CVE-2011-4462: Input Validation

Q: What is the severity of CVE-2011-4462?

CVE-2011-4462 is considered a moderate severity vulnerability that can lead to denial of service due to CPU consumption.

Q: How do I fix CVE-2011-4462?

To fix CVE-2011-4462, upgrade to Plone version 4.1.4 or later.

Q: What is the impact of CVE-2011-4462?

The impact of CVE-2011-4462 allows remote attackers to trigger hash collisions, causing a denial of service.

Q: Which versions of Plone are affected by CVE-2011-4462?

CVE-2011-4462 affects Plone versions up to and including 4.1.3, as well as earlier versions like 3.0 and 2.5.

Q: Is there a known exploit for CVE-2011-4462?

As of the current date, there are no publicly available exploits specifically targeting CVE-2011-4462.

Published Dec 30, 2011

Updated

Plone 4.1.3 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.

Affected Software

63 affected componentsFixes available

pip/Plone<4.1.4

4.1.4

Plone plone<=4.1.3

Plone plone=1.0

Plone plone=1.0.1

Plone plone=1.0.2

Plone plone=1.0.3

Plone plone=1.0.4

Plone plone=1.0.5

Plone plone=1.0.6

Plone plone=2.0

Plone plone=2.0.1

Plone plone=2.0.2

Plone plone=2.0.3

Plone plone=2.0.4

Plone plone=2.0.5

Plone plone=2.1

Plone plone=2.1.1

Plone plone=2.1.2

Plone plone=2.1.3

Plone plone=2.1.4

Plone plone=2.5

Plone plone=2.5.1

Plone plone=2.5.2

Plone plone=2.5.3

Plone plone=2.5.4

Plone plone=2.5.5

Plone plone=3.0

Plone plone=3.0.1

Plone plone=3.0.2

Plone plone=3.0.3

Plone plone=3.0.4

Plone plone=3.0.5

Plone plone=3.0.6

Plone plone=3.1

Plone plone=3.1.1

Plone plone=3.1.2

Plone plone=3.1.3

Plone plone=3.1.4

Plone plone=3.1.5.1

Plone plone=3.1.6

Plone plone=3.1.7

Plone plone=3.2

Plone plone=3.2.1

Plone plone=3.2.2

Plone plone=3.2.3

Plone plone=3.3

Plone plone=3.3.1

Plone plone=3.3.2

Plone plone=3.3.3

Plone plone=3.3.4

Plone plone=3.3.5

Plone plone=3.3.6

Plone plone=4.0

Plone plone=4.0.1

Plone plone=4.0.2

Plone plone=4.0.3

Plone plone=4.0.4

Plone plone=4.0.5

Plone plone=4.0.7

Plone plone=4.0.9

Plone plone=4.1

Plone plone=4.1.1

Plone plone=4.1.2

Event History

Dec 30, 2011

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Jul 23, 2018

Advisory Published

07:50 PM

Frequently Asked Questions

What is the severity of CVE-2011-4462?

CVE-2011-4462 is considered a moderate severity vulnerability that can lead to denial of service due to CPU consumption.

How do I fix CVE-2011-4462?

To fix CVE-2011-4462, upgrade to Plone version 4.1.4 or later.

What is the impact of CVE-2011-4462?