3557 matches found
CVE-2012-5370 jruby: Murmur hash function collisions (oCERT-2012-001)
JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a hash table, as demonstrated by a universal...
CVE-2012-4847
IBM Cognos Business Intelligence BI 8.4 and 8.4.1 allows remote authenticated users to cause a denial of service CPU consumption via a crafted request containing a zero-valued byte...
CVE-2012-4847
CVE-2012-4847 affects IBM Cognos BI 8.4 and 8.4.1. A remote authenticated user can cause high CPU usage via a crafted request containing a zero-valued byte, yielding a partial denial of service. According to IBM, exploitation requires authentication and it does not apply to Cognos BI 10.1 and lat...
CVE-2012-3505
Tinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via 1 a large number of headers or 2 a large number of forged headers that trigger hash collisions predictably. bucket...
CVE-2012-3505
Tinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via 1 a large number of headers or 2 a large number of forged headers that trigger hash collisions predictably. bucket...
CVE-2012-3505
Tinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via 1 a large number of headers or 2 a large number of forged headers that trigger hash collisions predictably. bucket...
Code injection
Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application...
CVE-2012-1150
Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application...
PSF-2012-5 Hash DoS
Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application...
PSF-2012-3 XML-RPC DoS
SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an XML-RPC POST request that contains a smaller amount of data than specified...
Design/Logic Flaw
Algorithmic complexity vulnerability in the filterurl function in the text filtering system modules/filter/filter.module in Drupal 7.x before 7.14 allows remote authenticated users with certain roles to cause a denial of service CPU consumption via a long email address...
CVE-2012-1588
Algorithmic complexity vulnerability in the filterurl function in the text filtering system modules/filter/filter.module in Drupal 7.x before 7.14 allows remote authenticated users with certain roles to cause a denial of service CPU consumption via a long email address...
CVE-2012-1588
Removed by vendor...
CVE-2012-3079
Cisco IOS 12.2 allows remote attackers to cause a denial of service CPU consumption by establishing many IPv6 neighbors, aka Bug ID CSCtn78957...
Code injection
Cisco IOS 12.2 allows remote attackers to cause a denial of service CPU consumption by establishing many IPv6 neighbors, aka Bug ID CSCtn78957...
CVE-2012-3079
CVE-2012-3079 affects Cisco IOS 12.2. A remote attacker can cause a denial of service (CPU consumption) by establishing many IPv6 neighbors, per Bug ID CSCtn78957. Impact is a network-based DoS; exploitation status and concrete remediation are not specified in the provided documents. No product v...
CVE-2012-4387
Apache Struts 2.0.0 through 2.3.4 allows remote attackers to cause a denial of service CPU consumption via a long parameter name, which is processed as an OGNL expression...
CVE-2012-4387
Apache Struts 2.0.0 through 2.3.4 allows remote attackers to cause a denial of service CPU consumption via a long parameter name, which is processed as an OGNL expression...
