libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash…
Priority LOW 29CWE-399Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · Partial
- Fix status
- Partial Red Hat: 11 fixed, 1 without a fix
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-399 and the CVSS impact.
Summary
libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data.
Why it matters now
EPSS 0.0326 88th percentileScored 2026-11-07
Fix Partial Red Hat: 2 advisoriesRed Hat: 11 fixed, 1 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 172
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* | up to 2.7.8 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:1.7.0:*:*:*:*:*:*:* | 1.7.0 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:1.7.1:*:*:*:*:*:*:* | 1.7.1 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:1.7.2:*:*:*:*:*:*:* | 1.7.2 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:1.7.3:*:*:*:*:*:*:* | 1.7.3 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:1.7.4:*:*:*:*:*:*:* | 1.7.4 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:1.8.0:*:*:*:*:*:*:* | 1.8.0 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:1.8.1:*:*:*:*:*:*:* | 1.8.1 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:1.8.2:*:*:*:*:*:*:* | 1.8.2 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:1.8.3:*:*:*:*:*:*:* | 1.8.3 | Vulnerable | xmlsoft |
- cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* Versions up to 2.7.8 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:1.7.0:*:*:*:*:*:*:* Versions 1.7.0 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:1.7.1:*:*:*:*:*:*:* Versions 1.7.1 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:1.7.2:*:*:*:*:*:*:* Versions 1.7.2 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:1.7.3:*:*:*:*:*:*:* Versions 1.7.3 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:1.7.4:*:*:*:*:*:*:* Versions 1.7.4 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:1.8.0:*:*:*:*:*:*:* Versions 1.8.0 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:1.8.1:*:*:*:*:*:*:* Versions 1.8.1 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:1.8.2:*:*:*:*:*:*:* Versions 1.8.2 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:1.8.3:*:*:*:*:*:*:* Versions 1.8.3 Vulnerable ·xmlsoft
Show 162 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:xmlsoft:libxml2:1.8.4:*:*:*:*:*:*:* | 1.8.4 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:1.8.5:*:*:*:*:*:*:* | 1.8.5 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:1.8.6:*:*:*:*:*:*:* | 1.8.6 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:1.8.7:*:*:*:*:*:*:* | 1.8.7 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:1.8.9:*:*:*:*:*:*:* | 1.8.9 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:1.8.10:*:*:*:*:*:*:* | 1.8.10 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:1.8.13:*:*:*:*:*:*:* | 1.8.13 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:1.8.14:*:*:*:*:*:*:* | 1.8.14 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:1.8.16:*:*:*:*:*:*:* | 1.8.16 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.0.0:*:*:*:*:*:*:* | 2.0.0 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.1.0:*:*:*:*:*:*:* | 2.1.0 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.1.1:*:*:*:*:*:*:* | 2.1.1 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.2.0:*:*:*:*:*:*:* | 2.2.0 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.2.0:beta:*:*:*:*:*:* | 2.2.0 beta | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.2.1:*:*:*:*:*:*:* | 2.2.1 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.2.2:*:*:*:*:*:*:* | 2.2.2 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.2.3:*:*:*:*:*:*:* | 2.2.3 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.2.4:*:*:*:*:*:*:* | 2.2.4 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.2.5:*:*:*:*:*:*:* | 2.2.5 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.2.6:*:*:*:*:*:*:* | 2.2.6 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.2.7:*:*:*:*:*:*:* | 2.2.7 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.2.8:*:*:*:*:*:*:* | 2.2.8 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.2.9:*:*:*:*:*:*:* | 2.2.9 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.2.10:*:*:*:*:*:*:* | 2.2.10 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.2.11:*:*:*:*:*:*:* | 2.2.11 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.3.0:*:*:*:*:*:*:* | 2.3.0 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.3.1:*:*:*:*:*:*:* | 2.3.1 