Buffer overflow

2012-11-2813:03:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

67.9%

JSON

Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39, computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

CPENameOperatorVersion
jdkle1.7.0
jdkeq1.7.0 update2
jdkeq1.7.0
jdkeq1.7.0 update3
jdkeq1.7.0 update1
jdkeq1.7.0 update4
jreeq1.7.0 update3
jreeq1.7.0 update2
jrele1.7.0
jreeq1.7.0 update4

Name	Operator	Version
jdk	le	1.7.0
jdk	eq	1.7.0 update2
jdk	eq	1.7.0
jdk	eq	1.7.0 update3
jdk	eq	1.7.0 update1
jdk	eq	1.7.0 update4
jre	eq	1.7.0 update3
jre	eq	1.7.0 update2
jre	le	1.7.0
jre	eq	1.7.0 update4