CVE-2012-0840

Опубликовано: 10 фев. 2012

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:portable_runtime:*:*:*:*:*:*:*:*

Версия до 1.4.5 (включая)

cpe:2.3:a:apache:portable_runtime:0.9.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:0.9.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:0.9.2-dev:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:0.9.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:0.9.3-dev:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:0.9.4:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:0.9.5:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:0.9.6:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:0.9.7:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:0.9.7-dev:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:0.9.8:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:0.9.9:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:0.9.16-dev:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:1.3.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:1.3.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:1.3.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:1.3.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:1.3.4:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:1.3.4-dev:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:1.3.5:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:1.3.6:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:1.3.6-dev:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:1.3.7:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:1.3.8:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:1.3.9:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:1.3.10:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:1.3.11:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:1.3.12:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:1.3.13:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:1.4.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:1.4.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:portable_runtime:1.4.4:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.37182

Средний

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2012-0840

ubuntu

почти 14 лет назад

CVE-2012-0840

redhat

около 14 лет назад

CVE-2012-0840

debian

почти 14 лет назад

tables/apr_hash.c in the Apache Portable Runtime (APR) library through ...

GHSA-x7rw-r7fp-j64f

github

больше 3 лет назад

EPSS

Процентиль: 97%

0.37182

Средний

5 Medium

CVSS2

Дефекты

CWE-20