← Back

CVE-2012-5373

nvd nist
Published: Nov 28, 2012Modified: Apr 29, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against the MurmurHash3 algorithm, a different vulnerability than CVE-2012-2739.

Affected (3)

Products: Oracle: Jdk, Jre, Openjdk
3 products
Jdk
Jre
Openjdk
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Up to 1.7.0
Up to 1.7.0
Up to 1.7.0

Related CWEs

Timeline

No history available yet.