CVE-2011-4815

Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent…

published December 30, 2011

CVSS
—
EPSS
4%
Percentile
90.6
In the wild
Unconfirmed
What it is

Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04059 · 90.6th percentile
Published
2011-12-30T01:00Z
EPSS history
Timeline
  • 30 DEC 01:00Z
    Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent…
    cvelistv5