CVE-2012-1150

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Weakness enumeration

CWE-310

Affected software

No affected versions have been published.

Timeline

Published
Oct 5, 2012
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2012

CVE-2012-11515.0Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.19.0 for Perl allow remote PostCVE-2012-11525.0Multiple format string vulnerabilities in the error reporting functionality in the YAML::LibYAML (aka YAML-LibYAML and perl-YAML-LibYAML) moCVE-2012-11536.8Unrestricted file upload vulnerability in addons/uploadify/uploadify.php in appRain CMF 0.1.5 and earlier allows remote attackers to executeCVE-2012-11544.3mod_cluster 1.0.10 before 1.0.10 CP03 and 1.1.x before 1.1.4, as used in JBoss Enterprise Application Platform 5.1.2, when "ROOT" is set to CVE-2012-11557.5Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even thCVE-2012-11567.5Moodle before 2.2.2 has users' private files included in course backupsCVE-2012-11574.3Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by defaultCVE-2012-11584.3Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in exportCVE-2012-11594.3Moodle before 2.2.2: Overview report allows users to see hidden coursesCVE-2012-11602.7Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.phpCVE-2012-11614.3Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search resultsCVE-2012-11627.5Heap-based buffer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to cause a denial of service (