CVE-2011-4815: Input Validation
Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4815?
CVE-2011-4815 is classified as a denial of service vulnerability due to its potential to cause excessive CPU consumption.
How do I fix CVE-2011-4815?
To fix CVE-2011-4815, upgrade Ruby to version 1.8.7-p357 or later.
What software versions are affected by CVE-2011-4815?
CVE-2011-4815 affects Ruby versions 1.8.7-p299 through 1.8.7-p352.
What kind of attack does CVE-2011-4815 facilitate?
CVE-2011-4815 allows context-dependent attackers to trigger hash collisions, leading to denial of service.
Is CVE-2011-4815 specific to a certain operating system?
CVE-2011-4815 is related to the Ruby programming language and is not specific to any particular operating system.