Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without…
Priority HIGH 74CWE-20Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · Complete
- Fix status
- Partial Red Hat: 6 without a fix
Attack profile from CVSS 2.0 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-400.
Summary
Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. NOTE: this might overlap CVE-2011-4461.
Why it matters now
EPSS 0.80569 99th percentileScored 2026-11-07
Fix Partial org.apache.geronimo:geronimo (Maven): 2.2.1Red Hat: 6 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
| — | org.apache.geronimo:geronimo (Maven) | before 2.2.1 | 2.2.1 | Patch available | GHSA-v3h8-rw48-h4gr |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
- org.apache.geronimo:geronimo (Maven) Vendor— Affected before 2.2.1 Fixed in 2.2.1 Patch available GHSA-v3h8-rw48-h4gr
CPE configurations NVD · 17
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:apache:geronimo:*:*:*:*:*:*:*:* | up to 2.2.1 | Vulnerable | Apache |
| cpe:2.3:a:apache:geronimo:1.0:*:*:*:*:*:*:* | 1.0 | Vulnerable | Apache |
| cpe:2.3:a:apache:geronimo:1.1:*:*:*:*:*:*:* | 1.1 | Vulnerable | Apache |
| cpe:2.3:a:apache:geronimo:1.1.1:*:*:*:*:*:*:* | 1.1.1 | Vulnerable | Apache |
| cpe:2.3:a:apache:geronimo:1.2:*:*:*:*:*:*:* | 1.2 | Vulnerable | Apache |
| cpe:2.3:a:apache:geronimo:2.0.1:*:*:*:*:*:*:* | 2.0.1 | Vulnerable | Apache |
| cpe:2.3:a:apache:geronimo:2.0.2:*:*:*:*:*:*:* | 2.0.2 | Vulnerable | Apache |
| cpe:2.3:a:apache:geronimo:2.1:*:*:*:*:*:*:* | 2.1 | Vulnerable | Apache |
| cpe:2.3:a:apache:geronimo:2.1.1:*:*:*:*:*:*:* | 2.1.1 | Vulnerable | Apache |
| cpe:2.3:a:apache:geronimo:2.1.2:*:*:*:*:*:*:* | 2.1.2 | Vulnerable | Apache |
- cpe:2.3:a:apache:geronimo:*:*:*:*:*:*:*:* Versions up to 2.2.1 Vulnerable ·Apache
- cpe:2.3:a:apache:geronimo:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Apache
- cpe:2.3:a:apache:geronimo:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Apache
- cpe:2.3:a:apache:geronimo:1.1.1:*:*:*:*:*:*:* Versions 1.1.1 Vulnerable ·Apache
- cpe:2.3:a:apache:geronimo:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Apache
- cpe:2.3:a:apache:geronimo:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·Apache
- cpe:2.3:a:apache:geronimo:2.0.2:*:*:*:*:*:*:* Versions 2.0.2 Vulnerable ·Apache
- cpe:2.3:a:apache:geronimo:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Apache
- cpe:2.3:a:apache:geronimo:2.1.1:*:*:*:*:*:*:* Versions 2.1.1 Vulnerable ·Apache
- cpe:2.3:a:apache:geronimo:2.1.2:*:*:*:*:*:*:* Versions 2.1.2 Vulnerable ·Apache
Show 7 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:apache:geronimo:2.1.3:*:*:*:*:*:*:* | 2.1.3 | Vulnerable | Apache |
| cpe:2.3:a:apache:geronimo:2.1.4:*:*:*:*:*:*:* | 2.1.4 | Vulnerable | Apache |
| cpe:2.3:a:apache:geronimo:2.1.5:*:*:*:*:*:*:* | 2.1.5 | Vulnerable | Apache |
| cpe:2.3:a:apache:geronimo:2.1.6:*:*:*:*:*:*:* | 2.1.6 | Vulnerable | Apache |
| cpe:2.3:a:apache:geronimo:2.1.7:*:*:*:*:*:*:* | 2.1.7 | Vulnerable | Apache |
| cpe:2.3:a:apache:geronimo:2.1.8:*:*:*:*:*:*:* | 2.1.8 | Vulnerable | Apache |
| cpe:2.3:a:apache:geronimo:2.2:*:*:*:*:*:*:* | 2.2 | Vulnerable | Apache |
- cpe:2.3:a:apache:geronimo:2.1.3:*:*:*:*:*:*:* Versions 2.1.3 Vulnerable ·Apache
- cpe:2.3:a:apache:geronimo:2.1.4:*:*:*:*:*:*:* Versions 2.1.4 Vulnerable ·Apache
- cpe:2.3:a:apache:geronimo:2.1.5:*:*:*:*:*:*:* Versions 2.1.5 Vulnerable ·Apache
- cpe:2.3:a:apache:geronimo:2.1.6:*:*:*:*:*:*:* Versions 2.1.6 Vulnerable ·Apache
- cpe:2.3:a:apache:geronimo:2.1.7:*:*:*:*:*:*:* Versions 2.1.7 Vulnerable ·Apache
- cpe:2.3:a:apache:geronimo:2.1.8:*:*:*:*:*:*:* Versions 2.1.8 Vulnerable ·Apache
- cpe:2.3:a:apache:geronimo:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·Apache
Remediation
- Fix · GHSA-v3h8-rw48-h4gr org.apache.geronimo:geronimo (Maven) Fixed in 2.2.1 Advisory →
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat JBoss A-MQ 6 | Affected | No fix planned: Out of support scope |
| Red Hat JBoss Enterprise Application Platform 6 | Affected | No fix planned: Out of support scope |
| Red Hat JBoss Fuse 6 | Affected | No fix planned: Out of support scope |
| Red Hat JBoss SOA Platform 5 | Affected | No fix planned: Out of support scope |
| Red Hat OpenStack Platform 10 (Newton) | Affected | No fix planned: Out of support scope |
| Red Hat OpenStack Platform 13 (Queens) | Affected | No fix planned: Will not fix |
Not affected: 6 products
- Red Hat AMQ Broker 7
- Red Hat Fuse 7
- Red Hat JBoss Enterprise Application Platform 7
- Red Hat JBoss Enterprise Application Platform Continuous Delivery
- Red Hat JBoss Web Server 3
- Red Hat JBoss Web Server 5
Timeline
- 2026-10-02 Threatist record created from CVE-2011-5034
- 2026-10-03 Alias added: GHSA-v3h8-rw48-h4gr
References
Other 29
- https://github.com/FireFart/HashCollision-DOS-POC/blob/master/HashtablePOC.py
- http://www.nruns.com/_downloads/advisory28122011.pdf
- 20111228 n.runs-SA-2011.004 - web programming languages and platforms - DoS through hash table
- http://www.ocert.org/advisories/ocert-2011-003.html
- [axis-java-dev] 20210622 [jira] [Updated] (AXIS2-6004) AXIS 2 1.7.9 geronimo jars with vulnerability CVE-2011-5034
- [axis-java-dev] 20210622 [jira] [Created] (AXIS2-6004) AXIS 2 1.7.9 geronimo jars with vulnerability CVE-2011-5034
- [axis-java-dev] 20210623 [jira] [Resolved] (AXIS2-6004) AXIS 2 1.7.9 geronimo jars with vulnerability CVE-2011-5034
- [karaf-issues] 20210723 [jira] [Assigned] (KARAF-7227) Upgrade geronimo artifacts to mitigate CVE-2011-5034
- [karaf-issues] 20210723 [jira] [Commented] (KARAF-7227) Upgrade geronimo artifacts to mitigate CVE-2011-5034
- [karaf-issues] 20210723 [jira] [Created] (KARAF-7227) Upgrade geronimo artifacts to mitigate CVE-2011-5034
- [karaf-issues] 20210723 [jira] [Comment Edited] (KARAF-7227) Upgrade geronimo artifacts to mitigate CVE-2011-5034
