CVE-2012-3514

MEDIUM 5.0CVE-2012-3514 · Published 25/08/2012 · updated 16/06/2026

In short

CVE-2012-3514 is a MEDIUM (CVSS 5.0) vulnerability affecting ocaml xml-light library (nicolas cannasse).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ocaml xml-light library nicolas_cannasse	`≤ r233`	No fix yet

Description

OCaml Xml-Light Library before r234 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via unspecified vectors.

References

secunia.com/advisories/50311 · Vendor Advisory
mandriva.com/security/advisories
openwall.com/lists/oss-security/2012/08/21/2
securityfocus.com/bid/55114
wiki.mageia.org/en/Support/Advisories/MGASA-2012-0266

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free