jetlib.sec » Bugtraq » AdaCore Security Advisory SA-2012-L119-003 Hash collisions in AWS

Feeds

132963 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Bugtraq

• January 27, 2012
• 

  AdaCore Security Advisory SA-2012-L119-003 Hash collisions in AWS

  Posted: January 27th, 2012, 10:21am PST

  Tags:   

  Posted by Thomas Quinot on Jan 27

  AdaCore Security Advisory
  =========================
  
  SA-2012-L119-003 Hash collisions in AWS
  
  Problem: Impacted versions of AWS store key/value pairs from submitted
  form data in hash tables using a hash function that has
  predictable collisions. As a result, a single specially crafted
  HTTP request can cause the server to use hours of CPU time,
  thus causing a denial of service.
  
  Impact:...