{ "schema_version": "1.4.0", "id": "GHSA-j3v8-j93f-cg82", "modified": "2025-04-11T03:55:17Z", "published": "2022-05-17T05:34:20Z", "aliases": [ "CVE-2012-1035" ], "details": "AdaCore Ada Web Services (AWS) before 2.10.2 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1035" }, { "type": "WEB", "url": "http://archives.neohapsis.com/archives/bugtraq/2012-01/0169.html" }, { "type": "WEB", "url": "http://www.adacore.com/2012/01/27/security-advisory-sa-2012-l119-003-hash-collisions-in-aws" }, { "type": "WEB", "url": "http://www.nruns.com/_downloads/advisory28122011.pdf" }, { "type": "WEB", "url": "http://www.ocert.org/advisories/ocert-2011-003.html" } ], "database_specific": { "cwe_ids": [ "CWE-20" ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2012-02-08T21:55:00Z" } }