Code injection

2012-02-1019:55:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.1%

JSON

tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

CPENameOperatorVersion
portable_runtimeeq1.3.6-dev
portable_runtimeeq1.3.7
portable_runtimeeq0.9.7-dev
portable_runtimeeq1.3.3
portable_runtimeeq0.9.6
portable_runtimeeq0.9.16-dev
portable_runtimeeq0.9.8
portable_runtimeeq1.3.1
portable_runtimeeq1.3.2
portable_runtimeeq1.3.9

Name	Operator	Version
portable_runtime	eq	1.3.6-dev
portable_runtime	eq	1.3.7
portable_runtime	eq	0.9.7-dev
portable_runtime	eq	1.3.3
portable_runtime	eq	0.9.6
portable_runtime	eq	0.9.16-dev
portable_runtime	eq	0.9.8
portable_runtime	eq	1.3.1
portable_runtime	eq	1.3.2
portable_runtime	eq	1.3.9