Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2012-5371

EPSS 1.79% · P83
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2012-5371

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Ruby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against a variant of the MurmurHash2 algorithm, a different vulnerability than CVE-2011-4815.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Ruby Web Form Object Hash Collision 拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Ruby是日本软件开发者松本行弘所研发的一种跨平台、面向对象的动态类型编程语言。 Ruby早期版本至1.9.3-p327版本中存在漏洞，可被攻击者利用导致DoS（拒绝服务）。该漏洞源于程序在用字符串作为密钥对某对象进行哈希运算时，哈希生成函数发生错误。通过在发送的HTTP POST请求中加入特制的表单，攻击者可利用该漏洞造成哈希冲突，从而导致较高CPU占用率高。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2012-5371

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2012-5371

Please Login to view more intelligence information

Same Patch Batch · n/a · 2012-11-28 · 14 CVEs total

CVE-2012-4964Samsung 打印机固件未授权访问漏洞
CVE-2012-5130Google Chrome 拒绝服务漏洞
CVE-2012-5131Google Chrome 拒绝服务漏洞
CVE-2012-5132Google Chrome 拒绝服务漏洞
CVE-2012-5133Google Chrome 释放后使用漏洞
CVE-2012-5134Google Chrome 缓冲区错误漏洞
CVE-2012-5135Google Chrome 释放后使用漏洞
CVE-2012-5136Google Chrome 拒绝服务漏洞
CVE-2012-2739Java Hash Collision 拒绝服务漏洞
CVE-2012-5370JRuby ‘MurmurHash2’算法哈希冲突拒绝服务漏洞
CVE-2012-5372Rubinius ‘MurmurHash3’算法哈希冲突拒绝服务漏洞
CVE-2012-5373Java ‘MurmurHash’算法哈希冲突拒绝服务漏洞
CVE-2012-6051Google CityHash 加密问题漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2012-5371

No comments yet

Leave a comment