CVE

Id
55571  
CVE No.
CVE-2012-2328  
Status
Candidate  
Description
internal/cimxml/sax/NodeFactory.java in Standards-Based Linux Instrumentation for Manageability (SBLIM) Common Information Model (CIM) Client (aka sblim-cim-client2) before 2.1.12 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML file.  
Phase
Assigned (20120419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
579790 55571 CVE-2012-2328 MISC:http://sblim.cvs.sourceforge.net/viewvc/sblim/jsr48-client/src/org/sblim/cimclient/internal/cimxml/sax/NodeFactory.java?view=log#rev1.7  View
579791 55571 CVE-2012-2328 CONFIRM:http://sourceforge.net/p/sblim/bugs/2381/  View
579792 55571 CVE-2012-2328 REDHAT:RHSA-2012:0987  View
579793 55571 CVE-2012-2328 URL:http://rhn.redhat.com/errata/RHSA-2012-0987.html  View
579794 55571 CVE-2012-2328 SUSE:openSUSE-SU-2012:1621  View
579795 55571 CVE-2012-2328 URL:http://lists.opensuse.org/opensuse-updates/2012-12/msg00015.html  View
579796 55571 CVE-2012-2328 SUSE:openSUSE-SU-2013:0144  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
26693 JVNDB-2012-002400 OpenSSL における整数アンダーフローの脆弱性 OpenSSL には、TLS または DTLS が CBC 暗号化で使用される場合、整数アンダーフローの脆弱性が存在します。 CVE-2012-2333 55571 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002400.html  View