CVE-2012-3514 in Nicolas Cannasse OCaml Xml-Light Library
Summary
OCaml Xml-Light Library before r234 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via unspecified vectors.
Reservation
06/14/2012
Disclosure
08/25/2012
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 61798 | Nicolas Cannasse OCaml Xml-Light Library cryptographic issue | 310 | Not defined | Official fix | CVE-2012-3514 |