CVE-2012-0840
NoneCVSS
—
EPSS
42.1%
Published
Feb 10, 2012
CISA due date
—
The record
tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | apr | 0 | 1.4.6-1 |
| Debian:11 | apr | 0 | 1.4.6-1 |
| Debian:12 | apr | 0 | 1.4.6-1 |
| Debian:13 | apr | 0 | 1.4.6-1 |
Related vulnerabilities
- CVE-2011-0419 Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the… Also affects apr
- CVE-2011-1928 The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library… Also affects apr
- CVE-2009-2412 Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache… Also affects apr
- CVE-2026-113786 pypdf is a free and open-source pure-python PDF library. CWE-20
- CVE-2026-112081 A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. CWE-20
- CVE-2026-111869 A vulnerability was identified in makeplane plane up to 1.4.2. CWE-20
- CVE-2026-100347 kin-openapi is a Go project for handling OpenAPI files. CWE-20
- CVE-2026-99999 In the Linux kernel, the following vulnerability has been resolved: ipv4: validate… CWE-20