CVE-2012-0881

Published: Oct 30, 2017

Modified: Aug 6, 2024

PUBLISHED

Description

Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service (CPU consumption) via a crafted message to an XML service, which triggers hash table collisions.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

[j-users] 20180503 [ANNOUNCEMENT]: Apache Xerces-J 2.12.0 now available

mailing-list

x_refsource_MLIST

[oss-security] 20140708 Summer bug cleaning - some Hash DoS stuff

mailing-list

x_refsource_MLIST

[lucene-solr-user] 20190104 Re: SOLR v7 Security Issues Caused Denial of Use - Sonatype Application Composition Report

mailing-list

x_refsource_MLIST

[drill-dev] 20191017 Dependencies used by Drill contain known vulnerabilities

mailing-list

x_refsource_MLIST

[drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities

mailing-list

x_refsource_MLIST

[drill-issues] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities

mailing-list

x_refsource_MLIST

[lucene-solr-user] 20200320 CVEs (vulnerabilities) that apply to Solr 8.4.1

mailing-list

x_refsource_MLIST

https://issues.apache.org/jira/browse/XERCESJ-1685

x_refsource_CONFIRM

https://bugzilla.redhat.com/show_bug.cgi?id=787104

x_refsource_CONFIRM

https://www.oracle.com//security-alerts/cpujul2021.html

x_refsource_MISC

[hadoop-common-issues] 20210928 [GitHub] [hadoop] warrenzhu25 opened a new pull request #3496: HADOOP-17941. Update xerces to 2.12

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2012-0881

Description

Affected Products

References