CVE-2012-0839

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2012-0839
OCaml 3.12.1 and earlier computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://openwall.com/lists/oss-security/2012/02/07/1
http://openwall.com/lists/oss-security/2012/02/07/2
http://secunia.com/advisories/47853
http://www.mail-archive.com/caml-list%40inria.fr/msg01477.html
http://www.mail-archive.com/caml-list%40inria.fr/msg01478.html
http://www.nruns.com/_downloads/advisory28122011.pdf
http://www.ocert.org/advisories/ocert-2011-003.html
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:inria:ocaml:*:*:*:*:*:*:*:*
cpe:2.3:a:inria:ocaml:1.07:*:*:*:*:*:*:*
cpe:2.3:a:inria:ocaml:2.02:*:*:*:*:*:*:*
cpe:2.3:a:inria:ocaml:2.04:*:*:*:*:*:*:*
cpe:2.3:a:inria:ocaml:2.99:alpha:*:*:*:*:*:*
cpe:2.3:a:inria:ocaml:3.00:*:*:*:*:*:*:*
cpe:2.3:a:inria:ocaml:3.01:*:*:*:*:*:*:*
cpe:2.3:a:inria:ocaml:3.02:*:*:*:*:*:*:*
cpe:2.3:a:inria:ocaml:3.03:alpha:*:*:*:*:*:*
cpe:2.3:a:inria:ocaml:3.04:*:*:*:*:*:*:*
cpe:2.3:a:inria:ocaml:3.05:beta:*:*:*:*:*:*
cpe:2.3:a:inria:ocaml:3.06:*:*:*:*:*:*:*
cpe:2.3:a:inria:ocaml:3.07:*:*:*:*:*:*:*
cpe:2.3:a:inria:ocaml:3.07:beta1:*:*:*:*:*:*
cpe:2.3:a:inria:ocaml:3.07:beta2:*:*:*:*:*:*
cpe:2.3:a:inria:ocaml:3.07:pl2:*:*:*:*:*:*
cpe:2.3:a:inria:ocaml:3.08:*:*:*:*:*:*:*
cpe:2.3:a:inria:ocaml:3.09:*:*:*:*:*:*:*
cpe:2.3:a:inria:ocaml:3.10:*:*:*:*:*:*:*
cpe:2.3:a:inria:ocaml:3.11:*:*:*:*:*:*:*
cpe:2.3:a:inria:ocaml:3.12:*:*:*:*:*:*:*
History

13 Feb 2023, 00:22

Type Values Removed Values Added
References
  • {'url': 'http://www.mail-archive.com/caml-list@inria.fr/msg01477.html', 'name': '[caml-list] 20111230 Hashtbl and security', 'tags': [], 'refsource': 'MLIST'}
  • {'url': 'http://www.mail-archive.com/caml-list@inria.fr/msg01478.html', 'name': '[caml-list] 20111230 Re: Hashtbl and security', 'tags': [], 'refsource': 'MLIST'}
  • (MISC) http://www.mail-archive.com/caml-list%40inria.fr/msg01478.html -
  • (MISC) http://www.mail-archive.com/caml-list%40inria.fr/msg01477.html -
Information

Published : 2012-02-08 20:55

Updated : 2023-12-10 11:03

NVD link : CVE-2012-0839

Mitre link : CVE-2012-0839

CVE.ORG link : CVE-2012-0839

JSON object : View

Products Affected

inria

  • ocaml
CWE
CWE-20

Improper Input Validation