- [karaf-issues] 20210726 [jira] [Resolved] (KARAF-7227) Upgrade geronimo artifacts to mitigate CVE-2011-5034
- [geronimo-dev] 20210727 [jira] [Created] (GERONIMO-6814) Improve Geronimo specs to mitigate CVE-2011-5034
- [geronimo-dev] 20210727 [jira] [Commented] (GERONIMO-6814) Improve Geronimo specs to mitigate CVE-2011-5034
- [geronimo-dev] 20210728 [jira] [Commented] (GERONIMO-6814) Improve Geronimo specs to mitigate CVE-2011-5034
- https://github.com/apache/geronimo
- https://lists.apache.org/thread.html/r20957aa5962a48328f199e2373f408aeeae601a45dd5275a195e2b6e@%3Cjava-dev.axis.apache.org%3E
- https://lists.apache.org/thread.html/r360b70489bad65286b49ceb5303a849d2a7ec7d1292774a7259579e1@%3Cissues.karaf.apache.org%3E
- https://lists.apache.org/thread.html/r3c541f019b74902e8e61d73e40ecc2837dfce1b744ad5546919b993c@%3Cissues.karaf.apache.org%3E
- https://lists.apache.org/thread.html/r4fe6b5ff1d48e23337304fd5ac983d89328aecbd1fa198cfc966fbd7@%3Cdev.geronimo.apache.org%3E
- https://lists.apache.org/thread.html/r653f633aa7b6ccbb8c338dbfcea7a00e4ae9d6f3e064a03cab8dc20d@%3Cjava-dev.axis.apache.org%3E
- https://lists.apache.org/thread.html/r67747af92035942c9c413bd8394acbb8a1ace5833c0177014c825bc2@%3Cissues.karaf.apache.org%3E
- https://lists.apache.org/thread.html/r8dc1a0ae0e0cf9d2494b8cbd66562f99331c4cf635e7781850a9b9ba@%3Cjava-dev.axis.apache.org%3E
- https://lists.apache.org/thread.html/ra10015f6f3c3c88b7d813383554e87c06347fe163487148669189b8e@%3Cdev.geronimo.apache.org%3E
- https://lists.apache.org/thread.html/ra1fe29f6399b68980f914d8613dee7f67d62a1a97722fe9cd56f4f5f@%3Cdev.geronimo.apache.org%3E
- https://lists.apache.org/thread.html/rb0e85243d7268f1d7a1edb5e6c7df885dbd300acabaaf4cb0e880518@%3Cissues.karaf.apache.org%3E
- https://lists.apache.org/thread.html/rdd67ea3e489134f653349fc2cb09828ac8462aa61dd776b505a3297a@%3Cissues.karaf.apache.org%3E
- https://web.archive.org/web/20120105151644/http://www.nruns.com/_downloads/advisory28122011.pdf
- https://web.archive.org/web/20130213132312/http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html
More Apache Geronimo vulnerabilities
- TI-2008-05234 Multiple directory traversal vulnerabilities in the web administration console in Apache… CVSS 2.0HIGH 9.4
- TI-2013-01564 The JMX Remoting functionality in Apache Geronimo 3.x before 3.0.1, as used in IBM… CVSS 2.0HIGH 10.0
- TI-2007-04403 The login method in LoginModule implementations in Apache Geronimo 2.0 does not throw… CVSS 2.0HIGH 10.0
- TI-2006-00245 Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote… CVSS 2.0MEDIUM 4.3
- TI-2009-00039 Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration… CVSS 2.0MEDIUM 6.8
- TI-2007-05563 SQLLoginModule in Apache Geronimo 2.0 through 2.1 does not throw an exception for a… CVSS 2.0HIGH 7.5
Sources
- CVE-2011-5034 · CVE Program
- CVE-2011-5034 · NVD
- FIRST EPSS
- GHSA-v3h8-rw48-h4gr · GitHub Advisory Database · CC BY 4.0
- CVE-2011-5034 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences