Search vulnerabilities

Results 2

Export CSV
CVE-2012-0839

ocaml: hash table collisions CPU usage DoS (oCERT-2011-003)

OCaml 3.12.1 and earlier computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

CVSS 2.0 · 5.0 Medium EPSS 2.7% KEV · Not listed
Vendors
Products
CVE-2011-4119

caml-light <= 0.75 uses mktemp() insecurely, and also does unsafe things in /tmp during make install.

CVSS 3.1 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
Products