Lucene search

[email protected]NVD:CVE-2011-4461

HistoryDec 30, 2011 - 1:55 a.m.

CVE-2011-4461

2011-12-3001:55:01

CWE-310

[email protected]

web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5.4 Medium

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.7%

JSON

Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.

Affected configurations

NVD

Node

oraclesun_storage_common_array_managerMatch6.9.0

Node

mortbayjettyRange≤8.1.0rc2

mortbayjettyMatch1.0

mortbayjettyMatch1.0.1

mortbayjettyMatch1.1

mortbayjettyMatch1.1.1

mortbayjettyMatch1.2.0

mortbayjettyMatch1.3.0

mortbayjettyMatch1.3.1

mortbayjettyMatch1.3.2

mortbayjettyMatch1.3.3

mortbayjettyMatch1.3.4

mortbayjettyMatch1.3.5

mortbayjettyMatch2.0alpha1

mortbayjettyMatch2.0alpha2

mortbayjettyMatch2.0beta1

mortbayjettyMatch2.0beta2

mortbayjettyMatch2.0.0

mortbayjettyMatch2.0.1

mortbayjettyMatch2.0.2

mortbayjettyMatch2.0.3

mortbayjettyMatch2.0.4

mortbayjettyMatch2.0.5

mortbayjettyMatch2.1.0

mortbayjettyMatch2.1.1

mortbayjettyMatch2.1.2

mortbayjettyMatch2.1.3

mortbayjettyMatch2.1.4

mortbayjettyMatch2.1.5

mortbayjettyMatch2.1.6

mortbayjettyMatch2.1.7

mortbayjettyMatch2.1.b0

mortbayjettyMatch2.1.b1

mortbayjettyMatch2.2alpha0

mortbayjettyMatch2.2alpha1

mortbayjettyMatch2.2beta0

mortbayjettyMatch2.2beta1

mortbayjettyMatch2.2beta2

mortbayjettyMatch2.2beta3

mortbayjettyMatch2.2beta4

mortbayjettyMatch2.2.0

mortbayjettyMatch2.2.1

mortbayjettyMatch2.2.2

mortbayjettyMatch2.2.3

mortbayjettyMatch2.2.4

mortbayjettyMatch2.2.5

mortbayjettyMatch2.2.6

mortbayjettyMatch2.2.7

mortbayjettyMatch2.2.8

mortbayjettyMatch2.3.0

mortbayjettyMatch2.3.0a

mortbayjettyMatch2.3.1

mortbayjettyMatch2.3.2

mortbayjettyMatch2.3.3

mortbayjettyMatch2.3.4

mortbayjettyMatch2.3.5

mortbayjettyMatch2.4.0

mortbayjettyMatch2.4.1

mortbayjettyMatch2.4.2

mortbayjettyMatch2.4.3

mortbayjettyMatch2.4.4

mortbayjettyMatch2.4.5

mortbayjettyMatch2.4.6

mortbayjettyMatch2.4.7

mortbayjettyMatch2.4.8

mortbayjettyMatch2.4.9

mortbayjettyMatch3.0

mortbayjettyMatch3.0.0

mortbayjettyMatch3.0.0rc1

mortbayjettyMatch3.0.0rc2

mortbayjettyMatch3.0.0rc3

mortbayjettyMatch3.0.0rc4

mortbayjettyMatch3.0.0rc5

mortbayjettyMatch3.0.0rc6

mortbayjettyMatch3.0.0rc7

mortbayjettyMatch3.0.0rc8

mortbayjettyMatch3.0.1

mortbayjettyMatch3.0.2

mortbayjettyMatch3.0.3

mortbayjettyMatch3.0.4

mortbayjettyMatch3.0.5

mortbayjettyMatch3.0.6

mortbayjettyMatch3.0.a0

mortbayjettyMatch3.0.a1

mortbayjettyMatch3.0.a2

