Hash collision attack vulnerability in Jenkins
Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before 1.424.2.1 and 1.400.x before 1.400.0.11 could allow remote attackers to cause a considerable CPU load, aka "the Hash DoS attack."
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2012-0785US | high7.5 | — | ||
Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before 1.424.2.1 and 1.400.x before 1.400.0.11… | ||||
02
references
External citations — patches, advisories, analysis.
- http://www.openwall.com/lists/oss-security/2012/01/20/8WEB
- https://access.redhat.com/security/cve/cve-2012-0785WEB
- https://jenkins.io/security/advisory/2012-01-12WEB
- https://nvd.nist.gov/vuln/detail/CVE-2012-0785ADVISORY
- https://security-tracker.debian.org/tracker/CVE-2012-0785WEB
- https://www.cloudbees.com/jenkins-security-advisory-2012-01-12WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan