CVE-2011-4838

JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to…

published December 30, 2011

CVSS
—
EPSS
4%
Percentile
90.9
In the wild
Unconfirmed
What it is

JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04203 · 90.9th percentile
Published
2011-12-30T01:00Z
EPSS history
Timeline
  • 30 DEC 01:00Z
    JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to…
    cvelistv5