mortbayjettyMatch3.0.a3

mortbayjettyMatch3.0.a4

mortbayjettyMatch3.0.a5

mortbayjettyMatch3.0.a6

mortbayjettyMatch3.0.a7

mortbayjettyMatch3.0.a8

mortbayjettyMatch3.0.a9

mortbayjettyMatch3.0.a90

mortbayjettyMatch3.0.a91

mortbayjettyMatch3.0.a92

mortbayjettyMatch3.0.a93

mortbayjettyMatch3.0.a94

mortbayjettyMatch3.0.a95

mortbayjettyMatch3.0.a96

mortbayjettyMatch3.0.a97

mortbayjettyMatch3.0.a98

mortbayjettyMatch3.0.a99

mortbayjettyMatch3.0.b01

mortbayjettyMatch3.0.b02

mortbayjettyMatch3.0.b03

mortbayjettyMatch3.0.b04

mortbayjettyMatch3.0.b05

mortbayjettyMatch3.1rc0

mortbayjettyMatch3.1rc1

mortbayjettyMatch3.1rc2

mortbayjettyMatch3.1rc3

mortbayjettyMatch3.1rc4

mortbayjettyMatch3.1rc5

mortbayjettyMatch3.1rc6

mortbayjettyMatch3.1rc7

mortbayjettyMatch3.1rc8

mortbayjettyMatch3.1rc9

mortbayjettyMatch3.1.0

mortbayjettyMatch3.1.1

mortbayjettyMatch3.1.2

mortbayjettyMatch3.1.3

mortbayjettyMatch3.1.4

mortbayjettyMatch3.1.5

mortbayjettyMatch3.1.6

mortbayjettyMatch3.1.7

mortbayjettyMatch3.1.8

mortbayjettyMatch3.1.9

mortbayjettyMatch4.0rc1

mortbayjettyMatch4.0rc2

mortbayjettyMatch4.0rc3

mortbayjettyMatch4.0.0

mortbayjettyMatch4.0.1

mortbayjettyMatch4.0.1rc0

mortbayjettyMatch4.0.1rc1

mortbayjettyMatch4.0.1rc2

mortbayjettyMatch4.0.2

mortbayjettyMatch4.0.3

mortbayjettyMatch4.0.4

mortbayjettyMatch4.0.5

mortbayjettyMatch4.0.6

mortbayjettyMatch4.0.b0

mortbayjettyMatch4.0.b1

mortbayjettyMatch4.0.b2

mortbayjettyMatch4.0.d0

mortbayjettyMatch4.0.d1

mortbayjettyMatch4.0.d2

mortbayjettyMatch4.0.d3

mortbayjettyMatch4.0.d4

mortbayjettyMatch4.1.0

mortbayjettyMatch4.1.0rc0

mortbayjettyMatch4.1.0rc1

mortbayjettyMatch4.1.0rc2

mortbayjettyMatch4.1.0rc3

mortbayjettyMatch4.1.0rc4

mortbayjettyMatch4.1.0rc5

mortbayjettyMatch4.1.0rc6

mortbayjettyMatch4.1.1

mortbayjettyMatch4.1.2

mortbayjettyMatch4.1.3

mortbayjettyMatch4.1.4

mortbayjettyMatch4.1.b0

mortbayjettyMatch4.1.b1

mortbayjettyMatch4.1.d0

mortbayjettyMatch4.1.d1

mortbayjettyMatch4.1.d2

mortbayjettyMatch4.2

mortbayjettyMatch4.2.0

mortbayjettyMatch4.2.0beta0

mortbayjettyMatch4.2.0rc0

mortbayjettyMatch4.2.0rc1

mortbayjettyMatch4.2.1

mortbayjettyMatch4.2.2

mortbayjettyMatch4.2.3

mortbayjettyMatch4.2.4

mortbayjettyMatch4.2.4rc0

mortbayjettyMatch4.2.5

mortbayjettyMatch4.2.6

mortbayjettyMatch4.2.7

mortbayjettyMatch4.2.8_01

mortbayjettyMatch4.2.9

mortbayjettyMatch4.2.9rc1

mortbayjettyMatch4.2.9rc2

mortbayjettyMatch4.2.10

mortbayjettyMatch4.2.10pre0

mortbayjettyMatch4.2.10pre1

mortbayjettyMatch4.2.10pre2

mortbayjettyMatch4.2.11

mortbayjettyMatch4.2.12

mortbayjettyMatch4.2.14

mortbayjettyMatch4.2.14rc0

mortbayjettyMatch4.2.14rc1

mortbayjettyMatch4.2.15

mortbayjettyMatch4.2.15rc0

mortbayjettyMatch4.2.16

mortbayjettyMatch4.2.17

mortbayjettyMatch4.2.18

mortbayjettyMatch4.2.19

mortbayjettyMatch4.2.20

mortbayjettyMatch4.2.20rc0

mortbayjettyMatch4.2.21

mortbayjettyMatch4.2.22

mortbayjettyMatch4.2.23

mortbayjettyMatch4.2.23rc0

mortbayjettyMatch4.2.24

mortbayjettyMatch4.2.24rc0

mortbayjettyMatch4.2.24rc1

mortbayjettyMatch4.2.25

mortbayjettyMatch4.2.26

mortbayjettyMatch4.2.27

mortbayjettyMatch5.0alpha0

mortbayjettyMatch5.0alpha1

mortbayjettyMatch5.0alpha2

mortbayjettyMatch5.0alpha3

mortbayjettyMatch5.0beta0

mortbayjettyMatch5.0beta1

mortbayjettyMatch5.0beta2

mortbayjettyMatch5.0rc1

mortbayjettyMatch5.0rc2

mortbayjettyMatch5.0rc3

mortbayjettyMatch5.0rc4

mortbayjettyMatch5.0.0

mortbayjettyMatch5.0.0rc0

mortbayjettyMatch5.1

mortbayjettyMatch5.1rc0

mortbayjettyMatch5.1rc1

mortbayjettyMatch5.1.0

mortbayjettyMatch5.1.1

mortbayjettyMatch5.1.1rc0

mortbayjettyMatch5.1.1rc1

mortbayjettyMatch5.1.2

mortbayjettyMatch5.1.2pre0

mortbayjettyMatch5.1.3

mortbayjettyMatch5.1.3rc0

mortbayjettyMatch5.1.3rc1

mortbayjettyMatch5.1.3rc2

mortbayjettyMatch5.1.3rc3

mortbayjettyMatch5.1.3rc4

mortbayjettyMatch5.1.4

mortbayjettyMatch5.1.4rc0

mortbayjettyMatch5.1.5

mortbayjettyMatch5.1.5rc0

mortbayjettyMatch5.1.5rc1

mortbayjettyMatch5.1.5rc2

mortbayjettyMatch5.1.6

mortbayjettyMatch5.1.7

mortbayjettyMatch5.1.7rc0

mortbayjettyMatch5.1.8

mortbayjettyMatch5.1.9

mortbayjettyMatch5.1.10

mortbayjettyMatch5.1.11

mortbayjettyMatch5.1.11rc0

mortbayjettyMatch5.1.12

mortbayjettyMatch5.1.13

mortbayjettyMatch5.1.14

mortbayjettyMatch6.0.0

mortbayjettyMatch6.0.0alpha0

mortbayjettyMatch6.0.0alpha1

mortbayjettyMatch6.0.0alpha2

mortbayjettyMatch6.0.0alpha3

mortbayjettyMatch6.0.0beta0

mortbayjettyMatch6.0.0beta1

mortbayjettyMatch6.0.0beta10

mortbayjettyMatch6.0.0beta11

mortbayjettyMatch6.0.0beta12

mortbayjettyMatch6.0.0beta14

mortbayjettyMatch6.0.0beta15

mortbayjettyMatch6.0.0beta16

mortbayjettyMatch6.0.0beta17

mortbayjettyMatch6.0.0beta2

mortbayjettyMatch6.0.0beta3

mortbayjettyMatch6.0.0beta4

mortbayjettyMatch6.0.0beta5

mortbayjettyMatch6.0.0beta6

mortbayjettyMatch6.0.0beta7

mortbayjettyMatch6.0.0beta8

mortbayjettyMatch6.0.0beta9

mortbayjettyMatch6.0.0betax

mortbayjettyMatch6.0.0rc0

mortbayjettyMatch6.0.0rc1

