NVD

Id
11188  
Name
CVE-2011-4858  
Description
Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-05-27  
Published
2012-01-05  
Modified Date
2017-05-22  
Seq
2011-4858  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
61935 11188 CVE-2011-4858 [announce] 20111228 [SECURITY] Apache Tomcat and the hashtable collision DoS vulnerability  View
61936 11188 CVE-2011-4858 HPSBUX02741  View
61937 11188 CVE-2011-4858 HPSBUX02860  View
61938 11188 CVE-2011-4858 oval:org.mitre.oval:def:18886  View
61939 11188 CVE-2011-4858 RHSA-2012:0074  View
61940 11188 CVE-2011-4858 RHSA-2012:0075  View
61941 11188 CVE-2011-4858 RHSA-2012:0076  View
61942 11188 CVE-2011-4858 RHSA-2012:0077  View
61943 11188 CVE-2011-4858 RHSA-2012:0078  View
61944 11188 CVE-2011-4858 RHSA-2012:0089  View
61945 11188 CVE-2011-4858 RHSA-2012:0325  View
61946 11188 CVE-2011-4858 RHSA-2012:0406  View
61947 11188 CVE-2011-4858 http://tomcat.apache.org/tomcat-7.0-doc/changelog.html  View
61948 11188 CVE-2011-4858 DSA-2401  View
61949 11188 CVE-2011-4858 VU#903934  View
61950 11188 CVE-2011-4858 http://www.nruns.com/_downloads/advisory28122011.pdf  View
61951 11188 CVE-2011-4858 http://www.ocert.org/advisories/ocert-2011-003.html  View
61952 11188 CVE-2011-4858 https://bugzilla.redhat.com/show_bug.cgi?id=750521  View
61953 11188 CVE-2011-4858 https://github.com/FireFart/HashCollision-DOS-POC/blob/master/HashtablePOC.py  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25296 JVNDB-2012-001003 Apache Tomcat におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 Apache Tomcat は、ハッシュ衝突を想定した制限を行わずにフォームパラメータのハッシュ値を算出するため、サービス運用妨害 (CPU 資源の消費) 状態となる脆弱性が存在します。 CVE-2011-4858 52765 CVE-2011-4858 11188 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001003.html 2012-01-05 2013-03-08 View