---
engine: ruby
cve: 2012-5371
osvdb: 87280
url: http://www.osvdb.org/show/osvdb/87280
title: Ruby String Key Object Hashing Hash Collision Form Parameter Parsing Remote
  DoS
date: 2012-11-10
description: |
  Ruby contains a flaw that may allow a remote denial of service. The issue
  is triggered when an error occurs during the parsing of the sequence to create a
  hash object, by using string keys. This may result in a hash collision, causing
  a denial of service in the program.
cvss_v2: 5.0
patched_versions:
  - ~> 1.9.3.327
  - ">= 2.0.0"