GitHub Advisoryadvisory · Maven

GHSA-pchp-c5w8-47gc Hash collision attack vulnerability in Jenkins

HIGH Published 2022-04-23 Modified 2024-01-30 Official page ↗
Aliases
CVE-2012-0785
Ecosystem
Maven
Packages
org.jenkins-ci.main:jenkins-core
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Reviewed
2024-01-30

Affected packages

• Maven org.jenkins-ci.main:jenkins-core: >= 1.425, < 1.447 → fixed in 1.447 • Maven org.jenkins-ci.main:jenkins-core: < 1.424.2 → fixed in 1.424.2

Description

Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before 1.424.2.1 and 1.400.x before 1.400.0.11 could allow remote attackers to cause a considerable CPU load, aka "the Hash DoS attack."

Related

Alias · CVE (1)

  • CVE-2012-0785 Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before… vulnerability

References