CVEvulnerability

CVE-2012-0840

5.0 MEDIUM Published 2012-02-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-02-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-20

Description

tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

Affected configurations

• apache portable runtime (<= 1.4.5) • apache portable runtime 0.9.1 • apache portable runtime 0.9.2 • apache portable runtime 0.9.2-dev • apache portable runtime 0.9.3 • apache portable runtime 0.9.3-dev • apache portable runtime 0.9.4 • apache portable runtime 0.9.5 • apache portable runtime 0.9.6 • apache portable runtime 0.9.7 • apache portable runtime 0.9.7-dev • apache portable runtime 0.9.8 • apache portable runtime 0.9.9 • apache portable runtime 0.9.16-dev • apache portable runtime 1.3.0 • apache portable runtime 1.3.1 • apache portable runtime 1.3.2 • apache portable runtime 1.3.3 • apache portable runtime 1.3.4 • apache portable runtime 1.3.4-dev • apache portable runtime 1.3.5 • apache portable runtime 1.3.6 • apache portable runtime 1.3.6-dev • apache portable runtime 1.3.7 • apache portable runtime 1.3.8 • apache portable runtime 1.3.9 • apache portable runtime 1.3.10 • apache portable runtime 1.3.11 • apache portable runtime 1.3.12 • apache portable runtime 1.3.13 • apache portable runtime 1.4.0 • apache portable runtime 1.4.1 • apache portable runtime 1.4.2 • apache portable runtime 1.4.3 • apache portable runtime 1.4.4

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References