CVE-2012-5371: Undefined Security Weakness

Ruby aka CRuby 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains...

PT-2012-5955

Name of the Vulnerable Software and Affected Versions Ruby versions 1.9 before 1.9.3-p327 Ruby versions 2.0 before r37575 Description The issue allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a hash table. This is...

PT-2012-5954

Name of the Vulnerable Software and Affected Versions JRuby affected versions not specified Description The issue allows context-dependent attackers to cause a denial of service, specifically CPU consumption, by providing crafted input to an application that uses a hash table. This is demonstrate...

CVE-2012-5370 jruby: Murmur hash function collisions (oCERT-2012-001)

JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a hash table, as demonstrated by a universal...