Denial of Service Vulnerability in Apache Portable Runtime Library

CVE-2012-0840

Summary

The vulnerability exists in the tables/apr_hash.c component of the Apache Portable Runtime (APR) library up to version 1.4.5. It allows attackers to exploit predictable hash collision vulnerabilities, which can lead to excessive CPU consumption during hash table maintenance. By sending specially crafted input, an attacker can cause applications that rely on APR to become unresponsive, resulting in a denial of service. This poses a significant threat to system availability and can impact any application using APR, making it essential for administrators to apply necessary updates or patches to mitigate this risk.

References