[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247862

 
 

909

 
 

194603

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-3597-1 expat -- expat

ID: oval:org.secpod.oval:def:602529Date: (C)2016-06-09   (M)2024-02-19
Class: PATCHFamily: unix




Two related issues have been discovered in Expat, a C library for parsing XML. CVE-2012-6702 It was introduced when CVE-2012-0876 was addressed. Stefan Sørensen discovered that the use of the function XML_Parse seeds the random number generator generating repeated outputs for rand calls. CVE-2016-5300 It is the product of an incomplete solution for CVE-2012-0876. The parser poorly seeds the random number generator allowing an attacker to cause a denial of service via an XML file with crafted identifiers. You might need to manually restart programs and services using expat libraries.

Platform:
Debian 8.x
Product:
expat
Reference:
DSA-3597-1
CVE-2012-6702
CVE-2016-5300
CVE-2012-0876
CVE    3
CVE-2016-5300
CVE-2012-6702
CVE-2012-0876
CPE    11
cpe:/o:debian:debian_linux:8.x
cpe:/a:libexpat:expat:1.95.6
cpe:/a:libexpat:expat:1.95.7
cpe:/a:libexpat:expat:1.95.8
...

© SecPod Technologies