matanza(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/libxmltok(Ubuntu:24.04) | < 1.2-4.1ubuntu2.24.0.4.1+esm3 | 1.2-4.1ubuntu2.24.0.4.1+esm3 |
| ubuntu/swish-e(Ubuntu:24.04) | All versions | No fix listed |
Show 14 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu/cadaver(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/matanza(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/paraview(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/sitecopy(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/swish-e(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/cadaver(Ubuntu:26.10) | All versions | No fix listed |
| ubuntu/matanza(Ubuntu:26.10) | All versions | No fix listed |
| ubuntu/paraview(Ubuntu:26.10) | All versions | No fix listed |
| ubuntu/sitecopy(Ubuntu:26.10) | All versions | No fix listed |
| ubuntu/swish-e(Ubuntu:26.10) | All versions | No fix listed |
| ubuntu/cadaver(Ubuntu:22.04) | All versions | No fix listed |
| ubuntu/matanza(Ubuntu:22.04) | All versions | No fix listed |
| ubuntu/libxmltok(Ubuntu:22.04) | < 1.2-4ubuntu0.22.04.1~esm5 | 1.2-4ubuntu0.22.04.1~esm5 |
| ubuntu/swish-e(Ubuntu:22.04) | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- USN-1527-1 vendor-advisory
- USN-1527-2 vendor-advisory
- USN-1613-1 vendor-advisory
- USN-1613-2 vendor-advisory
- USN-5455-1 vendor-advisory
- USN-7307-1 vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2012-1148 vendor-advisory
- expat.cvs.sourceforge.net patch
- APPLE-SA-2015-12-08-3 vendor-advisory
- RHSA-2012:0731 vendor-advisory
- RHSA-2016:0062 vendor-advisory
- RHSA-2016:2957 vendor-advisory
- 49504 third-party-advisory vendor-advisory
- 51024 third-party-advisory
- 51040 third-party-advisory
- sourceforge.net
- sourceforge.net
- DSA-2525 vendor-advisory
- MDVSA-2012:041 vendor-advisory
- 52379 vdb-entry
- 1034344 vdb-entry
- USN-1527-1 vendor-advisory
- USN-1613-1 vendor-advisory
- USN-1613-2 vendor-advisory
- support.apple.com
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking