CVE-2011-5037

Google V8 computes hash values for form parameters without restricting the
ability to trigger hash collisions predictably, which allows remote
attackers to cause a denial of service (CPU consumption) by sending many
crafted parameters, as demonstrated by attacks against Node.js.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=653962&gt;