CVE-2012-5373
EUVD-2012-529228.11.2012, 13:03
Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against the MurmurHash3 algorithm, a different vulnerability than CVE-2012-2739.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| oracle | jdk | 𝑥 ≤ 1.7.0 |
| oracle | jre | 𝑥 ≤ 1.7.0 |
| oracle | openjdk | 𝑥 ≤ 1.7.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| icedtea-web |
| ||||||||||||||||||||||||||||||||||||
| openjdk-6 |
| ||||||||||||||||||||||||||||||||||||
| openjdk-6b18 |
| ||||||||||||||||||||||||||||||||||||
| openjdk-7 |
| ||||||||||||||||||||||||||||||||||||
| sun-java5 |
| ||||||||||||||||||||||||||||||||||||
| sun-java6 |
|
Common Weakness Enumeration
References