CVE-2012-2328 Denial of service in n/a
Attackers can cause denial of service via CPU consumption by submitting crafted XML files to the SBLIM CIM Client library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2012-2328?
CVE-2012-2328 is a medium-severity denial of service vulnerability in Opensuse Opensuse, published on 10 Feb 2014. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
internal/cimxml/sax/NodeFactory.java in Standards-Based Linux Instrumentation for Manageability (SBLIM) Common Information Model (CIM) Client (aka sblim-cim-client2) before 2.1.12 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML file.
Weakness: CWE-310
Which versions are affected by CVE-2012-2328?
It affects 2 products.
Linux distribution packages (6)
sblim-cim-client2 Red Hat:enterprise_linux:6::server | All versions | 0:2.1.3-2.el6 |
sblim-cim-client2-javadoc Red Hat:enterprise_linux:6::server | All versions | 0:2.1.3-2.el6 |
sblim-cim-client2-manual Red Hat:enterprise_linux:6::server | All versions | 0:2.1.3-2.el6 |
sblim-cim-client2 Red Hat:enterprise_linux:6::workstation | All versions | 0:2.1.3-2.el6 |
sblim-cim-client2-javadoc Red Hat:enterprise_linux:6::workstation | All versions | 0:2.1.3-2.el6 |
sblim-cim-client2-manual Red Hat:enterprise_linux:6::workstation | All versions | 0:2.1.3-2.el6 |
Products include Opensuse Opensuse, Standards Based Linux Instrumentation Project Standards-Based Linux Common Information Model Client.
How do I fix CVE-2012-2328?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2012-2328 being exploited?
There is no known exploitation of CVE-2012-2328 in the wild and no public exploit code.
Other vulnerabilities in Opensuse Opensuse
Sources
Also known as GHSA-6qpq-58gh-897g, RHSA-2012:0987.