Unscored DSA-2525-1 2 CVEs

expat - several

Published Aug 6, 2012 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 6.0	expat	2.0.1-7+squeeze1

Vulnerabilities 2

Unscored —

CVE-2012-0876

The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash …

expat matanza swish-e coin3 Debian Ubuntu

Jul 3, 2012
Unscored —

CVE-2012-1148

Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers t…

expat matanza swish-e coin3 Debian Ubuntu

Jul 3, 2012