CVE

Id
52750  
CVE No.
CVE-2011-4838  
Status
Candidate  
Description
JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.  
Phase
Assigned (20111215)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
560134 52750 CVE-2011-4838 BUGTRAQ:20111228 n.runs-SA-2011.004 - web programming languages and platforms - DoS through hash table  View
560135 52750 CVE-2011-4838 URL:http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html  View
560136 52750 CVE-2011-4838 MISC:http://www.nruns.com/_downloads/advisory28122011.pdf  View
560137 52750 CVE-2011-4838 MISC:http://www.ocert.org/advisories/ocert-2011-003.html  View
560138 52750 CVE-2011-4838 CONFIRM:http://jruby.org/2011/12/27/jruby-1-6-5-1.html  View
560139 52750 CVE-2011-4838 GENTOO:GLSA-201207-06  View
560140 52750 CVE-2011-4838 URL:http://security.gentoo.org/glsa/glsa-201207-06.xml  View
560141 52750 CVE-2011-4838 REDHAT:RHSA-2012:1232  View
560142 52750 CVE-2011-4838 URL:http://rhn.redhat.com/errata/RHSA-2012-1232.html  View
560143 52750 CVE-2011-4838 CERT-VN:VU#903934  View
560144 52750 CVE-2011-4838 URL:http://www.kb.cert.org/vuls/id/903934  View
560145 52750 CVE-2011-4838 SECUNIA:47407  View
560146 52750 CVE-2011-4838 URL:http://secunia.com/advisories/47407  View
560147 52750 CVE-2011-4838 SECUNIA:50084  View
560148 52750 CVE-2011-4838 URL:http://secunia.com/advisories/50084  View
560149 52750 CVE-2011-4838 XF:jruby-hash-dos(72019)  View

Related JVN