CVE-2012-6702
Summary
| CVE | CVE-2012-6702 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2016-06-16 18:59:00 UTC |
|---|
| Updated | 2023-11-07 02:13:00 UTC |
|---|
| Description | Expat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via vectors involving use of the srand function. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| oss-security - Re: expat hash collision fix too predictable? |
|
www.openwall.com |
|
| oss-security - Re: expat hash collision fix too predictable? |
MLIST |
www.openwall.com |
Mailing List, Third Party Advisory |
| Expat: Multiple vulnerabilities (GLSA 201701-21) — Gentoo Security |
GENTOO |
security.gentoo.org |
Third Party Advisory |
| Debian -- Security Information -- DSA-3597-1 expat |
|
www.debian.org |
|
| Libexpat Expat CVE-2012-6702 Predictable Random Number Generator Weakness |
BID |
www.securityfocus.com |
Third Party Advisory, VDB Entry |
| Android Security Bulletin—November 2016 | Android Open Source Project |
|
source.android.com |
|
| [R2] PVS 5.2.0 Fixes Multiple Third-party Library Vulnerabilities - Security Advisory | Tenable Network Security |
CONFIRM |
www.tenable.com |
Third Party Advisory |
| USN-3010-1: Expat vulnerabilities | Ubuntu |
UBUNTU |
www.ubuntu.com |
Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 710322 Gentoo Linux Expat Multiple Vulnerabilities (GLSA 201701-21)