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.3.2:*:*:*:*:*:*:* | 2.3.2 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.3.3:*:*:*:*:*:*:* | 2.3.3 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.3.4:*:*:*:*:*:*:* | 2.3.4 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.3.5:*:*:*:*:*:*:* | 2.3.5 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.3.6:*:*:*:*:*:*:* | 2.3.6 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.3.7:*:*:*:*:*:*:* | 2.3.7 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.3.8:*:*:*:*:*:*:* | 2.3.8 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.3.9:*:*:*:*:*:*:* | 2.3.9 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.3.10:*:*:*:*:*:*:* | 2.3.10 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.3.11:*:*:*:*:*:*:* | 2.3.11 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.3.12:*:*:*:*:*:*:* | 2.3.12 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.3.13:*:*:*:*:*:*:* | 2.3.13 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.3.14:*:*:*:*:*:*:* | 2.3.14 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.1:*:*:*:*:*:*:* | 2.4.1 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.2:*:*:*:*:*:*:* | 2.4.2 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.3:*:*:*:*:*:*:* | 2.4.3 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.4:*:*:*:*:*:*:* | 2.4.4 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.5:*:*:*:*:*:*:* | 2.4.5 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.6:*:*:*:*:*:*:* | 2.4.6 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.7:*:*:*:*:*:*:* | 2.4.7 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.8:*:*:*:*:*:*:* | 2.4.8 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.9:*:*:*:*:*:*:* | 2.4.9 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.10:*:*:*:*:*:*:* | 2.4.10 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.11:*:*:*:*:*:*:* | 2.4.11 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.12:*:*:*:*:*:*:* | 2.4.12 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.13:*:*:*:*:*:*:* | 2.4.13 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.14:*:*:*:*:*:*:* | 2.4.14 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.15:*:*:*:*:*:*:* | 2.4.15 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.16:*:*:*:*:*:*:* | 2.4.16 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.17:*:*:*:*:*:*:* | 2.4.17 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.18:*:*:*:*:*:*:* | 2.4.18 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.19:*:*:*:*:*:*:* | 2.4.19 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.20:*:*:*:*:*:*:* | 2.4.20 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.21:*:*:*:*:*:*:* | 2.4.21 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.22:*:*:*:*:*:*:* | 2.4.22 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.23:*:*:*:*:*:*:* | 2.4.23 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.24:*:*:*:*:*:*:* | 2.4.24 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.25:*:*:*:*:*:*:* | 2.4.25 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.26:*:*:*:*:*:*:* | 2.4.26 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.27:*:*:*:*:*:*:* | 2.4.27 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.28:*:*:*:*:*:*:* | 2.4.28 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.29:*:*:*:*:*:*:* | 2.4.29 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.4.30:*:*:*:*:*:*:* | 2.4.30 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.5.0:*:*:*:*:*:*:* | 2.5.0 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.5.4:*:*:*:*:*:*:* | 2.5.4 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.5.7:*:*:*:*:*:*:* | 2.5.7 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.5.8:*:*:*:*:*:*:* | 2.5.8 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.5.10:*:*:*:*:*:*:* | 2.5.10 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.5.11:*:*:*:*:*:*:* | 2.5.11 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.0:*:*:*:*:*:*:* | 2.6.0 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.1:*:*:*:*:*:*:* | 2.6.1 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.2:*:*:*:*:*:*:* | 2.6.2 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.3:*:*:*:*:*:*:* | 2.6.3 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.4:*:*:*:*:*:*:* | 2.6.4 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.5:*:*:*:*:*:*:* | 2.6.5 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.6:*:*:*:*:*:*:* | 2.6.6 