ALPINE-CVE-2016-5300

ALPINE-CVE-2016-5300

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted identifiers in an XML document. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0876.

CVSS 7.5 · High · Fix available

Published

2016-06-16T18:59:10.547Z

Updated

2026-09-22T06:30:29.495875221Z

Stack: system

Check your server →