CVE

Id
58615  
CVE No.
CVE-2012-5372  
Status
Candidate  
Description
Rubinius computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against the MurmurHash3 algorithm.  
Phase
Assigned (20121010)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
600599 58615 CVE-2012-5372 MISC:http://2012.appsec-forum.ch/conferences/#c17  View
600600 58615 CVE-2012-5372 MISC:http://asfws12.files.wordpress.com/2012/11/asfws2012-jean_philippe_aumasson-martin_bosslet-hash_flooding_dos_reloaded.pdf  View
600601 58615 CVE-2012-5372 MISC:http://www.ocert.org/advisories/ocert-2012-001.html  View
600602 58615 CVE-2012-5372 MISC:https://www.131002.net/data/talks/appsec12_slides.pdf  View
600603 58615 CVE-2012-5372 BID:56670  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
29220 JVNDB-2012-004927 ActivePerl のインストレーション機能における権限を取得される脆弱性 ActivePerl のインストレーション機能には、検索パスに関する処理に不備があるため、C: ディレクトリのトップレベルにインストールを行う際、権限を取得される脆弱性が存在します。 CVE-2012-5377 58615 6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004927.html  View