Summary
The remote host is missing an update to libxml2
announced via advisory DSA 2417-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%202417-1
Insight
It was discovered that the internal hashing routine of libxml2, a library providing an extensive API to handle XML data, is vulnerable to predictable hash collisions. Given an attacker with knowledge of the hashing algorithm, it is possible to craft input that creates a large amount of collisions. As a result it is possible to perform denial of service attacks against applications using libxml2 functionality because of the computational overhead.
For the stable distribution (squeeze), this problem has been fixed in version 2.7.8.dfsg-2+squeeze3.
For the testing (wheezy) and unstable (sid) distributions, this problem will be fixed soon.
We recommend that you upgrade your libxml2 packages.
Severity
Classification
-
CVE CVE-2012-0841 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
Related Vulnerabilities