CVE-2014-9016
CVE-2014-9016
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
The password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes (aka phpass) module 6.x-2.x before 6.x-2.1 for Drupal allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted request.
EPSS 79,1% · Código de explotación público
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
Fuentes originales
- https://www.drupal.org/node/2378375
- http://www.openwall.com/lists/oss-security/2014/11/20/3
- https://www.drupal.org/SA-CORE-2014-006
- http://www.openwall.com/lists/oss-security/2014/11/20/21
- http://secunia.com/advisories/59164
- https://www.drupal.org/node/2378367
- http://www.openwall.com/lists/oss-security/2014/11/21/1
- http://secunia.com/advisories/59814
- http://www.debian.org/security/2014/dsa-3075
- https://nvd.nist.gov/vuln/detail/CVE-2014-9016