CVE-2012-1150
CVE-2012-1150
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
EPSS 5.1% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.ubuntu.com/usn/USN-1615-1
- http://python.org/download/releases/3.2.3/
- http://secunia.com/advisories/51087
- http://www.ubuntu.com/usn/USN-1592-1
- http://bugs.python.org/issue13703
- http://www.ubuntu.com/usn/USN-1616-1
- http://mail.python.org/pipermail/python-dev/2011-December/115116.html
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
- http://secunia.com/advisories/50858
- http://secunia.com/advisories/51089
- http://mail.python.org/pipermail/python-dev/2012-January/115892.html
- https://bugzilla.redhat.com/show_bug.cgi?id=750555
- http://python.org/download/releases/2.6.8/
- http://www.openwall.com/lists/oss-security/2012/03/10/3
- http://www.ubuntu.com/usn/USN-1596-1
- http://python.org/download/releases/3.1.5/
- http://python.org/download/releases/2.7.3/
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
- https://nvd.nist.gov/vuln/detail/CVE-2012-1150