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.7:*:*:*:*:*:*:* | 2.6.7 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.8:*:*:*:*:*:*:* | 2.6.8 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.9:*:*:*:*:*:*:* | 2.6.9 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.11:*:*:*:*:*:*:* | 2.6.11 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.12:*:*:*:*:*:*:* | 2.6.12 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.13:*:*:*:*:*:*:* | 2.6.13 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.14:*:*:*:*:*:*:* | 2.6.14 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.16:*:*:*:*:*:*:* | 2.6.16 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.17:*:*:*:*:*:*:* | 2.6.17 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.18:*:*:*:*:*:*:* | 2.6.18 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.20:*:*:*:*:*:*:* | 2.6.20 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.21:*:*:*:*:*:*:* | 2.6.21 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.22:*:*:*:*:*:*:* | 2.6.22 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.23:*:*:*:*:*:*:* | 2.6.23 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.24:*:*:*:*:*:*:* | 2.6.24 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.25:*:*:*:*:*:*:* | 2.6.25 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.26:*:*:*:*:*:*:* | 2.6.26 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.27:*:*:*:*:*:*:* | 2.6.27 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.28:*:*:*:*:*:*:* | 2.6.28 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.29:*:*:*:*:*:*:* | 2.6.29 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.30:*:*:*:*:*:*:* | 2.6.30 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.31:*:*:*:*:*:*:* | 2.6.31 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.6.32:*:*:*:*:*:*:* | 2.6.32 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.7.0:*:*:*:*:*:*:* | 2.7.0 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.7.1:*:*:*:*:*:*:* | 2.7.1 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.7.2:*:*:*:*:*:*:* | 2.7.2 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.7.3:*:*:*:*:*:*:* | 2.7.3 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.7.4:*:*:*:*:*:*:* | 2.7.4 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.7.5:*:*:*:*:*:*:* | 2.7.5 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.7.6:*:*:*:*:*:*:* | 2.7.6 | Vulnerable | xmlsoft |
| cpe:2.3:a:xmlsoft:libxml2:2.7.7:*:*:*:*:*:*:* | 2.7.7 | Vulnerable | xmlsoft |
| cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* | up to 6.1.4 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:* | 1.0.0 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:* | 1.0.1 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:* | 1.0.2 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:* | 1.1.0 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:* | 1.1.1 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:* | 1.1.2 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:* | 1.1.3 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:* | 1.1.4 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:* | 1.1.5 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:* | 2.0 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:* | 2.0.0 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:* | 2.0.1 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:* | 2.0.2 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:* | 2.1 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:* | 2.1.1 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:* | 2.2 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:* | 2.2.1 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:* | 3.0.1 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:3.1:*:*:*:*:*:*:* | 3.1 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:3.1.2:*:*:*:*:*:*:* | 3.1.2 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:3.1.3:*:*:*:*:*:*:* | 3.1.3 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:3.2:*:*:*:*:*:*:* | 3.2 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:3.2.1:*:*:*:*:*:*:* | 3.2.1 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:3.2.2:*:*:*:*:*:*:* | 3.2.2 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:4.0.1:*:*:*:*:*:*:* | 4.0.1 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:4.0.2:*:*:*:*:*:*:* | 4.0.2 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:4.1:*:*:*:*:*:*:* | 4.1 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:4.2.1:*:*:*:*:*:*:* | 