Lucene search
HistoryNov 09, 2015 - 6:59 p.m.
CVE-2015-8001
mediawiki
api
cve-2015-8001
denial of service
security vulnerability
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:N/A:P
8.5 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
64.9%
The chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not restrict the uploaded data to the claimed file size, which allows remote authenticated users to cause a denial of service via a chunk that exceeds the file size.
Affected configurations
Node
mediawikimediawikiRange≤1.23.10
ORmediawikimediawikiMatch1.24.0
ORmediawikimediawikiMatch1.24.1
ORmediawikimediawikiMatch1.24.2
ORmediawikimediawikiMatch1.24.3
ORmediawikimediawikiMatch1.25.0
ORmediawikimediawikiMatch1.25.1
ORmediawikimediawikiMatch1.25.2
Related
nvd
nvd
CVE-2015-8001
2015-11-09 18:59:00
debiancve
debiancve
CVE-2015-8001
2015-11-09 18:59:00
ubuntucve
ubuntucve
CVE-2015-8001
2015-11-09 00:00:00
prion
prion
Design/Logic Flaw
2015-11-09 18:59:00
cvelist
cvelist
CVE-2015-8001
2015-11-09 18:00:00
mageia
mageia
Updated mediawiki packages fix security vulnerabilities
2015-11-02 23:21:29
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0421)
2015-11-08 00:00:00
MediaWiki Multiple Vulnerabilities (Nov 2015) - Windows
2015-11-25 00:00:00
MediaWiki Multiple Vulnerabilities (Nov 2015) - Linux
2015-11-25 00:00:00
nessus
nessus
MediaWiki < 1.23.11 / 1.24.4 / 1.25.3 Multiple Vulnerabilities
2016-08-05 00:00:00
Fedora 23 : mediawiki-1.25.3-1.fc23 (2015-ec6d598d3d)
2016-03-04 00:00:00
Fedora 22 : mediawiki-1.25.3-1.fc22 (2015-24fe8b66c9)
2016-03-04 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: mediawiki-1.25.3-1.fc22
2015-11-05 23:27:59
[SECURITY] Fedora 21 Update: mediawiki-1.24.4-1.fc21
2015-11-05 21:50:58
[SECURITY] Fedora 23 Update: mediawiki-1.25.3-1.fc23
2015-11-05 22:26:54
freebsd
freebsd
mediawiki -- multiple vulnerabilities
2015-10-16 00:00:00
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:N/A:P
8.5 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
64.9%
Related for CVE-2015-8001