OCaml Xml-Light Library before r234 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via unspecified vectors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ocaml_xml-light_library | Nicolas_cannasse | * | r233 (including) |