Oracle Java SE and OpenJDK Hash Collision Vulnerability

CVE-2012-5373

Summary

The vulnerability in Oracle Java SE and OpenJDK arises from the improper handling of hash values, which can trigger predictable hash collisions. This allows attackers to craft specific input that consumes significant CPU resources, leading to a denial of service condition for applications utilizing hash tables. A notable example includes the exploitation of the MurmurHash3 algorithm via a multicollision attack, enabling an attacker to disrupt service effectively. The issue necessitates prompt attention and mitigation strategies to prevent potential service disruption.

References