Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-4838HistoryDec 30, 2011 - 1:55 a.m.
CVE-2011-4838
2011-12-3001:55:00
Debian Security Bug Tracker
security-tracker.debian.org
13
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.01 Low
EPSS
Percentile
83.2%
JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | jruby | < 1.5.6-4 | jruby_1.5.6-4_all.deb |
| Debian | 10 | all | jruby | < 1.5.6-4 | jruby_1.5.6-4_all.deb |
| Debian | 999 | all | jruby | < 1.5.6-4 | jruby_1.5.6-4_all.deb |
| Debian | 13 | all | jruby | < 1.5.6-4 | jruby_1.5.6-4_all.deb |
Related
cve
cve
CVE-2011-4838
2011-12-30 01:55:00
CVE-2012-5370
2012-11-28 13:03:00
prion
prion
Code injection
2011-12-30 01:55:00
Design/Logic Flaw
2012-11-28 13:03:00
nessus
nessus
GLSA-201207-06 : JRuby: Denial of Service
2012-07-10 00:00:00
Debian DLA-209-1 : jruby security update
2015-04-30 00:00:00
checkpoint_security
checkpoint_security
openvas
openvas
Gentoo Security Advisory GLSA 201207-06 (jruby)
2012-08-10 00:00:00
Gentoo Security Advisory GLSA 201207-06 (jruby)
2012-08-10 00:00:00
Debian: Security Advisory (DLA-209-1)
2023-03-08 00:00:00
ubuntucve
ubuntucve
CVE-2011-4838
2011-12-30 00:00:00
CVE-2012-5370
2012-11-28 00:00:00
gentoo
gentoo
JRuby: Denial of service
2012-07-09 00:00:00
rubygems
rubygems
CVE-2011-4838 jruby: hash table collisions DoS (oCERT-2011-003)
2011-12-26 20:00:00
CVE-2012-5370 jruby: Murmur hash function collisions (oCERT-2012-001)
2012-11-22 20:00:00
osv
osv
jruby - security update
2015-04-29 00:00:00
JRuby denial of service via Hash Collision
2022-05-17 04:17:07
debiancve
debiancve
CVE-2012-5370
2012-11-28 13:03:00
github
github
JRuby denial of service via Hash Collision
2022-05-17 04:17:07
debian
debian
[SECURITY] [DLA 209-1] jruby security update
2015-04-29 10:47:27
ibm
ibm
freebsd
freebsd
Multiple implementations -- DoS via hash algorithm collision
2011-12-28 00:00:00
cert
cert
Hash table implementations vulnerable to algorithmic complexity attacks
2011-12-28 00:00:00
securityvulns
securityvulns
seebug
seebug
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.01 Low
EPSS
Percentile
83.2%
Related for DEBIANCVE:CVE-2011-4838