CVE-2012-5370: JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably,...

Security readout for executives and security teams

CVE-2012-5370 is a denial-of-service issue in JRuby. Crafted input can predictably create hash collisions, causing excessive CPU use in applications that store attacker-controlled data in hash tables. The sources do not provide CVSS scoring or complete affected version details. Exposure is most likely in JRuby applications that accept untrusted, attacker-controlled input and place it into hash-table-backed structures. The provided affected-product data is incomplete and does not name exact JRuby versions or distributions. Treat as a service-availability risk, not a data-theft issue. Prioritize internet-facing or business-critical JRuby services first, especially where CPU exhaustion could disrupt customer-facing operations. Mitigation focus: Check RHSA-2013:0533 and JRuby vendor guidance for fixed package details.; Upgrade JRuby packages where vendor documentation confirms a correction.; Reduce exposure of untrusted input paths until remediation is confirmed..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.