CVE-2012-0785

Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before 1.424.2.1 and 1.400.x before 1.400.0.11 could allow remote attackers to cause a considerable CPU load, aka "the Hash DoS attack."

• CWE-400

• http://www.openwall.com/lists/oss-security/2012/01/20/8Mailing List, Third Party Advisory
• https://access.redhat.com/security/cve/cve-2012-0785Broken Link
• https://jenkins.io/security/advisory/2012-01-12/Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-0785Third Party Advisory
• https://www.cloudbees.com/jenkins-security-advisory-2012-01-12Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/01/20/8Mailing List, Third Party Advisory
• https://access.redhat.com/security/cve/cve-2012-0785Broken Link
• https://jenkins.io/security/advisory/2012-01-12/Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-0785Third Party Advisory
• https://www.cloudbees.com/jenkins-security-advisory-2012-01-12Third Party Advisory

Published

Feb 24, 2020

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-0777The JavaScript API in Adobe Reader and Acrobat 9.x before 9.…
• CVE-2012-0778Buffer overflow in Adobe Flash Professional before CS6 allow…
• CVE-2012-0779Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.2…
• CVE-2012-0780Adobe Illustrator before CS6 allows attackers to execute arb…
• CVE-2012-0781The tidy_diagnose function in PHP 5.3.8 might allow remote a…
• CVE-2012-0782Multiple cross-site scripting (XSS) vulnerabilities in wp-ad…
• CVE-2012-0786The transform_save function in transform.c in Augeas before …
• CVE-2012-0787The clone_file function in transfer.c in Augeas before 1.0.0…
• CVE-2012-0788The PDORow implementation in PHP before 5.3.9 does not prope…
• CVE-2012-0789Memory leak in the timezone functionality in PHP before 5.3.…
• CVE-2012-0790Cross-site scripting (XSS) vulnerability in smokeping_cgi in…
• CVE-2012-0791Multiple cross-site scripting (XSS) vulnerabilities in Horde…