Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2011-5034
HistoryDec 30, 2011 - 1:55 a.m.

CVE-2011-5034

2011-12-3001:55:01
CWE-20
[email protected]
web.nvd.nist.gov

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

5.4 Medium

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.7%

JSON

Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. NOTE: this might overlap CVE-2011-4461.

Affected configurations

NVD
Node
apachegeronimoRange≤2.2.1
OR
apachegeronimoMatch1.0
OR
apachegeronimoMatch1.1
OR
apachegeronimoMatch1.1.1
OR
apachegeronimoMatch1.2
OR
apachegeronimoMatch2.0.1
OR
apachegeronimoMatch2.0.2
OR
apachegeronimoMatch2.1
OR
apachegeronimoMatch2.1.1
OR
apachegeronimoMatch2.1.2
OR
apachegeronimoMatch2.1.3
OR
apachegeronimoMatch2.1.4
OR
apachegeronimoMatch2.1.5
OR
apachegeronimoMatch2.1.6
OR
apachegeronimoMatch2.1.7
OR
apachegeronimoMatch2.1.8
OR
apachegeronimoMatch2.2

References

Related

cve 2
osv 2
cvelist 2
prion 2
github 2
veracode 1
nessus 7
openvas 6
redhat 3
fedora 2
ibm 17
nvd 1
ubuntucve 1
ubuntu 1
exploitpack 1
seebug 2
exploitdb 1
securityvulns 2
oracle 3
cve
cve
CVE-2011-5034
2011-12-30 01:55:01
CVE-2011-4461
2011-12-30 01:55:01
osv
osv
Apache Geronimo Hash Collisions Cause DoS
2022-05-13 01:07:39
Improper Input Validation in Jetty
2022-05-14 01:27:35
cvelist
cvelist
CVE-2011-5034
2011-12-30 01:00:00
CVE-2011-4461
2011-12-30 01:00:00
prion
prion
Design/Logic Flaw
2011-12-30 01:55:00
Design/Logic Flaw
2011-12-30 01:55:00
github
github
Apache Geronimo Hash Collisions Cause DoS
2022-05-13 01:07:39
Improper Input Validation in Jetty
2022-05-14 01:27:35
veracode
veracode
Denial Of Service (DoS)
2016-12-15 05:41:34
nessus
nessus
Fedora 15 : jetty-6.1.26-7.fc15 (2012-0752)
2012-03-26 00:00:00
Fedora 16 : jetty-6.1.26-8.fc16 (2012-0730)
2012-03-26 00:00:00
RHEL 6 : jetty-eclipse (Unpatched Vulnerability)
2024-06-03 00:00:00
openvas
openvas
Fedora Update for jetty FEDORA-2012-0730
2012-03-26 00:00:00
Ubuntu Update for jetty USN-1429-1
2012-04-30 00:00:00
Fedora Update for jetty FEDORA-2012-0752
2012-03-26 00:00:00
redhat
redhat
(RHSA-2012:1605) Moderate: Fuse MQ Enterprise 7.1.0 update
2012-12-21 00:00:00
(RHSA-2012:1606) Moderate: Fuse Management Console 7.1.0 update
2012-12-21 00:00:00
(RHSA-2012:1604) Moderate: Fuse ESB Enterprise 7.1.0 update
2012-12-21 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: jetty-6.1.26-8.fc16
2012-03-24 00:28:51
[SECURITY] Fedora 15 Update: jetty-6.1.26-7.fc15
2012-03-24 00:34:42
ibm
ibm
Security Bulletin: Potential Denial of Service (DoS) security vulnerability in IBM Sterling Secure Proxy
2022-09-26 05:45:55
Security Bulletin: Potential Denial of Service (DoS) security vulnerability in IBM Sterling External Authentication Server
2021-10-13 14:26:59
Security Bulletin: Potential Denial of Service (DoS) security vulnerability in IBM Sterling External Authentication Server
2022-09-25 23:13:40
nvd
nvd
CVE-2011-4461
2011-12-30 01:55:01
ubuntucve
ubuntucve
CVE-2011-4461
2011-12-29 00:00:00
ubuntu
ubuntu
Jetty vulnerability
2012-04-26 00:00:00
exploitpack
exploitpack
PHP Hash Table Collision - Denial of Service (PoC)
2012-01-03 00:00:00
seebug
seebug
PHP Hash Table Collision Proof Of Concept
2014-07-01 00:00:00
Multiple Programming Language Implementations Vulnerable to Hash Table Collision Attacks
2011-12-29 00:00:00
exploitdb
exploitdb
PHP Hash Table Collision - Denial of Service (PoC)
2012-01-03 00:00:00
securityvulns
securityvulns
[oCERT-2011-003] multiple implementations denial-of-service via hash algorithm collision
2012-01-02 00:00:00
Oracle / Sun / PeopleSoft / MySQL multiple security vulnerabilities
2015-01-25 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2016
2016-04-19 00:00:00
Oracle Critical Patch Update Advisory - January 2015
2015-03-10 00:00:00
CPU July 2018
2018-07-17 00:00:00

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

5.4 Medium

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.7%

JSON
Related for NVD:CVE-2011-5034
cve2osv2cvelist2prion2github2veracode1nessus7openvas6redhat3fedora2ibm17nvd1ubuntucve1ubuntu1exploitpack1seebug2exploitdb1securityvulns2oracle3