[Bug 1048835] [NEW] [Quantal] xmlrpc-c is vulnerable to CVE-2012-0876 and CVE-2012-1148

Launchpad Bug Tracker 1048835 at bugs.launchpad.net
Mon Sep 10 22:45:25 UTC 2012


*** This bug is a security vulnerability ***

You have been subscribed to a public security bug by Tyler Hicks (tyhicks):

XML-RPC for C and C++ could be made to cause a denial of service by
consuming excessive CPU and memory resources.

Here is the USN for the stable releases:

http://www.ubuntu.com/usn/usn-1527-2/

and the security team CVE tracker links:

http://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-0876
http://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-1148

** Affects: xmlrpc-c (Ubuntu)
     Importance: Medium
         Status: Confirmed

-- 
[Quantal] xmlrpc-c is vulnerable to CVE-2012-0876 and CVE-2012-1148
https://bugs.launchpad.net/bugs/1048835
You received this bug notification because you are a member of Ubuntu Sponsors Team, which is subscribed to the bug report.



More information about the Ubuntu-sponsors mailing list