« List of all CVEs

CVE-2012-5373

Published: 11/28/2012 Last updated: 8/6/2024 Reserved: 10/10/2012

Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against the MurmurHash3 algorithm, a different vulnerability than CVE-2012-2739.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Opam packages affected (1)

conf-openjdk

Products affected (1)

Product Vendor Version
n/a n/a < 1.6.18

References (14)