VIR Vulnerability Intelligence Relay

CVE-2012-0039

high
Published 2012-01-14 · Modified 2026-04-29
CVSS v3
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2
5.0
VIR risk
7.5

Description

GLib 2.31.8 and earlier, when the g_str_hash function is used, computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table. NOTE: this issue may be disputed by the vendor; the existence of the g_str_hash function is not a vulnerability in the library, because callers of g_hash_table_new and g_hash_table_new_full can specify an arbitrary hash function that is appropriate for the application.

Predictions

Exploit likelihood
83%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2012-0039

OS impact
OSVersionStatusFixed in
debian debianbookwormaffected
debian debianbullseyeaffected
debian debianforkyaffected
debian debiansidaffected
debian debiantrixieaffected

Application impact
VendorProductVersionsFixed
gnomeglib2.3.5
gnomeglib{"endIncluding":"2.31.8"}
gnomeglib1.1.12
gnomeglib1.1.12-1
gnomeglib1.1.15
gnomeglib1.2.0
gnomeglib1.2.1
gnomeglib1.2.2
gnomeglib1.2.3
gnomeglib1.2.4
gnomeglib1.2.5
gnomeglib1.2.6
gnomeglib1.2.7
gnomeglib1.2.8
gnomeglib1.2.9
gnomeglib1.2.10
gnomeglib1.3.9
gnomeglib1.3.10
gnomeglib1.3.11
gnomeglib1.3.12
gnomeglib1.3.13
gnomeglib1.3.14
gnomeglib1.3.15
gnomeglib2.0
gnomeglib2.0.0
gnomeglib2.0.1
gnomeglib2.0.2
gnomeglib2.0.3
gnomeglib2.0.4
gnomeglib2.0.5
gnomeglib2.0.6
gnomeglib2.0.7
gnomeglib2.1.0
gnomeglib2.1.1
gnomeglib2.1.2
gnomeglib2.1.3
gnomeglib2.1.4
gnomeglib2.1.5
gnomeglib2.2.0
gnomeglib2.2.1
gnomeglib2.2.2
gnomeglib2.2.3
gnomeglib2.3.0
gnomeglib2.3.1
gnomeglib2.3.2
gnomeglib2.3.3
gnomeglib2.3.4
gnomeglib2.3.6
gnomeglib2.4.0
gnomeglib2.4.1
gnomeglib2.4.2
gnomeglib2.4.3
gnomeglib2.4.4
gnomeglib2.4.5
gnomeglib2.4.6
gnomeglib2.4.7
gnomeglib2.4.8
gnomeglib2.5.0
gnomeglib2.5.1
gnomeglib2.5.2
gnomeglib2.5.3
gnomeglib2.5.4
gnomeglib2.5.5
gnomeglib2.5.6
gnomeglib2.5.7
gnomeglib2.6.0
gnomeglib2.6.1
gnomeglib2.6.2
gnomeglib2.6.3
gnomeglib2.6.4
gnomeglib2.6.5
gnomeglib2.6.6
gnomeglib2.7.0
gnomeglib2.7.1
gnomeglib2.7.2
gnomeglib2.7.3
gnomeglib2.7.4
gnomeglib2.7.5
gnomeglib2.7.6
gnomeglib2.7.7
gnomeglib2.8.0
gnomeglib2.8.1
gnomeglib2.8.2
gnomeglib2.8.3
gnomeglib2.8.4
gnomeglib2.8.5
gnomeglib2.8.6
gnomeglib2.9.0
gnomeglib2.9.1
gnomeglib2.9.2
gnomeglib2.9.3
gnomeglib2.9.4
gnomeglib2.9.5
gnomeglib2.9.6
gnomeglib2.10.0
gnomeglib2.10.1
gnomeglib2.10.2
gnomeglib2.10.3
gnomeglib2.11.0
gnomeglib2.11.1
gnomeglib2.11.2
gnomeglib2.11.3
gnomeglib2.11.4
gnomeglib2.12.0
gnomeglib2.12.1
gnomeglib2.12.2
gnomeglib2.12.3
gnomeglib2.12.4
gnomeglib2.12.5
gnomeglib2.12.6
gnomeglib2.12.7
gnomeglib2.12.8
gnomeglib2.12.9
gnomeglib2.12.10
gnomeglib2.12.11
gnomeglib2.12.12
gnomeglib2.12.13
gnomeglib2.13.0
gnomeglib2.13.1
gnomeglib2.13.2
gnomeglib2.13.3
gnomeglib2.13.4
gnomeglib2.13.5
gnomeglib2.13.6
gnomeglib2.13.7
gnomeglib2.14.0
gnomeglib2.14.1
gnomeglib2.14.2
gnomeglib2.14.3
gnomeglib2.14.4
gnomeglib2.14.5
gnomeglib2.14.6
gnomeglib2.15.0
gnomeglib2.15.1
gnomeglib2.15.2
gnomeglib2.15.3
gnomeglib2.15.4
gnomeglib2.15.5
gnomeglib2.15.6
gnomeglib2.16.0
gnomeglib2.16.1
gnomeglib2.16.2
gnomeglib2.16.3
gnomeglib2.16.4
gnomeglib2.16.5
gnomeglib2.16.6
gnomeglib2.17.0
gnomeglib2.17.1
gnomeglib2.17.2
gnomeglib2.17.3
gnomeglib2.17.4
gnomeglib2.17.5
gnomeglib2.17.6
gnomeglib2.17.7
gnomeglib2.18.0
gnomeglib2.18.1
gnomeglib2.18.2
gnomeglib2.18.3
gnomeglib2.18.4
gnomeglib2.19.0
gnomeglib2.19.1
gnomeglib2.19.2
gnomeglib2.19.3
gnomeglib2.19.4
gnomeglib2.19.5
gnomeglib2.19.6
gnomeglib2.19.7
gnomeglib2.19.8
gnomeglib2.19.9
gnomeglib2.19.10
gnomeglib2.20.0
gnomeglib2.20.1
gnomeglib2.20.2
gnomeglib2.20.3
gnomeglib2.20.4
gnomeglib2.20.5
gnomeglib2.21.0
gnomeglib2.21.1
gnomeglib2.21.2
gnomeglib2.21.3
gnomeglib2.21.4
gnomeglib2.21.5
gnomeglib2.21.6
gnomeglib2.22.0
gnomeglib2.22.1
gnomeglib2.22.2
gnomeglib2.22.3
gnomeglib2.22.4
gnomeglib2.22.5
gnomeglib2.23.0
gnomeglib2.23.1
gnomeglib2.23.2
gnomeglib2.23.3
gnomeglib2.23.4
gnomeglib2.23.5
gnomeglib2.23.6
gnomeglib2.24.0
gnomeglib2.24.1
gnomeglib2.24.2
gnomeglib2.25.0

References

CWEs

CWE-310

Verify integrity in audit chain (admin only). AS-IS.