Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 445342 - dev-lang/rubinius: Hash collision DoS (CVE-2012-5372)
Summary: dev-lang/rubinius: Hash collision DoS (CVE-2012-5372)
Status: RESOLVED DUPLICATE of bug 396399
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal minor (vote)
Assignee: Gentoo Security
Whiteboard: B3 [upstream]
Depends on:
Reported: 2012-11-30 13:17 UTC by GLSAMaker/CVETool Bot
Modified: 2015-07-02 09:30 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Note You need to log in before you can comment on or make changes to this bug.
Description GLSAMaker/CVETool Bot gentoo-dev 2012-11-30 13:17:48 UTC
CVE-2012-5372 (
  Rubinius computes hash values without properly restricting the ability to
  trigger hash collisions predictably, which allows context-dependent
  attackers to cause a denial of service (CPU consumption) via crafted input
  to an application that maintains a hash table, as demonstrated by a
  universal multicollision attack against the MurmurHash3 algorithm.
Comment 1 Manuel Rüger (RETIRED) gentoo-dev 2015-07-02 09:30:48 UTC

*** This bug has been marked as a duplicate of bug 396399 ***