CVE-2011-5037 REJECTED

Google V8 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters, as demonstrated by attacks against Node.js.

EPSS 0.76% · 73.3th percentile

Risk Scores

EPSS Score
0.76%
73.3th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSlibv8-3.140, 3.14.5.8-4, 3.14.5.8-5

Timeline

References

Open in Interactive Console →