1. Home
  2. CVE Database
  3. CVE-2012-0840
MEDIUM · 5.0

CVE-2012-0840

tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent...

Vulnerability Description

tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P
Confidentiality
NONE
Integrity
NONE
Availability
PARTIAL

Affected Products

VendorProductVersions
ApachePortable Runtime<= 1.4.5

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2012-0840?

CVE-2012-0840 is a vulnerability with a CVSS score of 5.0 (MEDIUM). tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent...

How severe is CVE-2012-0840?

CVE-2012-0840 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2012-0840?

Check the references section above for vendor advisories and patch information. Affected products include: Apache Portable Runtime.