Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
xmlrpc-c can exhaust file handles and stop working
published 14 years ago
Summary
The xmlrpc-c library uses the expat XML parser, and specially crafted XML files can make it open a huge number of file handles. This can fill up the system’s resources, causing the application to become unresponsive or crash. Update xmlrpc-c to a version that includes the newer expat parser (2.1.0 or later) or apply the available patch to prevent the problem.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | xmlrpc-c | <= 1.60.04-4 |
Original advisory text
CVE-2012-1147 affecting package xmlrpc-c 1.60.04-4
readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.
References
Timeline
Published3 Jul 2012
Updated23 Sep 2026
First seen23 Sep 2026
Sources
AZL-45093 · OSV
Track software like this
Free during beta