CVE-2012-2328: Medium severity standards-based linux common information model client vulnerability
internal/cimxml/sax/NodeFactory.java in Standards-Based Linux Instrumentation for Manageability (SBLIM) Common Information Model (CIM) Client (aka sblim-cim-client2) before 2.1.12 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2328?
CVE-2012-2328 has been classified as having a medium severity due to its potential for causing denial of service through hash collision attacks.
How do I fix CVE-2012-2328?
To fix CVE-2012-2328, update the Standards-Based Linux Common Information Model Client to version 2.1.12 or later.
What versions are affected by CVE-2012-2328?
CVE-2012-2328 affects versions of the Standards-Based Linux Common Information Model Client before 2.1.12 and specific openSUSE versions 11.4, 12.1, and 12.2.
What is the impact of CVE-2012-2328?
The impact of CVE-2012-2328 is the ability to exploit predictable hash collisions, which can lead to performance degradation and service interruption.
Is CVE-2012-2328 a remote exploit?
CVE-2012-2328 can be exploited remotely, making it important to address promptly to secure affected systems.