CVEvulnerability
CVE-2012-0785
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-02-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-400
Description
Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before 1.424.2.1 and 1.400.x before 1.400.0.11 could allow remote attackers to cause a considerable CPU load, aka "the Hash DoS attack."
Affected configurations
• cloudbees jenkins (>= 1.400.0 < 1.400.0.11)
• cloudbees jenkins (>= 1.424.0 < 1.424.2.1)
• jenkins jenkins (< 1.424.2)
• jenkins jenkins (< 1.447)
Related
Weakness · CWE (1)
- CWE-400 Uncontrolled Resource Consumption weakness
References
- http://www.openwall.com/lists/oss-security/2012/01/20/8 Mailing List, Third Party Advisory
- https://access.redhat.com/security/cve/cve-2012-0785 Broken Link
- https://jenkins.io/security/advisory/2012-01-12/ Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2012-0785 Third Party Advisory
- https://www.cloudbees.com/jenkins-security-advisory-2012-01-12 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2012/01/20/8 Mailing List, Third Party Advisory
- https://access.redhat.com/security/cve/cve-2012-0785 Broken Link
- https://jenkins.io/security/advisory/2012-01-12/ Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2012-0785 Third Party Advisory
- https://www.cloudbees.com/jenkins-security-advisory-2012-01-12 Third Party Advisory