Staging Environment: Content and features may be unstable or change without notice.
Advisory details: ubuntu_osv / UBUNTU-CVE-2012-5657
Advisory ID ubuntu_osv/UBUNTU-CVE-2012-5657
Aliases CVE-2012-5657
Summary The (1) Zend_Feed_Rss and (2) Zend_Feed_Atom classes in Zend_Feed in Zend Framework 1.11.x before 1.11.15 and 1.12.x before 1.12.1 allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, and possibly cause a denial of service (CPU and memory consumption) via an XML External Entity (XXE) attack.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (0)
There are no known CWE.
System Score Found at
ubuntu-priority medium https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2012/UBUNTU-CVE-2012-5657.json
Reference id Reference type URL
http://framework.zend.com/security/advisory/ZF2012-05
https://bugzilla.redhat.com/show_bug.cgi?id=889037
http://secunia.com/advisories/51583
https://ubuntu.com/security/CVE-2012-5657
https://www.cve.org/CVERecord?id=CVE-2012-5657
http://www.openwall.com/lists/oss-security/2012/12/20/2

No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.

There are no known vectors.

There are no SSVC decisions available.