CVE-2012-1035

AdaCore Ada Web Services AWS before 2.10.2 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...

CVE-2024-41708

An issue was discovered in AdaCore adawebservices 20.0 allows an attacker to escalate privileges and steal sessions via the RandomString function in the src/core/aws-utils.adb module...

PT-2024-29528 · Adacore · Ada Web Services

Name of the Vulnerable Software and Affected Versions: AdaCore ada web services version 20.0 Description: An issue was discovered that allows an attacker to escalate privileges and steal sessions via the Random String function in the src/core/aws-utils.adb module. This issue affects AdaCore ada w...

PT-2012-3033

Name of the Vulnerable Software and Affected Versions AdaCore Ada Web Services AWS versions prior to 2.10.2 Description The issue allows remote attackers to cause a denial of service by sending many crafted parameters, resulting in CPU consumption due to hash collisions. Recommendations For...

CVE-2012-1035: Improper Input Validation

AdaCore Ada Web Services AWS before 2.10.2 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...