Unscored CVE-2011-5037 EUVD-2011-4940GHSA-vp6q-w2v3-jjp9

Google V8 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows rem…

Published Dec 30, 2011 · Updated Aug 7, 2024 · Assigned by mitre

Description

Google V8 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters, as demonstrated by attacks against Node.js.

References

http://www.nruns.com/_downloads/advisory28122011.pdf
VU#903934 third-party-advisory
20111228 n.runs-SA-2011.004 - web programming languages and platforms - DoS through hash table mailing-list
http://www.ocert.org/advisories/ocert-2011-003.html