Linux Distros Unpatched Vulnerability : CVE-2012-1148
Discription

image
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context- dependent attackers to cause a denial of service (memory consumption) via a large number of crafted XML files that cause improperly-handled reallocation failures when expanding entities. (CVE-2012-1148) Note that Nessus relies on the presence of the package as reported by the…Read More

Back to Main

Subscribe for the latest news: