CVE-2012-2328: Opensuse

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

internal/cimxml/sax/NodeFactory.java in Standards-Based Linux Instrumentation for Manageability (SBLIM) Common Information Model (CIM) Client (aka sblim-cim-client2) before 2.1.12 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML file.

Affected products

• Opensuse Opensuse: version 11.4 only; version 12.1 only; version 12.2 only
• Standards Based Linux Instrumentation Project Standards-Based Linux Common Information Model Client: up to and including 2.1.11

Published 2014-02-10. Last modified 2026-06-16.