Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-2328

Опубликовано: 10 фев. 2014
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

internal/cimxml/sax/NodeFactory.java in Standards-Based Linux Instrumentation for Manageability (SBLIM) Common Information Model (CIM) Client (aka sblim-cim-client2) before 2.1.12 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML file.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:standards_based_linux_instrumentation_project:standards-based_linux_common_information_model_client:*:*:*:*:*:*:*:*
Версия до 2.1.11 (включая)
cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*

EPSS

Процентиль: 69%
0.0063
Низкий

5 Medium

CVSS2

Дефекты

CWE-310

Связанные уязвимости

redhat
больше 13 лет назад

internal/cimxml/sax/NodeFactory.java in Standards-Based Linux Instrumentation for Manageability (SBLIM) Common Information Model (CIM) Client (aka sblim-cim-client2) before 2.1.12 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML file.

github
больше 3 лет назад

internal/cimxml/sax/NodeFactory.java in Standards-Based Linux Instrumentation for Manageability (SBLIM) Common Information Model (CIM) Client (aka sblim-cim-client2) before 2.1.12 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML file.

oracle-oval
больше 13 лет назад

ELSA-2012-0987: sblim-cim-client2 security update (LOW)

EPSS

Процентиль: 69%
0.0063
Низкий

5 Medium

CVSS2

Дефекты

CWE-310