CVE-2012-1035

2022-10-0316:15:25

mitre

www.cve.org

adacore

aws

hash collision

cpu consumption

denial of service

6.6 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.7%

JSON

AdaCore Ada Web Services (AWS) before 2.10.2 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.