Skip to content
OpenAdvisories
Unscored CVE-2012-5372 EUVD-2012-5291GHSA-9f35-5wj4-v27g

Rubinius computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-depende…

Published Nov 28, 2012 · Updated Aug 6, 2024 · Assigned by mitre

Description

Rubinius computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against the MurmurHash3 algorithm.

References