p PatchFirst

CVE-2012-6702

CVE-2012-6702

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Expat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via vectors involving use of the srand function.

CVSS 5.9 · Medium · EPSS 2.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • expat Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.1.1-3

    Update to 2.1.1-3

  • expat Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.1.1-3

    Update to 2.1.1-3

  • expat Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.1.1-3

    Update to 2.1.1-3

  • libxmltok Debian:12

    Versions
    • 1.2-4
    • 1.2-4.1
    • 1.2-4.1~exp1
    • 1.2-4.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • expat Ubuntu:14.04:LTS

    Versions
    • 2.1.0-4
    • 2.1.0-4ubuntu1
    • 2.1.0-4ubuntu1.1
    • 2.1.0-4ubuntu1.2
    Affected ranges
    • ECOSYSTEM: < 2.1.0-4ubuntu1.3

    Update to 2.1.0-4ubuntu1.3

  • vnc4 Ubuntu:Pro:14.04:LTS

    Versions
    • 4.1.1+xorg4.3.0-37ubuntu5
    • 4.1.1+xorg4.3.0-37ubuntu5.0.1
    • 4.1.1+xorg4.3.0-37ubuntu5.0.2
    • 4.1.1+xorg4.3.0-37ubuntu5.0.2+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xmlrpc-c Ubuntu:Pro:14.04:LTS

    Versions
    • 1.16.33-3.2ubuntu3
    • 1.33.06-0ubuntu1
    • 1.33.06-0ubuntu1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • expat Ubuntu:16.04:LTS

    Versions
    • 2.1.0-7
    • 2.1.0-7ubuntu0.16.04.1
    Affected ranges
    • ECOSYSTEM: < 2.1.0-7ubuntu0.16.04.2

    Update to 2.1.0-7ubuntu0.16.04.2

  • insighttoolkit Ubuntu:Pro:16.04:LTS

    Versions
    • 3.20.1+git20120521-6
    • 3.20.1+git20120521-6build1
    • 3.20.1+git20120521-6ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vnc4 Ubuntu:Pro:16.04:LTS

    Versions
    • 4.1.1+xorg4.3.0-37.3ubuntu2
    • 4.1.1+xorg4.3.0-37.3ubuntu2.1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xmlrpc-c Ubuntu:Pro:16.04:LTS

    Versions
    • 1.33.14-0.2ubuntu3
    • 1.33.14-1ubuntu1
    • 1.33.14-1ubuntu1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vnc4 Ubuntu:18.04:LTS

    Versions
    • 4.1.1+xorg4.3.0-37.3ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xmlrpc-c Ubuntu:Pro:18.04:LTS

    Versions
    • 1.33.14-7
    • 1.33.14-8
    • 1.33.14-8build1
    • 1.33.14-8ubuntu0.18.04.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xmlrpc-c Ubuntu:Pro:20.04:LTS

    Versions
    • 1.33.14-8build1
    • 1.33.14-8build2
    • 1.33.14-8ubuntu0.20.04.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xmlrpc-c Ubuntu:Pro:22.04:LTS

    Versions
    • 1.33.14-9
    • 1.33.14-10
    • 1.33.14-10ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xmlrpc-c Ubuntu:Pro:24.04:LTS

    Versions
    • 1.33.14-11
    • 1.33.14-11.1
    • 1.33.14-12
    • 1.33.14-12build1
    • 1.33.14-12build2
    • 1.33.14-12ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • paraview Ubuntu:25.10

    Versions
    • 5.13.2+dfsg-2ubuntu1
    • 5.13.2+dfsg-2ubuntu2
    • 5.13.2+dfsg-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sitecopy Ubuntu:25.10

    Versions
    • 1:0.16.6-16
    • 1:0.16.6-16build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xmlrpc-c Ubuntu:25.10

    Versions
    • 1.59.03-7
    • 1.59.03-9
    • 1.59.03-10
    • 1.59.03-10.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • paraview Ubuntu:26.10

    Versions
    • 6.0.1+dfsg1-7
    • 6.0.1+dfsg1-8
    • 6.1.1+dfsg1-2build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sitecopy Ubuntu:26.10

    Versions
    • 1:0.16.6-16build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xmlrpc-c Ubuntu:26.10

    Versions
    • 1.60.05-1
    • 1.60.05-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • paraview Ubuntu:26.04:LTS

    Versions
    • 5.13.2+dfsg-3
    • 5.13.2+dfsg-3ubuntu1
    • 5.13.2+dfsg-3.1
    • 6.0.1+dfsg1-6ubuntu1
    • 6.0.1+dfsg1-7
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →