OCaml Xml-Light Library before r234 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via unspecified vectors.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2.2-17", "binary_name": "libxml-light-ocaml" }, { "binary_version": "2.2-17", "binary_name": "libxml-light-ocaml-dev" } ] }