Showing 1 - 3 of 3

CVE-2011-4838

Status Candidate

Overview

JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

Related Files

Red Hat Security Advisory 2012-1125-01: Posted Jul 31, 2012; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2012-1125-01 - JBoss Enterprise SOA Platform is the next-generation ESB and business process automation infrastructure. This release of JBoss Enterprise SOA Platform 5.3.0 serves as a replacement for JBoss Enterprise SOA Platform 5.2.0. It includes various bug fixes and enhancements which are detailed in the JBoss Enterprise SOA Platform 5.3.0 Release Notes.; tags | advisory; systems | linux, redhat; advisories | CVE-2011-3506, CVE-2011-3517, CVE-2011-4605, CVE-2011-4838, CVE-2012-0079, CVE-2012-0818, CVE-2012-2377; MD5 | 0e1c62579e79665cc4974b757ecb0fa8; Download | Favorite | Comments (0)

Gentoo Linux Security Advisory 201207-06: Posted Jul 10, 2012; Authored by Gentoo | Site security.gentoo.org; Gentoo Linux Security Advisory 201207-6 - A hash collision vulnerability in JRuby allows remote attackers to cause a Denial of Service condition. Versions less than 1.6.5.1 are affected.; tags | advisory, remote, denial of service; systems | linux, gentoo; advisories | CVE-2011-4838; MD5 | f838cc8c680449246e459b2e6f9811e8; Download | Favorite | Comments (0)

Open Source CERT Security Advisory 2011.003: Posted Dec 29, 2011; Authored by Andrea Barisani, Open Source CERT | Site ocert.org; A variety of programming languages suffer from a denial-of-service (DoS) condition against storage functions of key/value pairs in hash data structures, the condition can be leveraged by exploiting predictable collisions in the underlying hashing algorithms.; tags | advisory; advisories | CVE-2011-4461, CVE-2011-4838, CVE-2011-4885, CVE-2011-4462, CVE-2011-4815; MD5 | 22dd5e111e5c4f6aa908cc54c3e0e83a; Download | Favorite | Comments (0)