Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Jean-Philippe Aumasson

#49438of 53,635
5Total CVSS
Vulnerabilities · 1
PT-2012-5956
5.0
2012-11-28
Rubinius · Rubinius · CVE-2012-5372
**Name of the Vulnerable Software and Affected Versions** Rubinius (affected versions not specified) **Description** The issue allows context-dependent attackers to cause a denial of service, specifically CPU consumption, by triggering hash collisions predictably in applications that maintain a hash table. This can be achieved through crafted input, as demonstrated by a universal multicollision attack against the MurmurHash3 algorithm. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.