ISOMAN

CVE

CVE-2012-6702

Expat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via vectors involving use of the srand function.

Severity
MEDIUM
CVSS
5.9
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://www.debian.org/security/2016/dsa-3597
  2. http://www.openwall.com/lists/oss-security/2016/06/03/8
  3. http://www.openwall.com/lists/oss-security/2016/06/04/1
  4. http://www.securityfocus.com/bid/91483
  5. http://www.ubuntu.com/usn/USN-3010-1
  6. https://security.gentoo.org/glsa/201701-21
  7. https://source.android.com/security/bulletin/2016-11-01.html
  8. https://www.tenable.com/security/tns-2016-20
  9. http://www.debian.org/security/2016/dsa-3597
  10. http://www.openwall.com/lists/oss-security/2016/06/03/8
  11. http://www.openwall.com/lists/oss-security/2016/06/04/1
  12. http://www.securityfocus.com/bid/91483
  13. http://www.ubuntu.com/usn/USN-3010-1
  14. https://security.gentoo.org/glsa/201701-21
  15. https://source.android.com/security/bulletin/2016-11-01.html
  16. https://www.tenable.com/security/tns-2016-20