GHSA-pchp-c5w8-47gc
Hash collision attack vulnerability in Jenkins
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2012-0785
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before 1.424.2.1 and 1.400.x before 1.400.0.11 could allow remote attackers to cause a considerable CPU load, aka "the Hash DoS attack."
Paquets affectés
| Paquet | Versions |
|---|---|
| Maven · org.jenkins-ci.main:jenkins-core | introduced 1.425, fixed 1.447 |
| Maven · org.jenkins-ci.main:jenkins-core | introduced 0, fixed 1.424.2 |
Références
- https://nvd.nist.gov/vuln/detail/CVE-2012-0785 ADVISORY
- https://access.redhat.com/security/cve/cve-2012-0785 WEB
- https://jenkins.io/security/advisory/2012-01-12 WEB
- https://security-tracker.debian.org/tracker/CVE-2012-0785 WEB
- https://www.cloudbees.com/jenkins-security-advisory-2012-01-12 WEB
- http://www.openwall.com/lists/oss-security/2012/01/20/8 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |