Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2011-12-30T01:00:00

Updated: 2019-03-08T10:57:01

Reserved: 2011-11-17T00:00:00


Link: CVE-2011-4461

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2011-12-30T01:55:01.313

Modified: 2019-03-08T11:29:00.367


Link: CVE-2011-4461

JSON object: View

cve-icon Redhat Information

No data.

CWE