CVE-2012-2921: XEE
Published May 21, 2012
·Updated
Universal Feed Parser (aka feedparser or python-feedparser) before 5.1.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML ENTITY declaration in a non-ASCII encoded document.
Affected Software
15 affected componentsFixes available
pip/feedparser<5.1.2
5.1.2
Mark Pilgrim Feedparser<=5.1.1
Mark Pilgrim Feedparser=3.0
Mark Pilgrim Feedparser=3.0.1
Mark Pilgrim Feedparser=3.1
Mark Pilgrim Feedparser=3.2
Mark Pilgrim Feedparser=3.3
Mark Pilgrim Feedparser=4.0
Mark Pilgrim Feedparser=4.0.1
Mark Pilgrim Feedparser=4.0.2
Mark Pilgrim Feedparser=4.1
Mark Pilgrim Feedparser=5.0
Mark Pilgrim Feedparser=5.0.1
Mark Pilgrim Feedparser=5.1
Mark Pilgrim Feedparser=5.1.2
Event History
May 21, 2012
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Jul 24, 2018
Advisory Published
via GitHub·08:00 PM
Frequently Asked Questions
1
What is the severity of CVE-2012-2921?
The severity of CVE-2012-2921 is rated high with a score of 7.5.
2
How do I fix CVE-2012-2921?
To fix CVE-2012-2921, upgrade to version 5.1.2 or later of the Universal Feed Parser.
3
What type of attack does CVE-2012-2921 involve?
CVE-2012-2921 involves a denial of service attack caused by memory consumption.
4
Which software is affected by CVE-2012-2921?
CVE-2012-2921 affects the Universal Feed Parser, also known as feedparser or python-feedparser.
5
What can exploit CVE-2012-2921?
CVE-2012-2921 can be exploited via a crafted XML ENTITY declaration in a non-ASCII encoded document.