CVE-2012-2328

Name of the Vulnerable Software and Affected Versions sblim-cim-client2 versions prior to 2.1.12

Description The issue allows context-dependent attackers to cause a denial of service, specifically CPU consumption, through a crafted XML file. This is due to the computation of hash values without restricting the ability to trigger hash collisions predictably in the internal/cimxml/sax/NodeFactory.java file.

Recommendations For versions prior to 2.1.12, update to version 2.1.12 or later to resolve the issue.