CVE-2011-5037: Input Validation
Google V8 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters, as demonstrated by attacks against Node.js.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-5037?
The severity of CVE-2011-5037 is considered to be moderate, as it can lead to denial of service due to CPU consumption.
How do I fix CVE-2011-5037?
To fix CVE-2011-5037, update Google V8 to the latest version that includes patches addressing this vulnerability.
What type of attacks can exploit CVE-2011-5037?
CVE-2011-5037 can be exploited through crafted parameters designed to trigger hash collisions, resulting in denial of service.
What software is affected by CVE-2011-5037?
CVE-2011-5037 affects Google V8, particularly versions prior to the security updates addressing this issue.
What is the impact of exploiting CVE-2011-5037?
The impact of exploiting CVE-2011-5037 is denial of service, leading to increased CPU consumption and potential service unavailability.