CVE-2012-0840

Published: Feb 10, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

Affected (35)

Products: Apache: Portable Runtime

Apache

1 product

Portable Runtime

Configuration A

35 vulnerable

Vulnerable Software	Affected Versions
Apache Portable Runtime	Up to 1.4.5
Apache Portable Runtime	Version 0.9.16-dev
Apache Portable Runtime	Version 0.9.1
Apache Portable Runtime	Version 0.9.2-dev
Apache Portable Runtime	Version 0.9.2
Apache Portable Runtime	Version 0.9.3-dev
Apache Portable Runtime	Version 0.9.3
Apache Portable Runtime	Version 0.9.4
Apache Portable Runtime	Version 0.9.5
Apache Portable Runtime	Version 0.9.6
Apache Portable Runtime	Version 0.9.7-dev
Apache Portable Runtime	Version 0.9.7
Apache Portable Runtime	Version 0.9.8
Apache Portable Runtime	Version 0.9.9
Apache Portable Runtime	Version 1.3.0
Apache Portable Runtime	Version 1.3.10
Apache Portable Runtime	Version 1.3.11
Apache Portable Runtime	Version 1.3.12
Apache Portable Runtime	Version 1.3.13
Apache Portable Runtime	Version 1.3.1
Apache Portable Runtime	Version 1.3.2
Apache Portable Runtime	Version 1.3.3
Apache Portable Runtime	Version 1.3.4-dev
Apache Portable Runtime	Version 1.3.4
Apache Portable Runtime	Version 1.3.5
Apache Portable Runtime	Version 1.3.6-dev
Apache Portable Runtime	Version 1.3.6
Apache Portable Runtime	Version 1.3.7
Apache Portable Runtime	Version 1.3.8
Apache Portable Runtime	Version 1.3.9
Apache Portable Runtime	Version 1.4.0
Apache Portable Runtime	Version 1.4.1
Apache Portable Runtime	Version 1.4.2
Apache Portable Runtime	Version 1.4.3
Apache Portable Runtime	Version 1.4.4