CVE-2012-6702

EPSS 0.54%
Veröffentlicht 16.06.2016 18:59:00
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle security@opentext.com
Teams Watchlist Login
Unerledigt Login

Expat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via vectors involving use of the srand function.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Libexpat Project ≫ Libexpat Version < 2.2.0

Canonical ≫ Ubuntu Linux Version12.04 SwEditionlts

Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts

Canonical ≫ Ubuntu Linux Version15.10

Canonical ≫ Ubuntu Linux Version16.04 SwEditionlts

Debian ≫ Debian Linux Version8.0

Google ≫ Android Version4.4.4

Google ≫ Android Version5.0.2

Google ≫ Android Version5.1.1

Google ≫ Android Version6.0

Google ≫ Android Version6.0.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.54%	0.666

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.9	2.2	3.6	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

https://www.tenable.com/security/tns-2016-20

https://security.gentoo.org/glsa/201701-21

https://source.android.com/security/bulletin/2016-11-01.html

http://www.debian.org/security/2016/dsa-3597

http://www.openwall.com/lists/oss-security/2016/06/03/8

http://www.openwall.com/lists/oss-security/2016/06/04/1

http://www.securityfocus.com/bid/91483

http://www.ubuntu.com/usn/USN-3010-1

https://nvd.nist.gov/vuln/detail/CVE-2012-6702

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-6702

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-6702

EUVD