CVE-2011-0839
published 2011-04-20CVE-2011-0839: Unspecified vulnerability in Oracle Solaris 9, 10, and 11 Express allows local users to affect availability, related to LOFS.
PriorityP45low3.7CVSS 2.0
AVLACHAuMCNINAC
EPSS
0.25%
16.5th percentile
Unspecified vulnerability in Oracle Solaris 9, 10, and 11 Express allows local users to affect availability, related to LOFS.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sun | sunos | — | — |
| sun | sunos | — | — |
| sun | sunos | — | — |
CVSS provenance
nvdv2.03.7LOWAV:L/AC:H/Au:M/C:N/I:N/A:C
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-pp32-4qjv-98mx: Unspecified vulnerability in Oracle Solaris 9, 10, and 11 Express allows local users to affect availability, related to LOFS
ghsa_unreviewed·2022-05-17
CVE-2011-0839 [LOW] GHSA-pp32-4qjv-98mx: Unspecified vulnerability in Oracle Solaris 9, 10, and 11 Express allows local users to affect availability, related to LOFS
Unspecified vulnerability in Oracle Solaris 9, 10, and 11 Express allows local users to affect availability, related to LOFS.
Red Hat
ocaml: hash table collisions CPU usage DoS (oCERT-2011-003)
vendor_redhat·2011-12-28·CVSS 5.0
CVE-2012-0839 [MEDIUM] ocaml: hash table collisions CPU usage DoS (oCERT-2011-003)
ocaml: hash table collisions CPU usage DoS (oCERT-2011-003)
OCaml 3.12.1 and earlier computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
Statement: The Red Hat Security Response Team has rated this issue as having Moderate security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.
Package: ocaml (Red Hat Enterprise Linux 6) - Will not fix
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2012-0839 ocaml: hash table collisions CPU usage DoS (oCERT-2011-003) [fedora-all]
bugzilla·2012-07-24·CVSS 5.0
CVE-2012-0839 [MEDIUM] CVE-2012-0839 ocaml: hash table collisions CPU usage DoS (oCERT-2011-003) [fedora-all]
CVE-2012-0839 ocaml: hash table collisions CPU usage DoS (oCERT-2011-003) [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include this bug ID and the
bug IDs of this bug's parent bugs filed against the "Security Response"
product (the top-level CVE bugs). Please mention the CVE IDs being fixed
in the RPM changelog when available.
Bodhi update submission link:
https://admin.fedoraproject.org/updates/new/?typ
Bugzilla
CVE-2012-0839 ocaml: hash table collisions CPU usage DoS (oCERT-2011-003) [epel-4]
bugzilla·2012-07-24·CVSS 5.0
CVE-2012-0839 [MEDIUM] CVE-2012-0839 ocaml: hash table collisions CPU usage DoS (oCERT-2011-003) [epel-4]
CVE-2012-0839 ocaml: hash table collisions CPU usage DoS (oCERT-2011-003) [epel-4]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include this bug ID and the
bug IDs of this bug's parent bugs filed against the "Security Response"
product (the top-level CVE bugs). Please mention the CVE IDs being fixed
in the RPM changelog when available.
Bodhi update submission link:
https://admin.fedoraproject.org/updates/new/?type_=s
Bugzilla
CVE-2012-0839 ocaml: hash table collisions CPU usage DoS (oCERT-2011-003) [epel-5]
bugzilla·2012-07-24·CVSS 5.0
CVE-2012-0839 [MEDIUM] CVE-2012-0839 ocaml: hash table collisions CPU usage DoS (oCERT-2011-003) [epel-5]
CVE-2012-0839 ocaml: hash table collisions CPU usage DoS (oCERT-2011-003) [epel-5]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include this bug ID and the
bug IDs of this bug's parent bugs filed against the "Security Response"
product (the top-level CVE bugs). Please mention the CVE IDs being fixed
in the RPM changelog when available.
Bodhi update submission link:
https://admin.fedoraproject.org/updates/new/?type_=s
Bugzilla
CVE-2012-0839 ocaml: hash table collisions CPU usage DoS (oCERT-2011-003)
bugzilla·2012-02-07·CVSS 5.0
CVE-2012-0839 [MEDIUM] CVE-2012-0839 ocaml: hash table collisions CPU usage DoS (oCERT-2011-003)
CVE-2012-0839 ocaml: hash table collisions CPU usage DoS (oCERT-2011-003)
Julian Wälde and Alexander Klink reported a flaw in the hash function used in
the implementation of various hash based arrays.
http://caml.inria.fr/pub/docs/manual-ocaml/libref/Hashtbl.html
A specially-crafted set of keys could trigger hash function collisions, which
degrade hash table performance by changing hash table operations complexity
from an expected/average O(1) to the worst case O(n). Reporters were able to
find colliding strings efficiently using equivalent substrings or meet in the
middle techniques.
This problem is similar to the issue that was previously reported for and fixed
in e.g. perl:
http://www.cs.rice.edu/~scrosby/hash/CrosbyWallach_UsenixSec2003.pdf
Discussion of a fix for ocaml is taking
2011-04-20
Published