CVE-2012-3514

OCaml Xml-Light Library before r234 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 64%
VendorProductVersion
nicolas_cannasseocaml_xml-light_library
𝑥
≤ r233
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
xml-light
bookworm
2.4-1
fixed
bullseye
2.4-1
fixed
squeeze
no-dsa
sid
2.5-2
fixed
trixie
2.5-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
xml-light
cosmic
not-affected
bionic
not-affected
artful
ignored
zesty
ignored
yakkety
ignored
xenial
not-affected
wily
ignored
vivid
ignored
utopic
ignored
trusty
dne
saucy
ignored
raring
ignored
quantal
ignored
precise
ignored
oneiric
ignored
natty
ignored
lucid
ignored
hardy
ignored
Common Weakness Enumeration
References
http://secunia.com/advisories/50311
http://www.mandriva.com/security/advisories?name=MDVSA-2013:107
http://www.openwall.com/lists/oss-security/2012/08/21/2
http://www.securityfocus.com/bid/55114
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0266
http://secunia.com/advisories/50311
http://www.mandriva.com/security/advisories?name=MDVSA-2013:107
http://www.openwall.com/lists/oss-security/2012/08/21/2
http://www.securityfocus.com/bid/55114
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0266