mortbayjettyMatch6.0.0rc2

mortbayjettyMatch6.0.0rc3

mortbayjettyMatch6.0.0rc4

mortbayjettyMatch6.0.1

mortbayjettyMatch6.0.2

mortbayjettyMatch6.1.0

mortbayjettyMatch6.1.0pre0

mortbayjettyMatch6.1.0pre1

mortbayjettyMatch6.1.0pre2

mortbayjettyMatch6.1.0pre3

mortbayjettyMatch6.1.0rc0

mortbayjettyMatch6.1.0rc1

mortbayjettyMatch6.1.0rc2

mortbayjettyMatch6.1.0rc3

mortbayjettyMatch6.1.1

mortbayjettyMatch6.1.1rc0

mortbayjettyMatch6.1.2

mortbayjettyMatch6.1.2pre0

mortbayjettyMatch6.1.2pre1

mortbayjettyMatch6.1.2rc0

mortbayjettyMatch6.1.2rc1

mortbayjettyMatch6.1.2rc2

mortbayjettyMatch6.1.2rc3

mortbayjettyMatch6.1.2rc4

mortbayjettyMatch6.1.2rc5

mortbayjettyMatch6.1.3

mortbayjettyMatch6.1.4

mortbayjettyMatch6.1.4rc0

mortbayjettyMatch6.1.4rc1

mortbayjettyMatch6.1.5

mortbayjettyMatch6.1.5rc0

mortbayjettyMatch6.1.6

mortbayjettyMatch6.1.6rc0

mortbayjettyMatch6.1.6rc1

mortbayjettyMatch6.1.7

mortbayjettyMatch6.1.8

mortbayjettyMatch6.1.9

mortbayjettyMatch6.1.10

mortbayjettyMatch6.1.11

mortbayjettyMatch6.1.12

mortbayjettyMatch6.1.12rc1

mortbayjettyMatch6.1.12rc2

mortbayjettyMatch6.1.12rc3

mortbayjettyMatch6.1.12rc4

mortbayjettyMatch6.1.12rc5

mortbayjettyMatch6.1.14

mortbayjettyMatch6.1.15

mortbayjettyMatch6.1.15pre0

mortbayjettyMatch6.1.15rc2

mortbayjettyMatch6.1.15rc3

mortbayjettyMatch6.1.15rc4

mortbayjettyMatch6.1.15rc5

mortbayjettyMatch6.1.16

mortbayjettyMatch6.1.19

mortbayjettyMatch6.1.20

mortbayjettyMatch6.1.21

mortbayjettyMatch7.0.0

mortbayjettyMatch7.0.0m1

mortbayjettyMatch7.0.0m2

mortbayjettyMatch7.0.0pre0

mortbayjettyMatch7.0.0pre1

mortbayjettyMatch7.0.0pre3

References

archives.neohapsis.com/archives/bugtraq/2011-12/0181.html

marc.info/?l=bugtraq&m=143387688830075&w=2

secunia.com/advisories/47408

secunia.com/advisories/48981

www.kb.cert.org/vuls/id/903934

www.nruns.com/_downloads/advisory28122011.pdf

www.ocert.org/advisories/ocert-2011-003.html

www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html

www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

www.securitytracker.com/id?1026475

www.ubuntu.com/usn/USN-1429-1

exchange.xforce.ibmcloud.com/vulnerabilities/72017

security.netapp.com/advisory/ntap-20190307-0004/

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5.4 Medium

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.7%

JSON

Related for NVD:CVE-2011-4461

nessus7 openvas6 redhat3 fedora2 github2 ibm16 cve2 ubuntucve1 osv2 prion2 cvelist2 ubuntu1 nvd1 seebug1 securityvulns2 oracle3