GHSA-pchp-c5w8-47gc
Hash collision attack vulnerability in Jenkins
At a glance
- Published
- Updated
- CVE
- CVE-2012-0785
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before 1.424.2.1 and 1.400.x before 1.400.0.11 could allow remote attackers to cause a considerable CPU load, aka "the Hash DoS attack."
Affected packages
| Package | Versions |
|---|---|
| Maven · org.jenkins-ci.main:jenkins-core | introduced 1.425, fixed 1.447 |
| Maven · org.jenkins-ci.main:jenkins-core | introduced 0, fixed 1.424.2 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2012-0785 ADVISORY
- https://access.redhat.com/security/cve/cve-2012-0785 WEB
- https://jenkins.io/security/advisory/2012-01-12 WEB
- https://security-tracker.debian.org/tracker/CVE-2012-0785 WEB
- https://www.cloudbees.com/jenkins-security-advisory-2012-01-12 WEB
- http://www.openwall.com/lists/oss-security/2012/01/20/8 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |