tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade apr | Aug 30, 2017 | Feb 10, 2012 |
| Debian | — | Upgrade apr | Jul 30, 2024 | Feb 10, 2012 |
| Gentoo Linux | — | Upgrade dev-libs/apr.Upgrade dev-libs/apr-util. | Oct 30, 2017 | Feb 10, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 5, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub