Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2011-4461
HistoryDec 29, 2011 - 12:00 a.m.

CVE-2011-4461

2011-12-2900:00:00
ubuntu.com
ubuntu.com
17

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS

0.017

Percentile

87.6%

JSON

Jetty 8.1.0.RC2 and earlier computes hash values for form parameters
without restricting the ability to trigger hash collisions predictably,
which allows remote attackers to cause a denial of service (CPU
consumption) by sending many crafted parameters.

Notes

Author Note
mdeslaur in main in lucid, maverick, natty only
OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchjetty< 6.1.22-1ubuntu1.1UNKNOWN
ubuntu11.04noarchjetty< 6.1.24-6ubuntu0.11.04.1UNKNOWN
ubuntu12.04noarchjetty< 6.1.24-6ubuntu0.12.04.1UNKNOWN

Related

redhat 3
ibm 16
openvas 6
ubuntu 1
nessus 7
cve 2
prion 2
cvelist 2
osv 2
fedora 2
github 2
nvd 2
seebug 1
securityvulns 2
oracle 3
redhat
redhat
(RHSA-2012:1606) Moderate: Fuse Management Console 7.1.0 update
2012-12-21 00:00:00
(RHSA-2012:1605) Moderate: Fuse MQ Enterprise 7.1.0 update
2012-12-21 00:00:00
(RHSA-2012:1604) Moderate: Fuse ESB Enterprise 7.1.0 update
2012-12-21 00:00:00
ibm
ibm
Security Bulletin: Potential denial-of-service (DoS) issues related to Jetty application server identified in OmniFind Enterprise Edition and Content Analytics with Enterprise Search products
2022-09-25 23:13:40
Security Bulletin: Denial of service in IBM InfoSphere Data Replication Dashboard (CVE-2011-4461)
2022-09-25 23:13:40
Security Bulletin: Potential Denial of Service security vulnerability in Rational Synergy (CVE-2011-4461)
2020-12-22 17:41:28
openvas
openvas
Ubuntu: Security Advisory (USN-1429-1)
2012-04-30 00:00:00
Fedora Update for jetty FEDORA-2012-0752
2012-03-26 00:00:00
Fedora Update for jetty FEDORA-2012-0730
2012-03-26 00:00:00
ubuntu
ubuntu
Jetty vulnerability
2012-04-26 00:00:00
nessus
nessus
RHEL 6 : jetty-eclipse (Unpatched Vulnerability)
2024-06-03 00:00:00
Fedora 16 : jetty-6.1.26-8.fc16 (2012-0730)
2012-03-26 00:00:00
openSUSE Security Update : jetty5 (openSUSE-2012-128)
2014-06-13 00:00:00
cve
cve
CVE-2011-4461
2011-12-30 01:55:01
CVE-2011-5034
2011-12-30 01:55:01
prion
prion
Design/Logic Flaw
2011-12-30 01:55:00
Design/Logic Flaw
2011-12-30 01:55:00
cvelist
cvelist
CVE-2011-4461
2011-12-30 01:00:00
CVE-2011-5034
2011-12-30 01:00:00
osv
osv
Improper Input Validation in Jetty
2022-05-14 01:27:35
Apache Geronimo Hash Collisions Cause DoS
2022-05-13 01:07:39
fedora
fedora
[SECURITY] Fedora 16 Update: jetty-6.1.26-8.fc16
2012-03-24 00:28:51
[SECURITY] Fedora 15 Update: jetty-6.1.26-7.fc15
2012-03-24 00:34:42
github
github
Improper Input Validation in Jetty
2022-05-14 01:27:35
Apache Geronimo Hash Collisions Cause DoS
2022-05-13 01:07:39
nvd
nvd
CVE-2011-4461
2011-12-30 01:55:01
CVE-2011-5034
2011-12-30 01:55:01
seebug
seebug
Multiple Programming Language Implementations Vulnerable to Hash Table Collision Attacks
2011-12-29 00:00:00
securityvulns
securityvulns
[oCERT-2011-003] multiple implementations denial-of-service via hash algorithm collision
2012-01-02 00:00:00
Oracle / Sun / PeopleSoft / MySQL multiple security vulnerabilities
2015-01-25 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2016
2016-04-19 00:00:00
Oracle Critical Patch Update Advisory - January 2015
2015-03-10 00:00:00
CPU July 2018
2018-07-17 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS

0.017

Percentile

87.6%

JSON
Related for UB:CVE-2011-4461
redhat3ibm16openvas6ubuntu1nessus7cve2prion2cvelist2osv2fedora2github2nvd2seebug1securityvulns2oracle3