← back
CVE-2012-0839

CVE-2012-0839

EPSS 2.8%
OCaml 3.12.1 and earlier computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://openwall.com/lists/oss-security/2012/02/07/1http://openwall.com/lists/oss-security/2012/02/07/2http://secunia.com/advisories/47853http://www.mail-archive.com/caml-list%40inria.fr/msg01477.htmlhttp://www.mail-archive.com/caml-list%40inria.fr/msg01478.htmlhttp://www.nruns.com/_downloads/advisory28122011.pdfhttp://www.ocert.org/advisories/ocert-2011-003.html