oss-security - CVE request: apr - Hash DoS vulnerability

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Wed, 8 Feb 2012 18:26:57 +0100
From: Moritz Muehlenhoff <jmm@...ian.org>
To: oss-security@...ts.openwall.com
Subject: CVE request: apr - Hash DoS vulnerability

Hi,
APR (Apache Portable Runtime) is affected by the hash collision DoS 
class, please assign a CVE ID:

The upstream discussion can be found here:
http://www.mail-archive.com/dev%40apr.apache.org/msg24439.html

Cheers,
        Moritz

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.