NVD

Id
41871  
Name
CVE-2013-7040  
Description
Python 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which causes it to compute hash values without restricting the ability to trigger hash collisions predictably and makes it easier for context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1150.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2014-05-19  
Modified Date
2016-11-28  
Seq
2013-7040  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
211431 41871 CVE-2013-7040 http://bugs.python.org/issue14621  View
211432 41871 CVE-2013-7040 APPLE-SA-2015-08-13-2  View
211433 41871 CVE-2013-7040 [oss-security] 20131209 Re: CPython hash secret can be recoved remotely  View
211434 41871 CVE-2013-7040 [oss-security] 20131209 CPython hash secret can be recoved remotely  View
211435 41871 CVE-2013-7040 64194  View
211436 41871 CVE-2013-7040 https://support.apple.com/kb/HT205031  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24911 JVNDB-2013-006486 Python におけるサービス運用妨害 (DoS) の脆弱性 Python には、ランダムハッシュ値の接頭辞の最後の 8 ビットのみを使用し、ハッシュ衝突を想定した制限を行わずにハッシュ値を算出するため、サービス運用妨害 (CPU 資源の消費) 状態となる脆弱性が存在します。 CVE-2013-7040 66982 CVE-2013-7040 41871 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006486.html 2013-12-10 2015-08-31 View