Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2011-5034

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-v3h8-rw48-h4gr

Apache Geronimo Hash Collisions Cause DoS Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. NOTE: this might overlap CVE-2011-4461.

gitlab/maven/org.apache.geronimo/geronimo/CVE-2011-5034

Improper Input Validation Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. NOTE: this might overlap CVE-2011-4461.