4.2.1 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:4.2.5:*:*:*:*:*:*:* | 4.2.5 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:4.2.8:*:*:*:*:*:*:* | 4.2.8 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:4.3.0:*:*:*:*:*:*:* | 4.3.0 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:4.3.1:*:*:*:*:*:*:* | 4.3.1 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:4.3.2:*:*:*:*:*:*:* | 4.3.2 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:4.3.3:*:*:*:*:*:*:* | 4.3.3 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:4.3.5:*:*:*:*:*:*:* | 4.3.5 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:5.0:*:*:*:*:*:*:* | 5.0 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:5.0.1:*:*:*:*:*:*:* | 5.0.1 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:5.1:*:*:*:*:*:*:* | 5.1 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:5.1.1:*:*:*:*:*:*:* | 5.1.1 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:6.0.1:*:*:*:*:*:*:* | 6.0.1 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:6.0.2:*:*:*:*:*:*:* | 6.0.2 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:6.1:*:*:*:*:*:*:* | 6.1 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:6.1.2:*:*:*:*:*:*:* | 6.1.2 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:6.1.3:*:*:*:*:*:*:* | 6.1.3 | Vulnerable | Apple |
- cpe:2.3:a:xmlsoft:libxml2:1.8.4:*:*:*:*:*:*:* Versions 1.8.4 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:1.8.5:*:*:*:*:*:*:* Versions 1.8.5 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:1.8.6:*:*:*:*:*:*:* Versions 1.8.6 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:1.8.7:*:*:*:*:*:*:* Versions 1.8.7 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:1.8.9:*:*:*:*:*:*:* Versions 1.8.9 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:1.8.10:*:*:*:*:*:*:* Versions 1.8.10 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:1.8.13:*:*:*:*:*:*:* Versions 1.8.13 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:1.8.14:*:*:*:*:*:*:* Versions 1.8.14 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:1.8.16:*:*:*:*:*:*:* Versions 1.8.16 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.0.0:*:*:*:*:*:*:* Versions 2.0.0 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.1.0:*:*:*:*:*:*:* Versions 2.1.0 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.1.1:*:*:*:*:*:*:* Versions 2.1.1 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.2.0:*:*:*:*:*:*:* Versions 2.2.0 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.2.0:beta:*:*:*:*:*:* Versions 2.2.0 beta Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.2.2:*:*:*:*:*:*:* Versions 2.2.2 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.2.3:*:*:*:*:*:*:* Versions 2.2.3 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.2.4:*:*:*:*:*:*:* Versions 2.2.4 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.2.5:*:*:*:*:*:*:* Versions 2.2.5 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.2.6:*:*:*:*:*:*:* Versions 2.2.6 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.2.7:*:*:*:*:*:*:* Versions 2.2.7 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.2.8:*:*:*:*:*:*:* Versions 2.2.8 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.2.9:*:*:*:*:*:*:* Versions 2.2.9 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.2.10:*:*:*:*:*:*:* Versions 2.2.10 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.2.11:*:*:*:*:*:*:* Versions 2.2.11 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.3.0:*:*:*:*:*:*:* Versions 2.3.0 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.3.1:*:*:*:*:*:*:* Versions 2.3.1 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.3.2:*:*:*:*:*:*:* Versions 2.3.2 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.3.3:*:*:*:*:*:*:* Versions 2.3.3 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.3.4:*:*:*:*:*:*:* Versions 2.3.4 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.3.5:*:*:*:*:*:*:* Versions 2.3.5 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.3.6:*:*:*:*:*:*:* Versions 2.3.6 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.3.7:*:*:*:*:*:*:* Versions 2.3.7 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.3.8:*:*:*:*:*:*:* Versions 2.3.8 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.3.9:*:*:*:*:*:*:* Versions 2.3.9 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.3.10:*:*:*:*:*:*:* Versions 2.3.10 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.3.11:*:*:*:*:*:*:* Versions 