Description

Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before 1.424.2.1 and 1.400.x before 1.400.0.11 could allow remote attackers to cause a considerable CPU load, aka "the Hash DoS attack."

Remediation

References

CVE-2012-0785

Related Vulnerabilities

CrushFTP Server Improper Neutralization of CRLF Sequences ('CRLF Injection') Vulnerability (CVE-2017-14037)

Oracle Database Server Other Vulnerability (CVE-2006-0551)

Liferay Portal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-35030)

Microsoft SQL Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2003-0230)

Liferay DXP Use of Web Browser Cache Containing Sensitive Information Vulnerability (CVE-2025-62276)

Severity

High

Classification

CVE-2012-0785 CWE-400 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities