RSS   Vulnerabilities for 'Ada web services'   RSS

2012-02-08
 
CVE-2012-1035

CWE-20
 

 
AdaCore Ada Web Services (AWS) before 2.10.2 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.

 


Copyright 2017, cxsecurity.com