2.3.11 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.3.12:*:*:*:*:*:*:* Versions 2.3.12 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.3.13:*:*:*:*:*:*:* Versions 2.3.13 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.3.14:*:*:*:*:*:*:* Versions 2.3.14 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.1:*:*:*:*:*:*:* Versions 2.4.1 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.2:*:*:*:*:*:*:* Versions 2.4.2 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.3:*:*:*:*:*:*:* Versions 2.4.3 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.4:*:*:*:*:*:*:* Versions 2.4.4 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.5:*:*:*:*:*:*:* Versions 2.4.5 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.6:*:*:*:*:*:*:* Versions 2.4.6 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.7:*:*:*:*:*:*:* Versions 2.4.7 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.8:*:*:*:*:*:*:* Versions 2.4.8 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.9:*:*:*:*:*:*:* Versions 2.4.9 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.10:*:*:*:*:*:*:* Versions 2.4.10 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.11:*:*:*:*:*:*:* Versions 2.4.11 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.12:*:*:*:*:*:*:* Versions 2.4.12 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.13:*:*:*:*:*:*:* Versions 2.4.13 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.14:*:*:*:*:*:*:* Versions 2.4.14 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.15:*:*:*:*:*:*:* Versions 2.4.15 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.16:*:*:*:*:*:*:* Versions 2.4.16 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.17:*:*:*:*:*:*:* Versions 2.4.17 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.18:*:*:*:*:*:*:* Versions 2.4.18 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.19:*:*:*:*:*:*:* Versions 2.4.19 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.20:*:*:*:*:*:*:* Versions 2.4.20 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.21:*:*:*:*:*:*:* Versions 2.4.21 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.22:*:*:*:*:*:*:* Versions 2.4.22 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.23:*:*:*:*:*:*:* Versions 2.4.23 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.24:*:*:*:*:*:*:* Versions 2.4.24 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.25:*:*:*:*:*:*:* Versions 2.4.25 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.26:*:*:*:*:*:*:* Versions 2.4.26 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.27:*:*:*:*:*:*:* Versions 2.4.27 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.28:*:*:*:*:*:*:* Versions 2.4.28 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.29:*:*:*:*:*:*:* Versions 2.4.29 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.4.30:*:*:*:*:*:*:* Versions 2.4.30 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.5.0:*:*:*:*:*:*:* Versions 2.5.0 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.5.4:*:*:*:*:*:*:* Versions 2.5.4 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.5.7:*:*:*:*:*:*:* Versions 2.5.7 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.5.8:*:*:*:*:*:*:* Versions 2.5.8 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.5.10:*:*:*:*:*:*:* Versions 2.5.10 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.5.11:*:*:*:*:*:*:* Versions 2.5.11 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.0:*:*:*:*:*:*:* Versions 2.6.0 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.1:*:*:*:*:*:*:* Versions 2.6.1 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.2:*:*:*:*:*:*:* Versions 2.6.2 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.3:*:*:*:*:*:*:* Versions 2.6.3 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.4:*:*:*:*:*:*:* Versions 2.6.4 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.5:*:*:*:*:*:*:* Versions 2.6.5 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.6:*:*:*:*:*:*:* Versions 2.6.6 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.7:*:*:*:*:*:*:* Versions 2.6.7 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.8:*:*:*:*:*:*:* Versions 2.6.8 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.9:*:*:*:*:*:*:* Versions 2.6.9 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.11:*:*:*:*:*:*:* Versions 2.6.11 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.12:*:*:*:*:*:*:* Versions 2.6.12 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.13:*:*:*:*:*:*:* Versions 