CVE-2012-0785: High severity jenkins vulnerability
Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before 1.424.2.1 and 1.400.x before 1.400.0.11 could allow remote attackers to cause a considerable CPU load, aka "the Hash DoS attack."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0785?
CVE-2012-0785 is classified as a high severity vulnerability due to its potential to cause significant CPU load through a hash collision attack.
How do I fix CVE-2012-0785?
To fix CVE-2012-0785, upgrade Jenkins to version 1.447 or later, or to version 1.424.2 for Jenkins LTS.
What types of systems are affected by CVE-2012-0785?
CVE-2012-0785 affects Jenkins versions prior to 1.447, Jenkins LTS versions prior to 1.424.2, and certain CloudBees Jenkins Enterprise versions.
What type of attack does CVE-2012-0785 facilitate?
CVE-2012-0785 facilitates a denial-of-service attack known as a Hash DoS attack, which can overload the CPU.
Is CVE-2012-0785 still a concern for current Jenkins users?
CVE-2012-0785 is not a concern for current Jenkins users who have updated to versions 1.447 or later, or 1.424.2 for LTS.