← Back

CVE-2012-2739

nvd nist
Published: Nov 28, 2012Modified: Apr 29, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39, computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

Affected (15)

Products: Oracle: Jdk, Jre, Openjdk
Oracle
3 products
Jdk
Jre
Openjdk
Configuration A
12 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Jdk
version ≤ 1.7.0
Jdk
Version 1.7.0
Jdk
Version 1.7.0 update1
Jdk
Version 1.7.0 update2
Jdk
Version 1.7.0 update3
Jdk
Version 1.7.0 update4
Oracle
Jre
version ≤ 1.7.0
Jre
Version 1.7.0
Jre
Version 1.7.0 update1
Jre
Version 1.7.0 update2
Jre
Version 1.7.0 update3
Jre
Version 1.7.0 update4
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Openjdk
version ≤ 1.7.0
Openjdk
Version 1.6.0
Openjdk
Version 1.8.0

Related CWEs

CWE-310
CWE-310

References (16)

Source: secalert@redhat.com
Exploit
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
US Government Resource
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.