Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-ra3j-95vv-cfen
Vulnerability ID VCID-ra3j-95vv-cfen
Aliases CVE-2012-0876
Summary Multiple vulnerabilities have been found in Expat, possibly resulting in Denial of Service.
Status Published
Exploitability 0.5
Weighted Severity 2.6
Risk 1.3
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-407 Inefficient Algorithmic Complexity
System Score Found at
epss 0.00306 https://api.first.org/data/v1/epss?cve=CVE-2012-0876
epss 0.00306 https://api.first.org/data/v1/epss?cve=CVE-2012-0876
epss 0.00306 https://api.first.org/data/v1/epss?cve=CVE-2012-0876
epss 0.00306 https://api.first.org/data/v1/epss?cve=CVE-2012-0876
epss 0.00306 https://api.first.org/data/v1/epss?cve=CVE-2012-0876
epss 0.00306 https://api.first.org/data/v1/epss?cve=CVE-2012-0876
epss 0.00306 https://api.first.org/data/v1/epss?cve=CVE-2012-0876
epss 0.00306 https://api.first.org/data/v1/epss?cve=CVE-2012-0876
cvssv3.1 5.3 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0876.json
https://api.first.org/data/v1/epss?cve=CVE-2012-0876
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0876
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
663579 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=663579
687672 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=687672
786617 https://bugzilla.redhat.com/show_bug.cgi?id=786617
GLSA-201209-06 https://security.gentoo.org/glsa/201209-06
RHSA-2012:0731 https://access.redhat.com/errata/RHSA-2012:0731
RHSA-2016:0062 https://access.redhat.com/errata/RHSA-2016:0062
RHSA-2016:2957 https://access.redhat.com/errata/RHSA-2016:2957
RHSA-2017:3239 https://access.redhat.com/errata/RHSA-2017:3239
USN-1527-1 https://usn.ubuntu.com/1527-1/
USN-1527-2 https://usn.ubuntu.com/1527-2/
USN-1613-1 https://usn.ubuntu.com/1613-1/
USN-1613-2 https://usn.ubuntu.com/1613-2/
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.53778
EPSS Score 0.00306
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:02:37.015349+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/201209-06 38.0.0