CVE-2012-0881

CVSS v3.0 7.5 (High)

CVSS v2.0 7.8 (High)

EPSS 0.94 % (83^th)

Affected Products 1

Advisories 1

Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service (CPU consumption) via a crafted message to an XML service, which triggers hash table collisions.

Weaknesses

CWE-399: Resource Management Errors

CVE Status: PUBLISHED
CNA: Red Hat, Inc.
Published Date: 2017-10-30 16:29:00
(6 years ago)
Updated Date: 2023-02-13 00:23:10
(19 months ago)

Affected Products

Apache

Xerces2 Java

Configuration #1

		CPE23	From	Up To
	Apache Xerces2 Java 2.11.0 and prior versions	cpe:2.3:a:apache:xerces2_java		<= 2.11.0