Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Jean-Philippe Aumasson

#49438de 53,638
5CVSS total
Vulnerabilidades · 1
PT-2012-5956
5.0
2012-11-28
Rubinius · Rubinius · CVE-2012-5372
**Name of the Vulnerable Software and Affected Versions** Rubinius (affected versions not specified) **Description** The issue allows context-dependent attackers to cause a denial of service, specifically CPU consumption, by triggering hash collisions predictably in applications that maintain a hash table. This can be achieved through crafted input, as demonstrated by a universal multicollision attack against the MurmurHash3 algorithm. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.