CVE-2012-0839

OCaml 3.12.1 and earlier computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 70%
VendorProductVersion
inriaocaml
𝑥
≤ 3.12.1
inriaocaml
1.07
inriaocaml
2.02
inriaocaml
2.04
inriaocaml
2.99:alpha
inriaocaml
3.00
inriaocaml
3.01
inriaocaml
3.02
inriaocaml
3.03:alpha
inriaocaml
3.04
inriaocaml
3.05:beta
inriaocaml
3.06
inriaocaml
3.07
inriaocaml
3.07:beta1
inriaocaml
3.07:beta2
inriaocaml
3.07:pl2
inriaocaml
3.08
inriaocaml
3.09
inriaocaml
3.10
inriaocaml
3.11
inriaocaml
3.12
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
ocaml
bullseye
4.11.1-4
fixed
wheezy
no-dsa
squeeze
no-dsa
bookworm
4.13.1-4
fixed
sid
5.2.0-3
fixed
trixie
5.2.0-3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ocaml
zesty
not-affected
yakkety
not-affected
xenial
not-affected
wily
not-affected
vivid
ignored
utopic
ignored
trusty
not-affected
saucy
ignored
raring
ignored
quantal
ignored
precise
ignored
oneiric
ignored
natty
ignored
maverick
ignored
lucid
ignored
hardy
ignored