Evil-DB LogoEvil-DB
← All CVEs

CVE-2012-0840

medium · 5

tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

5
CVSS
43.3%
EPSS (exploit prob.)
99th
EPSS percentile
2012-02-10
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

CWE-20

Affected products

VendorProductAffected versions
apacheportable_runtime<= 1.4.5
apacheportable_runtime0.9.1
apacheportable_runtime0.9.2
apacheportable_runtime0.9.2-dev
apacheportable_runtime0.9.3
apacheportable_runtime0.9.3-dev
apacheportable_runtime0.9.4
apacheportable_runtime0.9.5
apacheportable_runtime0.9.6
apacheportable_runtime0.9.7
apacheportable_runtime0.9.7-dev
apacheportable_runtime0.9.8
apacheportable_runtime0.9.9
apacheportable_runtime0.9.16-dev
apacheportable_runtime1.3.0
apacheportable_runtime1.3.1
apacheportable_runtime1.3.2
apacheportable_runtime1.3.3
apacheportable_runtime1.3.4
apacheportable_runtime1.3.4-dev
apacheportable_runtime1.3.5
apacheportable_runtime1.3.6
apacheportable_runtime1.3.6-dev
apacheportable_runtime1.3.7
apacheportable_runtime1.3.8
apacheportable_runtime1.3.9
apacheportable_runtime1.3.10
apacheportable_runtime1.3.11
apacheportable_runtime1.3.12
apacheportable_runtime1.3.13
apacheportable_runtime1.4.0
apacheportable_runtime1.4.1
apacheportable_runtime1.4.2
apacheportable_runtime1.4.3
apacheportable_runtime1.4.4

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2012-0840