CVE-2012-0039

glib2: hash table collisions CPU usage DoS

Published Jan 14, 2012 CVSS 3.1 · 7.5 High EPSS 2.0% KEV · Not listed
Description
GLib 2.31.8 and earlier, when the g_str_hash function is used, computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table. NOTE: this issue may be disputed by the vendor; the existence of the g_str_hash function is not a vulnerability in the library, because callers of g_hash_table_new and g_hash_table_new_full can specify an arbitrary hash function that is appropriate for the application.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Jan 21, 2025, 6:29 PM
Reserved
Dec 7, 2011, 12:00 AM
Status
Modified
Published
Jan 14, 2012, 5:55 PM
Modified
Jun 16, 2026, 11:36 PM
Severity
Moderate
Public date
May 29, 2003, 12:00 AM