Lucene search
RubySecRUBY:JRUBY-2011-4838-78116HistoryDec 26, 2011 - 8:00 p.m.
CVE-2011-4838 jruby: hash table collisions DoS (oCERT-2011-003)
2011-12-2620:00:00
RubySec
rubysec.com
6
JRuby before 1.6.5.1 computes hash values without restricting the ability
to trigger hash collisions predictably, which allows context-dependent attackers
to cause a denial of service (CPU consumption) via crafted input to an application
that maintains a hash table.
References
Related
debiancve
debiancve
CVE-2011-4838
2011-12-30 01:55:00
CVE-2012-5370
2012-11-28 13:03:00
cve
cve
CVE-2011-4838
2011-12-30 01:55:00
CVE-2012-5370
2012-11-28 13:03:00
prion
prion
Code injection
2011-12-30 01:55:00
Design/Logic Flaw
2012-11-28 13:03:00
checkpoint_security
checkpoint_security
openvas
openvas
Gentoo Security Advisory GLSA 201207-06 (jruby)
2012-08-10 00:00:00
Gentoo Security Advisory GLSA 201207-06 (jruby)
2012-08-10 00:00:00
Debian: Security Advisory (DLA-209-1)
2023-03-08 00:00:00
ubuntucve
ubuntucve
CVE-2011-4838
2011-12-30 00:00:00
CVE-2012-5370
2012-11-28 00:00:00
gentoo
gentoo
JRuby: Denial of service
2012-07-09 00:00:00
nessus
nessus
GLSA-201207-06 : JRuby: Denial of Service
2012-07-10 00:00:00
Debian DLA-209-1 : jruby security update
2015-04-30 00:00:00
osv
osv
jruby - security update
2015-04-29 00:00:00
JRuby denial of service via Hash Collision
2022-05-17 04:17:07
github
github
JRuby denial of service via Hash Collision
2022-05-17 04:17:07
debian
debian
[SECURITY] [DLA 209-1] jruby security update
2015-04-29 10:47:27
ibm
ibm
rubygems
rubygems
CVE-2012-5370 jruby: Murmur hash function collisions (oCERT-2012-001)
2012-11-22 20:00:00
freebsd
freebsd
Multiple implementations -- DoS via hash algorithm collision
2011-12-28 00:00:00
cert
cert
Hash table implementations vulnerable to algorithmic complexity attacks
2011-12-28 00:00:00
seebug
seebug
securityvulns
securityvulns
Related for RUBY:JRUBY-2011-4838-78116