CVE-2011-4838
EPSS 7.3%jruby - security update
發布日:2011/12/30修改日:2026/4/28
描述
JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
受影響套件(2)
- Debian/jrubyfrom 0, < 1.5.6-4
- Debian/jrubyfrom 0, < 1.5.1-1+deb6u1