2.6.13 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.14:*:*:*:*:*:*:* Versions 2.6.14 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.16:*:*:*:*:*:*:* Versions 2.6.16 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.17:*:*:*:*:*:*:* Versions 2.6.17 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.18:*:*:*:*:*:*:* Versions 2.6.18 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.20:*:*:*:*:*:*:* Versions 2.6.20 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.21:*:*:*:*:*:*:* Versions 2.6.21 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.22:*:*:*:*:*:*:* Versions 2.6.22 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.23:*:*:*:*:*:*:* Versions 2.6.23 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.24:*:*:*:*:*:*:* Versions 2.6.24 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.25:*:*:*:*:*:*:* Versions 2.6.25 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.26:*:*:*:*:*:*:* Versions 2.6.26 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.27:*:*:*:*:*:*:* Versions 2.6.27 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.28:*:*:*:*:*:*:* Versions 2.6.28 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.29:*:*:*:*:*:*:* Versions 2.6.29 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.30:*:*:*:*:*:*:* Versions 2.6.30 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.31:*:*:*:*:*:*:* Versions 2.6.31 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.6.32:*:*:*:*:*:*:* Versions 2.6.32 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.7.0:*:*:*:*:*:*:* Versions 2.7.0 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.7.1:*:*:*:*:*:*:* Versions 2.7.1 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.7.2:*:*:*:*:*:*:* Versions 2.7.2 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.7.3:*:*:*:*:*:*:* Versions 2.7.3 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.7.4:*:*:*:*:*:*:* Versions 2.7.4 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.7.5:*:*:*:*:*:*:* Versions 2.7.5 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.7.6:*:*:*:*:*:*:* Versions 2.7.6 Vulnerable ·xmlsoft
- cpe:2.3:a:xmlsoft:libxml2:2.7.7:*:*:*:*:*:*:* Versions 2.7.7 Vulnerable ·xmlsoft
- cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* Versions up to 6.1.4 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:* Versions 1.1.0 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:* Versions 1.1.1 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:* Versions 1.1.2 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:* Versions 1.1.3 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:* Versions 1.1.4 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:* Versions 1.1.5 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:* Versions 2.0.0 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:* Versions 2.0.2 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:* Versions 2.1.1 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:3.1.2:*:*:*:*:*:*:* Versions 3.1.2 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:3.1.3:*:*:*:*:*:*:* Versions 3.1.3 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:3.2:*:*:*:*:*:*:* Versions 3.2 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:3.2.1:*:*:*:*:*:*:* Versions 3.2.1 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:3.2.2:*:*:*:*:*:*:* Versions 3.2.2 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:4.0.1:*:*:*:*:*:*:* Versions 4.0.1 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:4.0.2:*:*:*:*:*:*:* Versions 4.0.2 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:4.1:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:4.2.1:*:*:*:*:*:*:* Versions 4.2.1 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:4.2.5:*:*:*:*:*:*:* Versions 4.2.5 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:4.2.8:*:*:*:*:*:*:* Versions 4.2.8 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:4.3.0:*:*:*:*:*:*:* Versions 4.3.0 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:4.3.1:*:*:*:*:*:*:* Versions 4.3.1 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:4.3.2:*:*:*:*:*:*:* Versions 4.3.2 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:4.3.3:*:*:*:*:*:*:* Versions 4.3.3 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:4.3.5:*:*:*:*:*:*:* Versions 4.3.5 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:5.0.1:*:*:*:*:*:*:* Versions 5.0.1 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:5.1:*:*:*:*:*:*:* Versions 5.1 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:5.1.1:*:*:*:*:*:*:* Versions 5.1.1 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:6.0.1:*:*:*:*:*:*:* Versions 6.0.1 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:6.0.2:*:*:*:*:*:*:* Versions 6.0.2 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:6.1:*:*:*:*:*:*:* Versions 6.1 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:6.1.2:*:*:*:*:*:*:* Versions 6.1.2 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:6.1.3:*:*:*:*:*:*:* Versions 6.1.3 Vulnerable ·Apple
Remediation
Red Hat 2 advisories
- RHSA-2013:0217 Released 2013-01-31 · Red Hat rating Importantmingw32-libxml2 security update
- Red Hat Enterprise Linux Desktop Optional (v. 6) mingw32-libxml2-2.7.6-6.el6_3, mingw32-libxml2-static-2.7.6-6.el6_3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) mingw32-libxml2-2.7.6-6.el6_3, mingw32-libxml2-static-2.7.6-6.el6_3
- Red Hat Enterprise Linux Server Optional (v. 6) mingw32-libxml2-2.7.6-6.el6_3, mingw32-libxml2-static-2.7.6-6.el6_3
- Red Hat Enterprise Linux Workstation Optional (v. 6) mingw32-libxml2-2.7.6-6.el6_3, mingw32-libxml2-static-2.7.6-6.el6_3
- RHSA-2012:0324 Released 2012-02-21 · Red Hat rating Moderatelibxml2 security update
- RHEL Desktop Workstation (v. 5 client) libxml2-2.6.26-2.1.15.el5_8.2, libxml2-devel-2.6.26-2.1.15.el5_8.2, libxml2-devel-2.6.26-2.1.15.el5_8.2.i386
- Red Hat Enterprise Linux (v. 5 server) libxml2-2.6.26-2.1.15.el5_8.2, libxml2-2.6.26-2.1.15.el5_8.2.i386, libxml2-2.6.26-2.1.15.el5_8.2.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) libxml2-2.6.26-2.1.15.el5_8.2, libxml2-2.6.26-2.1.15.el5_8.2.i386, libxml2-python-2.6.26-2.1.15.el5_8.2 +1
- Red Hat Enterprise Linux Desktop (v. 6) libxml2-2.7.6-4.el6_2.4, libxml2-python-2.7.6-4.el6_2.4
- Red Hat Enterprise Linux Desktop Optional (v. 6) libxml2-2.7.6-4.el6_2.4, libxml2-devel-2.7.6-4.el6_2.4, libxml2-static-2.7.6-4.el6_2.4
- Red Hat Enterprise Linux HPC Node (v. 6) libxml2-2.7.6-4.el6_2.4, libxml2-python-2.7.6-4.el6_2.4
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libxml2-2.7.6-4.el6_2.4, libxml2-devel-2.7.6-4.el6_2.4, libxml2-static-2.7.6-4.el6_2.4
- Red Hat Enterprise Linux Server (v. 6) libxml2-2.7.6-4.el6_2.4, libxml2-2.7.6-4.el6_2.4.ppc, libxml2-devel-2.7.6-4.el6_2.4 +2
- Red Hat Enterprise Linux Server Optional (v. 6) libxml2-2.7.6-4.el6_2.4, libxml2-static-2.7.6-4.el6_2.4
- Red Hat Enterprise Linux Workstation (v. 6) libxml2-2.7.6-4.el6_2.4, libxml2-devel-2.7.6-4.el6_2.4, libxml2-python-2.7.6-4.el6_2.4
- Red Hat Enterprise Linux Workstation Optional (v. 6) libxml2-2.7.6-4.el6_2.4, libxml2-static-2.7.6-4.el6_2.4
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 4 | Affected | No fix yet |
| RHEL Desktop Workstation (v. 5 client) | Fixed | RHSA-2012:0324 |
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2012:0324 |
| Red Hat Enterprise Linux Desktop (v. 5 client) | Fixed | RHSA-2012:0324 |
| Red Hat Enterprise Linux Desktop (v. 6) | Fixed | RHSA-2012:0324 |
| Red Hat Enterprise Linux Desktop Optional (v. 6) | Fixed | RHSA-2012:0324, RHSA-2013:0217 |
| Red Hat Enterprise Linux HPC Node (v. 6) | Fixed | RHSA-2012:0324 |
| Red Hat Enterprise Linux HPC Node Optional (v. 6) | Fixed | RHSA-2012:0324, RHSA-2013:0217 |
| Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2012:0324 |
| Red Hat Enterprise Linux Server Optional (v. 6) | Fixed | RHSA-2012:0324, RHSA-2013:0217 |
| Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2012:0324 |
| Red Hat Enterprise Linux Workstation Optional (v. 6) | Fixed | RHSA-2012:0324, RHSA-2013:0217 |
Timeline
- 2026-10-02 Threatist record created from CVE-2012-0841
- 2026-10-03 Alias added: GHSA-339p-rqfr-wg3j
References
Advisory 7
Other 9
- [oss-security] 20120222 libxml2: hash table collisions CPU usage DoS
- http://support.apple.com/kb/HT6001
- http://xmlsoft.org/news.html
- http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html
- http://support.apple.com/kb/HT5934
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=660846
- https://blogs.oracle.com/sunsecurity/entry/cve_2012_0841_denial_of
- http://git.gnome.org/browse/libxml2/commit/?id=8973d58b7498fa5100a876815476b81fd1a2412a
- http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
Sources
- CVE-2012-0841 · CVE Program
- CVE-2012-0841 · NVD
- FIRST EPSS
- GHSA-339p-rqfr-wg3j · GitHub Advisory Database · CC BY 4.0
- CVE-2012-0841 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences