USN-1641-1: OpenStack Keystone vulnerabilities

Vijaya Erukala discovered that Keystone did not properly invalidate EC2-style credentials such that if credentials were removed from a tenant, an authenticated and authorized user using those credentials may still be allowed access beyond the account owner's expectations. CVE-2012-5571 It was...

CVE-2012-5373 vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-26-openj9, openjdk-11-openj9, openjdk-17-openj9, openjdk-25-openj9, openjdk-8-openj9...

CVE-2012-5373

Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a...

CVE-2012-5372

The vulnerability CVE-2012-5372 affects Rubinius’ MurmurHash3 implementation. The hash function does not adequately restrict the ability to trigger hash collisions, enabling context-dependent attackers to cause high CPU usage and DoS by sending crafted input to an application that uses a hash tab...

CVE-2012-2739

CVE-2012-2739 affects Oracle Java SE prior to 7 Update 6 and OpenJDK 7 prior to 7u6 build 12, and OpenJDK 8 prior to build 39. The vulnerability stems from computing hash values without restricting hash collisions, enabling context-dependent attackers to cause CPU exhaustion (DoS) by crafting inp...

CVE-2012-5373

Technical details about CVE-2012-5373 are not publicly provided in the connected documents. Monitor OSV/ENISA entries for updates that may disclose affected products, versions, and fixes.

CVE-2012-5370

JRuby before 1.6.5.1 is vulnerable to a denial-of-service due to hash-collision attacks in hash table implementations. The root cause is insufficient randomization/restriction of hash collisions, allowing crafted input to trigger CPU consumption. Remediation: upgrade to JRuby 1.6.5.1 or newer (as...

CVE-2012-5371

CVE-2012-5371 affects Ruby (CRuby) 1.9 prior to 1.9.3-p327 and 2.0 prior to r37575. The issue is that hash values can be triggered for collisions without proper restriction, enabling context-dependent attackers to cause CPU-driven denial of service via crafted input to hash-table data structures,...

CVE-2012-6051

CVE-2012-6051 relates to Google CityHash, where the hash function allows context-dependent attackers to trigger predictable hash collisions, causing a denial of service through CPU consumption in applications that use hash tables. The connected records consistently describe the issue as a collisi...

CVE-2012-5134

Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entities in an XML...

CVE-2012-5131

CVE-2012-5131 affects Google Chrome/Chromium on Mac OS X via improper rendering in the Intel GPU driver, with potential denial of service and unspecified impact. Public documents corroborate that this family of CVEs was addressed in Chromium updates around late 2012 (e.g., openSUSE SU-2012:1637-1...

CVE-2012-5133

The CVE-2012-5133 entry concerns a use-after-free in SVG filters affecting Google Chrome/Chromium prior to 23.0.1271.91. Connected sources confirm this CVE in Chromium updates and list the issue among fixes in Chromium 25.x ranges (e.g., openSUSE openSUSE-SU-2012:1637-1). Affected component is th...

CVE-2012-5132

CVE-2012-5132 affects Chromium/Chromium-based browsers (e.g., Chrome prior to 23.0.1271.91) via a denial of service causing an application crash when handling a response with chunked transfer coding. Connected advisories (openSUSE/SUSE GLSA 201309-16) confirm the issue as a browser crash with chu...

CVE-2012-5134

CVE-2012-5134 is a heap-based buffer underflow in libxml2’s xmlParseAttValueComplex (parser.c) present in libxml2 2.9.0 and earlier, used by Google Chrome up to 23.0.1271.91 and other products. The flaw allows a remote attacker to cause a crash or possibly execute arbitrary code via crafted XML e...

CVE-2012-5135

Removed by vendor...

CVE-2012-5136

CVE-2012-5136 affects Chromium; the flaw is a bad cast in input element handling, enabling a remote attacker to cause a denial of service (or possibly other impact) via a crafted HTML document. Connected openSUSE/OpenVAS entries confirm Chromium updates to 25.0.1343 as the fix (openSUSE-SU-2012:1...

CVE-2012-4964

The CVE-2012-4964 vulnerability affects Samsung printer firmware prior to 20121031 that ships with a hardcoded read-write SNMP community string. This enables remote attackers to obtain administrative access over SNMP, potentially taking full control of affected devices (including some Dell-brande...

CVE-2012-5134

Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entities in an XML...

CVE-2012-5133

Use-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG filters...

CVE-2012-5135

CVE-2012-5135 is a use-after-free vulnerability in Chromium related to printing. The OpenSUSE/OSSUS advisories (and Gentoo/OpenVAS entries) reference CVE-2012-5135 among multiple chromium/v8 issues and indicate impact as potential denial of service or other unspecified effects through printing-re...