CVE:CVE-2012-0840
CNNVD:CNNVD-201202-193
Apache Portable Runtime (APR) 库至1.4.5版本的tables/apr_hash.c中存在漏洞，该漏洞源于计算哈希值时未限制触发哈希碰撞可预见能力。攻击者可利用该漏洞借助特制的保持哈希表的应用程序的输入导致拒绝服务（CPU消耗）。
solution:Upgrade apache portable_runtime to a higher version than 1.4.5,0.9.1,0.9.2,0.9.2-dev,0.9.3,0.9.3-dev,0.9.4,0.9.5,0.9.6,0.9.7,0.9.7-dev,0.9.8,0.9.9,0.9.16-dev,1.3.0,1.3.1,1.3.2,1.3.3,1.3.4,1.3.4-dev,1.3.5,1.3.6,1.3.6-dev,1.3.7,1.3.8,1.3.9,1.3.10,1.3.11,1.3.12,1.3.13,1.4.0,1.4.1,1.4.2,1.4.3,1.4.4,and avoid the version (,1.4.5],0.9.1,0.9.2,0.9.2-dev,0.9.3,0.9.3-dev,0.9.4,0.9.5,0.9.6,0.9.7,0.9.7-dev,0.9.8,0.9.9,0.9.16-dev,1.3.0,1.3.1,1.3.2,1.3.3,1.3.4,1.3.4-dev,1.3.5,1.3.6,1.3.6-dev,1.3.7,1.3.8,1.3.9,1.3.10,1.3.11,1.3.12,1.3.13,1.4.0,1.4.1,1.4.2,1.4.3,1.4.4