CVE-2012-2739
published 2012-11-28CVE-2012-2739: Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39, computes hash values without restricting the ability to trigger hash…
PriorityP423medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
3.17%
86.6th percentile
Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39, computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | jdk | <= 1.7.0 | — |
| oracle | jdk | — | — |
| oracle | jre | <= 1.7.0 | — |
| oracle | jre | — | — |
| oracle | openjdk | <= 1.7.0 | — |
| oracle | openjdk | — | — |
| oracle | openjdk | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-3h76-cfv5-34fg: Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions pred
ghsa_unreviewed·2022-05-17·CVSS 5.0
CVE-2012-5373 [MEDIUM] GHSA-3h76-cfv5-34fg: Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions pred
Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against the MurmurHash3 algorithm, a different vulnerability than CVE-2012-2739.
GHSA
GHSA-g4rj-4w28-44fg: Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39, computes hash values without restricting the ability to tri
ghsa_unreviewed·2022-05-17
CVE-2012-2739 [MEDIUM] GHSA-g4rj-4w28-44fg: Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39, computes hash values without restricting the ability to tri
Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39, computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
OSV
CVE-2012-5373: Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions pred
osv·2012-11-28·CVSS 5.0
CVE-2012-5373 [MEDIUM] CVE-2012-5373: Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions pred
Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against the MurmurHash3 algorithm, a different vulnerability than CVE-2012-2739.
Red Hat
java: Murmur hash function collisions (oCERT-2012-001)
vendor_redhat·2012-11-23·CVSS 5.0
CVE-2012-5373 [MEDIUM] java: Murmur hash function collisions (oCERT-2012-001)
java: Murmur hash function collisions (oCERT-2012-001)
Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against the MurmurHash3 algorithm, a different vulnerability than CVE-2012-2739.
Package: java-1.4.2-ibm (Red Hat Enterprise Linux 5) - Under investigation
Package: java-1.4.2-ibm-sap (Red Hat Enterprise Linux 5) - Under investigation
Package: java-1.5.0-ibm (Red Hat Enterprise Linux 5) - Under investigation
Package: java-1.6.0-ibm (Red Hat Enterprise Linux 5) - Under inve
Red Hat
java: hash table collisions CPU usage DoS (oCERT-2011-003)
vendor_redhat·2011-12-28·CVSS 5.0
CVE-2012-2739 [MEDIUM] java: hash table collisions CPU usage DoS (oCERT-2011-003)
java: hash table collisions CPU usage DoS (oCERT-2011-003)
Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39, computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
Statement: This flaw affects various versions of Java as shipped with Red Hat products. A patch is available for Java 7 and Java 8, but not for previous versions of Java shipped with Red Hat products. Although no patch is available for previous versions of Java as shipped with Red Hat products, the impact of this flaw has been addressed in several components that utilize Java HashMap in such a way t
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2012-5373 java: Murmur hash function collisions (oCERT-2012-001)
bugzilla·2012-11-27·CVSS 5.0
CVE-2012-5373 [MEDIUM] CVE-2012-5373 java: Murmur hash function collisions (oCERT-2012-001)
CVE-2012-5373 java: Murmur hash function collisions (oCERT-2012-001)
A denial of service flaw was found in the Murmur hash function implementation, as being used by various Java implementations. A specially-crafted set of keys could trigger Murmur hash function collisions, which degrade hash table items insert performance by changing hash table operations complexity from an expected/average O(n) to the worst case O(n^2). Reporters were able to find colliding strings efficiently using equivalent substrings.
As various web application frameworks for Java automatically pre-fill certain arrays with data from the HTTP request (such as GET or POST parameters) for Java web applications, a remote attacker could use this flaw to make the Java virtual machine to use an excessive amount of CPU time
Bugzilla
CVE-2012-2739 java: hash table collisions CPU usage DoS (oCERT-2011-003)
bugzilla·2011-11-01·CVSS 5.0
CVE-2012-2739 [MEDIUM] CVE-2012-2739 java: hash table collisions CPU usage DoS (oCERT-2011-003)
CVE-2012-2739 java: hash table collisions CPU usage DoS (oCERT-2011-003)
Julian Wälde and Alexander Klink reported that the String.hashCode() hash function is not sufficiently collision resistant. hashCode() value is used in the implementations of HashMap and Hashtable classes:
http://docs.oracle.com/javase/6/docs/api/java/util/HashMap.html
http://docs.oracle.com/javase/6/docs/api/java/util/Hashtable.html
A specially-crafted set of keys could trigger hash function collisions, which can degrade performance of HashMap or Hashtable by changing hash table operations complexity from an expected/average O(1) to the worst case O(n). Reporters were able to find colliding strings efficiently using equivalent substrings and meet in the middle techniques.
This problem can be used to start a denia
http://armoredbarista.blogspot.de/2012/02/investigating-hashdos-issue.htmlhttp://mail.openjdk.java.net/pipermail/core-libs-dev/2012-May/010238.htmlhttp://www.kb.cert.org/vuls/id/903934http://www.nruns.com/_downloads/advisory28122011.pdfhttp://www.ocert.org/advisories/ocert-2011-003.htmlhttp://www.openwall.com/lists/oss-security/2012/06/15/12http://www.openwall.com/lists/oss-security/2012/06/17/1https://bugzilla.redhat.com/show_bug.cgi?id=750533http://armoredbarista.blogspot.de/2012/02/investigating-hashdos-issue.htmlhttp://mail.openjdk.java.net/pipermail/core-libs-dev/2012-May/010238.htmlhttp://www.kb.cert.org/vuls/id/903934http://www.nruns.com/_downloads/advisory28122011.pdfhttp://www.ocert.org/advisories/ocert-2011-003.htmlhttp://www.openwall.com/lists/oss-security/2012/06/15/12http://www.openwall.com/lists/oss-security/2012/06/17/1https://bugzilla.redhat.com/show_bug.cgi?id=750533
2012-11-28
Published