Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2012-1150
HistoryOct 05, 2012 - 9:55 p.m.

CVE-2012-1150

2012-10-0521:55:01
CWE-310
[email protected]
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.6 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.6%

JSON

Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

Affected configurations

NVD
Node
pythonpythonRange≀2.6.7
OR
pythonpythonMatch0.9.0
OR
pythonpythonMatch0.9.1
OR
pythonpythonMatch1.2
OR
pythonpythonMatch1.3
OR
pythonpythonMatch1.5.2
OR
pythonpythonMatch1.6
OR
pythonpythonMatch1.6.1
OR
pythonpythonMatch2.0
OR
pythonpythonMatch2.0.1
OR
pythonpythonMatch2.1
OR
pythonpythonMatch2.1.1
OR
pythonpythonMatch2.1.2
OR
pythonpythonMatch2.1.3
OR
pythonpythonMatch2.2
OR
pythonpythonMatch2.2.1
OR
pythonpythonMatch2.2.2
OR
pythonpythonMatch2.2.3
OR
pythonpythonMatch2.3.1
OR
pythonpythonMatch2.3.2
OR
pythonpythonMatch2.3.3
OR
pythonpythonMatch2.3.4
OR
pythonpythonMatch2.3.5
OR
pythonpythonMatch2.3.7
OR
pythonpythonMatch2.4.1
OR
pythonpythonMatch2.4.2
OR
pythonpythonMatch2.4.3
OR
pythonpythonMatch2.4.4
OR
pythonpythonMatch2.4.6
OR
pythonpythonMatch2.5.1
OR
pythonpythonMatch2.5.2
OR
pythonpythonMatch2.5.3
OR
pythonpythonMatch2.5.4
OR
pythonpythonMatch2.5.6
OR
pythonpythonMatch2.5.150
OR
pythonpythonMatch2.6.1
OR
pythonpythonMatch2.6.2
OR
pythonpythonMatch2.6.3
OR
pythonpythonMatch2.6.4
OR
pythonpythonMatch2.6.5
OR
pythonpythonMatch2.6.6
OR
pythonpythonMatch2.6.2150
OR
pythonpythonMatch2.6.6150
Node
pythonpythonMatch2.7.1
OR
pythonpythonMatch2.7.1rc1
OR
pythonpythonMatch2.7.2rc1
OR
pythonpythonMatch2.7.1150
OR
pythonpythonMatch2.7.2150
Node
pythonpythonMatch3.0
OR
pythonpythonMatch3.0.1
OR
pythonpythonMatch3.1
OR
pythonpythonMatch3.1.1
OR
pythonpythonMatch3.1.2
OR
pythonpythonMatch3.1.3
OR
pythonpythonMatch3.1.4
Node
pythonpythonMatch3.2
OR
pythonpythonMatch3.2alpha
OR
pythonpythonMatch3.2.2150

Related

nessus 36
prion 2
seebug 1
ubuntucve 2
debiancve 2
cve 2
openvas 48
cvelist 2
nvd 1
fedora 7
redhat 2
centos 2
amazon 1
veracode 2
oraclelinux 2
ubuntu 4
f5 1
securityvulns 2
osv 1
gentoo 1
debian 1
vmware 1
ibm 1
suse 1
rosalinux 1
nessus
nessus
SuSE 11.1 Security Update : apache2-mod_python (SAT Patch Number 6247)
2013-01-25 00:00:00
SuSE 10 Security Update : apache2-mod_python (ZYPP Patch Number 8127)
2012-08-14 00:00:00
Oracle Linux 5 : python (ELSA-2012-0745)
2013-07-12 00:00:00
prion
prion
Code injection
2012-10-05 21:55:00
Code injection
2014-05-19 14:55:00
seebug
seebug
Pythonε“ˆεΈŒε†²ηͺζ‹’η»ζœεŠ‘漏洞(CVE-2012-1150)
2012-10-10 00:00:00
ubuntucve
ubuntucve
CVE-2012-1150
2012-03-09 00:00:00
CVE-2013-7040
2014-05-19 00:00:00
debiancve
debiancve
CVE-2012-1150
2012-10-05 21:55:01
CVE-2013-7040
2014-05-19 14:55:09
cve
cve
CVE-2012-1150
2012-10-05 21:55:01
CVE-2013-7040
2014-05-19 14:55:09
openvas
openvas
Python < 2.6.8, 2.7.x < 2.7.3, 3.1.x < 3.1.5, 3.2.x < 3.2.3 Hash DoS (bpo-13703) - Linux
2021-11-01 00:00:00
SUSE: Security Advisory (SUSE-SU-2012:0985-1)
2021-06-09 00:00:00
Fedora Update for python-docs FEDORA-2012-5892
2012-08-30 00:00:00
cvelist
cvelist
CVE-2012-1150
2012-10-05 21:00:00
CVE-2013-7040
2014-05-19 14:00:00
nvd
nvd
CVE-2013-7040
2014-05-19 14:55:09
fedora
fedora
[SECURITY] Fedora 17 Update: python-docs-2.7.3-1.fc17
2012-05-02 04:50:10
[SECURITY] Fedora 16 Update: python-docs-2.7.3-1.fc16
2012-05-06 01:26:43
[SECURITY] Fedora 17 Update: python3-3.2.3-5.fc17
2012-05-07 04:17:07
redhat
redhat
(RHSA-2012:0745) Moderate: python security update
2012-06-18 00:00:00
(RHSA-2012:0744) Moderate: python security update
2012-06-18 00:00:00
centos
centos
python, tkinter security update
2012-06-18 13:11:45
python, tkinter security update
2012-06-18 16:35:36
amazon
amazon
Low: python26
2012-07-05 16:16:00
veracode
veracode
Information Disclosure
2019-05-02 04:41:53
Denial Of Service (DoS)
2019-05-02 04:41:53
oraclelinux
oraclelinux
python security update
2012-06-18 00:00:00
python security update
2012-06-18 00:00:00
ubuntu
ubuntu
Python 3.2 vulnerabilities
2012-10-23 00:00:00
Python 2.7 vulnerabilities
2012-10-02 00:00:00
Python 3.1 vulnerabilities
2012-10-24 00:00:00
f5
f5
K75910138 : Python vulnerabilities CVE-2011-1521, CVE-2011-4940, CVE-2011-4944, CVE-2012-0845, and CVE-2012-1150
2018-09-11 00:00:00
securityvulns
securityvulns
python multiple security vulnerabilities
2012-07-29 00:00:00
[ MDVSA-2012:096-1 ] python
2012-07-09 00:00:00
osv
osv
python2.6 - security update
2014-07-31 00:00:00
gentoo
gentoo
Python: Multiple vulnerabilities
2014-01-06 00:00:00
debian
debian
[DLA 25-1] python2.6 security update
2014-07-31 21:07:32
vmware
vmware
VMware security updates for vSphere API and ESX Service Console
2012-11-15 00:00:00
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in python 2.6.4 used in OS Image for AIX shipped with IBM Cloud Pak System
2020-05-06 11:57:04
suse
suse
Security update for python3 (important)
2020-01-21 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1957
2021-07-02 18:03:40

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.6 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.6%

JSON
Related for NVD:CVE-2012-1150
nessus36prion2seebug1ubuntucve2debiancve2cve2openvas48cvelist2nvd1fedora7redhat2centos2amazon1veracode2oraclelinux2ubuntu4f51securityvulns2osv1gentoo1debian1vmware1ibm1suse1rosalinux1