Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2011-4838

Опубликовано: 30 дек. 2011
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:jruby:jruby:*:*:*:*:*:*:*:*
Версия до 1.6.5.1 (исключая)

EPSS

Процентиль: 91%
0.07274
Низкий

5 Medium

CVSS2

Дефекты

CWE-400

Связанные уязвимости

ubuntu
около 14 лет назад

JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

redhat
около 14 лет назад

JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

debian
около 14 лет назад

JRuby before 1.6.5.1 computes hash values without restricting the abil ...

github
больше 3 лет назад

JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

EPSS

Процентиль: 91%
0.07274
Низкий

5 Medium

CVSS2

Дефекты

CWE-400