CVE-2012-5370
1 advisory.
Maven/org.jruby:jruby-parent CVE-2012-5370: medium, EPSS 2.25%
JRuby denial of service via Hash Collision
Action: Upgrade org.jruby:jruby-parent to 1.7.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.1 | - |
Fixed versions
| 1.7.1 |
Sources
- osv: GHSA-fmmq-j7pq-f85c
- https://nvd.nist.gov/vuln/detail/CVE-2012-5370
- https://github.com/jruby/jruby/commit/5e4aab28b26fd127112b76fabfac9a33b64caf77
- https://bugzilla.redhat.com/show_bug.cgi?id=880671
- http://jruby.org/2012/12/03/jruby-1-7-1
- http://rhn.redhat.com/errata/RHSA-2013-0533.html
CVE-2012-5370 · published · modified · JSON