Improper input validation in Apache Portable_runtime

CVE-2012-0840

tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.433 (98.6th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References