CVE-2012-5372 Rubinius computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) v...
MediumCVSS 5.0
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Rubinius computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against the MurmurHash3 algorithm.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubinius | All versions | No fix listed |
References
- 2012.appsec-forum.ch
- asfws12.files.wordpress.com exploit
- www.ocert.org
- 56670 vdb-entry
- www.131002.net exploit