CVE-2012-3514 | Vulnerability Database | Aqua Security

OCaml Xml-Light Library before r234 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via unspecified vectors.

Affected Software

Name	Vendor	Start Version	End Version
Ocaml_xml-light_library	Nicolas_cannasse	*	r233 (including)
Xml-light	Ubuntu	artful	*
Xml-light	Ubuntu	hardy	*
Xml-light	Ubuntu	lucid	*
Xml-light	Ubuntu	natty	*
Xml-light	Ubuntu	oneiric	*
Xml-light	Ubuntu	precise	*
Xml-light	Ubuntu	quantal	*
Xml-light	Ubuntu	raring	*
Xml-light	Ubuntu	saucy	*
Xml-light	Ubuntu	upstream	*
Xml-light	Ubuntu	utopic	*
Xml-light	Ubuntu	vivid	*
Xml-light	Ubuntu	wily	*
Xml-light	Ubuntu	yakkety	*
Xml-light	Ubuntu	zesty	*

References

http://secunia.com/advisories/50311
http://www.mandriva.com/security/advisories?name=MDVSA-2013:107
http://www.openwall.com/lists/oss-security/2012/08/21/2
http://www.securityfocus.com/bid/55114
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0266

NVD	https://nvd.nist.gov/vuln/detail/CVE-2012-3514
CWE	https://cwe.mitre.org/data/definitions/310.html