CVE-2012-2328

Published: Feb 10, 2014Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

internal/cimxml/sax/NodeFactory.java in Standards-Based Linux Instrumentation for Manageability (SBLIM) Common Information Model (CIM) Client (aka sblim-cim-client2) before 2.1.12 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML file.

Affected (4)

Products: Opensuse: Opensuse · Standards Based Linux Instrumentation Project: Standards Based Linux Common Information Model Client

Opensuse

1 product

Opensuse

Standards Based Linux Instrumentation Project

1 product

Standards Based Linux Common Information Model Client

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 11.4
Opensuse Opensuse	Version 12.1
Opensuse Opensuse	Version 12.2
Standards Based Linux Instrumentation Project Standards Based Linux Common Information Model Client	Up to 2.1.11