CVE-2012-0839

Published: Feb 8, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

OCaml 3.12.1 and earlier computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

Affected (21)

Products: Inria: Ocaml

1 product

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Inria Ocaml	Up to 3.12.1
Inria Ocaml	Version 1.07
Inria Ocaml	Version 2.02
Inria Ocaml	Version 2.04
Inria Ocaml	Version 2.99 alpha
Inria Ocaml	Version 3.00
Inria Ocaml	Version 3.01
Inria Ocaml	Version 3.02
Inria Ocaml	Version 3.03 alpha
Inria Ocaml	Version 3.04
Inria Ocaml	Version 3.05 beta
Inria Ocaml	Version 3.06
Inria Ocaml	Version 3.07
Inria Ocaml	Version 3.07 beta1
Inria Ocaml	Version 3.07 beta2
Inria Ocaml	Version 3.07 pl2
Inria Ocaml	Version 3.08
Inria Ocaml	Version 3.09
Inria Ocaml	Version 3.10
Inria Ocaml	Version 3.11
Inria Ocaml	Version 3.12

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (14)

http://openwall.com/lists/oss-security/2012/02/07/1

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2012/02/07/2

Source: secalert@redhat.com

http://secunia.com/advisories/47853

Source: secalert@redhat.com

http://www.mail-archive.com/caml-list%40inria.fr/msg01477.html

Source: secalert@redhat.com

http://www.mail-archive.com/caml-list%40inria.fr/msg01478.html

Source: secalert@redhat.com

http://www.nruns.com/_downloads/advisory28122011.pdf

Source: secalert@redhat.com

http://www.ocert.org/advisories/ocert-2011-003.html

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2012/02/07/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2012/02/07/2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/47853

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mail-archive.com/caml-list%40inria.fr/msg01477.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mail-archive.com/caml-list%40inria.fr/msg01478.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.nruns.com/_downloads/advisory28122011.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ocert.org/advisories/ocert-2011-003.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.