CVE-2012-0840

描述

tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

如何修補 CVE-2012-0840

要修補 CVE-2012-0840,請將受影響套件升級到下列已修補版本。

• Debian/apr—升級至 1.4.6-1 或更新版本

CVE-2012-0840 正在被利用嗎?

中等 — EPSS 為 43.3%,可持續追蹤但非最高優先。

受影響套件(1)

• from 0, < 1.4.6-1

參考連結(1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2012-0840