CVE-2012-2328 in openSUSE信息

摘要

由 VulDB • 2026-05-12

Standards-Based Linux Instrumentation for Manageability (SBLIM) Common Information Model (CIM) Client (aka sblim-cim-client2) 2.1.12 版本之前的 `internal/cimxml/sax/NodeFactory.java` 在计算哈希值时未限制触发可预测哈希碰撞的能力，这使得上下文相关的攻击者可以通过构造的 XML 文件导致拒绝服务（CPU 资源耗尽）。

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2012-04-19

披露

2014-02-10

管理

已接受

条目

VDB-69276

CPE

准备好

CWE

CWE-310 (已确认)

CVSS

5.0 (NVD)

EPSS

0.01857

KEV

否

活动

非常低

部门

Hospital, Chemical, ...

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2012-2328
NVD	https://nvd.nist.gov/vuln/detail/CVE-2012-2328
CVE Details	https://www.cvedetails.com/cve/CVE-2012-2328/

◂ 上一步一览下一步 ▸

Do you need the next level of professionalism?

Upgrade your account now!