Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions.
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Link | Tags |
---|---|
http://www.openwall.com/lists/oss-security/2013/02/08/2 | third party advisory mailing list |
https://security-tracker.debian.org/tracker/CVE-2012-6125 | third party advisory |
https://access.redhat.com/security/cve/cve-2012-6125 | broken link |
https://lists.nongnu.org/archive/html/chicken-hackers/2012-01/msg00002.html | patch mailing list third party advisory |
https://lists.nongnu.org/archive/html/chicken-hackers/2012-01/msg00020.html | patch mailing list third party advisory |