PT-2012-5957
CVE-2012-5373
·
Publicado
2012-11-28
·
Atualizado
2017-08-29
Descrição por
CVSS 2.0
5.0
MédiaMétricasAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
Oracle Java SE versions prior to 8
OpenJDK versions prior to 8
Description
The issue allows context-dependent attackers to cause a denial of service via crafted input to an application that maintains a hash table. This is demonstrated by a universal multicollision attack against the MurmurHash3 algorithm.
Recommendations
For Oracle Java SE versions prior to 8, update to version 8 or later to resolve the issue.
For OpenJDK versions prior to 8, update to version 8 or later to resolve the issue.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