CVE-2012-1150

python: hash table collisions CPU usage DoS (oCERT-2011-003)

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

Python anteriores a v2.6.8, v2.7.x anteriores a v2.7.3, 3.x anteriores a v3.1.5, y v3.2.x anteriores a v3.2.3 procesa los valores hash sin restringir la disponibilidad para provocar colisiones predecibles, lo que permite a atacantes dependiendo del contexto provocar una denegación de servicio (consumo de CPU) a través de una entrada manipulada sobre una aplicación que mantiene una tabla hash.

*Credits: N/A

CVSS Scores

NISTv2 5.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2012-02-14 CVE Reserved
2012-06-18 CVE Published
2023-03-07 EPSS Updated
2024-08-06 CVE Updated
2024-08-06 First Exploit
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-310: Cryptographic Issues

CAPEC

References (19)

URL	Tag	Source
http://mail.python.org/pipermail/python-dev/2011-December/115116.html	Mailing List
http://mail.python.org/pipermail/python-dev/2012-January/115892.html	Mailing List
http://secunia.com/advisories/50858	Third Party Advisory
http://secunia.com/advisories/51087	Third Party Advisory
http://secunia.com/advisories/51089	Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/03/10/3	Mailing List

URL	Date	SRC
http://bugs.python.org/issue13703	2024-08-06

URL	Date	SRC
http://python.org/download/releases/2.6.8	2019-10-25
http://python.org/download/releases/2.7.3	2019-10-25
http://python.org/download/releases/3.1.5	2019-10-25
http://python.org/download/releases/3.2.3	2019-10-25

URL	Date	SRC
http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html	2019-10-25
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html	2019-10-25
http://www.ubuntu.com/usn/USN-1592-1	2019-10-25
http://www.ubuntu.com/usn/USN-1596-1	2019-10-25
http://www.ubuntu.com/usn/USN-1615-1	2019-10-25
http://www.ubuntu.com/usn/USN-1616-1	2019-10-25
https://bugzilla.redhat.com/show_bug.cgi?id=750555	2012-06-18
https://access.redhat.com/security/cve/CVE-2012-1150	2012-06-18

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				<= 2.6.7 Search vendor "Python" for product "Python" and version " <= 2.6.7"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				0.9.0 Search vendor "Python" for product "Python" and version "0.9.0"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				0.9.1 Search vendor "Python" for product "Python" and version "0.9.1"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				1.2 Search vendor "Python" for product "Python" and version "1.2"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				1.3 Search vendor "Python" for product "Python" and version "1.3"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				1.5.2 Search vendor "Python" for product "Python" and version "1.5.2"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				1.6 Search vendor "Python" for product "Python" and version "1.6"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				1.6.1 Search vendor "Python" for product "Python" and version "1.6.1"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.0 Search vendor "Python" for product "Python" and version "2.0"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.0.1 Search vendor "Python" for product "Python" and version "2.0.1"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.1 Search vendor "Python" for product "Python" and version "2.1"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.1.1 Search vendor "Python" for product "Python" and version "2.1.1"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.1.2 Search vendor "Python" for product "Python" and version "2.1.2"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.1.3 Search vendor "Python" for product "Python" and version "2.1.3"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.2 Search vendor "Python" for product "Python" and version "2.2"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.2.1 Search vendor "Python" for product "Python" and version "2.2.1"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.2.2 Search vendor "Python" for product "Python" and version "2.2.2"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.2.3 Search vendor "Python" for product "Python" and version "2.2.3"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.3.1 Search vendor "Python" for product "Python" and version "2.3.1"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.3.2 Search vendor "Python" for product "Python" and version "2.3.2"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.3.3 Search vendor "Python" for product "Python" and version "2.3.3"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.3.4 Search vendor "Python" for product "Python" and version "2.3.4"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.3.5 Search vendor "Python" for product "Python" and version "2.3.5"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.3.7 Search vendor "Python" for product "Python" and version "2.3.7"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.4.1 Search vendor "Python" for product "Python" and version "2.4.1"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.4.2 Search vendor "Python" for product "Python" and version "2.4.2"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.4.3 Search vendor "Python" for product "Python" and version "2.4.3"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.4.4 Search vendor "Python" for product "Python" and version "2.4.4"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.4.6 Search vendor "Python" for product "Python" and version "2.4.6"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.5.1 Search vendor "Python" for product "Python" and version "2.5.1"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.5.2 Search vendor "Python" for product "Python" and version "2.5.2"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.5.3 Search vendor "Python" for product "Python" and version "2.5.3"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.5.4 Search vendor "Python" for product "Python" and version "2.5.4"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.5.6 Search vendor "Python" for product "Python" and version "2.5.6"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.5.150 Search vendor "Python" for product "Python" and version "2.5.150"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.6.1 Search vendor "Python" for product "Python" and version "2.6.1"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.6.2 Search vendor "Python" for product "Python" and version "2.6.2"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.6.3 Search vendor "Python" for product "Python" and version "2.6.3"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.6.4 Search vendor "Python" for product "Python" and version "2.6.4"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.6.5 Search vendor "Python" for product "Python" and version "2.6.5"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.6.6 Search vendor "Python" for product "Python" and version "2.6.6"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.6.2150 Search vendor "Python" for product "Python" and version "2.6.2150"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.6.6150 Search vendor "Python" for product "Python" and version "2.6.6150"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.7.1 Search vendor "Python" for product "Python" and version "2.7.1"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.7.1 Search vendor "Python" for product "Python" and version "2.7.1"		rc1		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.7.2 Search vendor "Python" for product "Python" and version "2.7.2"		rc1		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.7.1150 Search vendor "Python" for product "Python" and version "2.7.1150"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				2.7.2150 Search vendor "Python" for product "Python" and version "2.7.2150"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				3.0 Search vendor "Python" for product "Python" and version "3.0"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				3.0.1 Search vendor "Python" for product "Python" and version "3.0.1"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				3.1 Search vendor "Python" for product "Python" and version "3.1"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				3.1.1 Search vendor "Python" for product "Python" and version "3.1.1"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				3.1.2 Search vendor "Python" for product "Python" and version "3.1.2"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				3.1.3 Search vendor "Python" for product "Python" and version "3.1.3"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				3.1.4 Search vendor "Python" for product "Python" and version "3.1.4"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				3.2 Search vendor "Python" for product "Python" and version "3.2"		-		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				3.2 Search vendor "Python" for product "Python" and version "3.2"		alpha		Affected
Python Search vendor "Python"		Python Search vendor "Python" for product "Python"				3.2.2150 Search vendor "Python" for product "Python" and version "3.2.2150"		-		Affected