Lucene search
HistoryDec 08, 2014 - 11:59 a.m.
CVE-2014-9218
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
9
Confidence
High
EPSS
0.218
Percentile
96.5%
libraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.7, 4.1.x before 4.1.14.8, and 4.2.x before 4.2.13.1 allows remote attackers to cause a denial of service (resource consumption) via a long password.
Affected configurations
Node
phpmyadminphpmyadminMatch4.0.0
ORphpmyadminphpmyadminMatch4.0.0rc2
ORphpmyadminphpmyadminMatch4.0.0rc3
ORphpmyadminphpmyadminMatch4.0.1
ORphpmyadminphpmyadminMatch4.0.2
ORphpmyadminphpmyadminMatch4.0.3
ORphpmyadminphpmyadminMatch4.0.4
ORphpmyadminphpmyadminMatch4.0.4.1
ORphpmyadminphpmyadminMatch4.0.4.2
ORphpmyadminphpmyadminMatch4.0.5
ORphpmyadminphpmyadminMatch4.0.6
ORphpmyadminphpmyadminMatch4.0.7
ORphpmyadminphpmyadminMatch4.0.8
ORphpmyadminphpmyadminMatch4.0.9
ORphpmyadminphpmyadminMatch4.0.10
ORphpmyadminphpmyadminMatch4.0.10.2
ORphpmyadminphpmyadminMatch4.0.10.5
ORphpmyadminphpmyadminMatch4.1.0
ORphpmyadminphpmyadminMatch4.1.1
ORphpmyadminphpmyadminMatch4.1.2
ORphpmyadminphpmyadminMatch4.1.3
ORphpmyadminphpmyadminMatch4.1.4
ORphpmyadminphpmyadminMatch4.1.5
ORphpmyadminphpmyadminMatch4.1.6
ORphpmyadminphpmyadminMatch4.1.7
ORphpmyadminphpmyadminMatch4.1.8
ORphpmyadminphpmyadminMatch4.1.9
ORphpmyadminphpmyadminMatch4.1.10
ORphpmyadminphpmyadminMatch4.1.11
ORphpmyadminphpmyadminMatch4.1.12
ORphpmyadminphpmyadminMatch4.1.13
ORphpmyadminphpmyadminMatch4.1.14
ORphpmyadminphpmyadminMatch4.1.14.1
ORphpmyadminphpmyadminMatch4.1.14.3
ORphpmyadminphpmyadminMatch4.1.14.6
ORphpmyadminphpmyadminMatch4.2.0
ORphpmyadminphpmyadminMatch4.2.1
ORphpmyadminphpmyadminMatch4.2.2
ORphpmyadminphpmyadminMatch4.2.3
ORphpmyadminphpmyadminMatch4.2.4
ORphpmyadminphpmyadminMatch4.2.5
ORphpmyadminphpmyadminMatch4.2.6
ORphpmyadminphpmyadminMatch4.2.7
ORphpmyadminphpmyadminMatch4.2.7.1
ORphpmyadminphpmyadminMatch4.2.8
ORphpmyadminphpmyadminMatch4.2.8.1
ORphpmyadminphpmyadminMatch4.2.9
ORphpmyadminphpmyadminMatch4.2.9.1
ORphpmyadminphpmyadminMatch4.2.10
ORphpmyadminphpmyadminMatch4.2.10.1
ORphpmyadminphpmyadminMatch4.2.11
ORphpmyadminphpmyadminMatch4.2.12
ORphpmyadminphpmyadminMatch4.2.13
| Vendor | Product | Version | CPE |
|---|---|---|---|
| phpmyadmin | phpmyadmin | 4.0.0 | cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 4.0.0 | cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:rc2:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 4.0.0 | cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:rc3:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 4.0.1 | cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.1:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 4.0.2 | cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.2:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 4.0.3 | cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.3:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 4.0.4 | cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 4.0.4.1 | cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.1:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 4.0.4.2 | cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.2:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 4.0.5 | cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.5:*:*:*:*:*:*:* |
References
www.debian.org/security/2015/dsa-3382
www.mandriva.com/security/advisories?name=MDVSA-2014:243
www.phpmyadmin.net/home_page/security/PMASA-2014-17.php
www.securityfocus.com/bid/71434
exchange.xforce.ibmcloud.com/vulnerabilities/99140
github.com/phpmyadmin/phpmyadmin/commit/095729d81205f15f40d216d25917017da4c2fff8
github.com/phpmyadmin/phpmyadmin/commit/1ac863c7573d12012374d5d41e5c7dc5505ea6e1
github.com/phpmyadmin/phpmyadmin/commit/62b2c918d26cc78d1763945e3d44d1a63294a819
Related
openvas
openvas
phpMyAdmin Denial-of-Service Vulnerability -01 (Dec 2014)
2014-12-26 00:00:00
Mageia: Security Advisory (MGASA-2014-0510)
2022-01-28 00:00:00
Fedora Update for phpMyAdmin FEDORA-2014-16327
2015-01-05 00:00:00
prion
prion
Code injection
2014-12-08 11:59:00
cvelist
cvelist
CVE-2014-9218
2014-12-08 11:00:00
exploitdb
exploitdb
phpMyAdmin 4.0.x/4.1.x/4.2.x - Denial of Service
2014-12-15 00:00:00
mageia
mageia
Updated phpmyadmin package fixes CVE-2014-9218
2014-12-05 18:54:13
phpmyadmin
phpmyadmin
DoS vulnerability with long passwords.
2014-12-03 00:00:00
exploitpack
exploitpack
phpMyAdmin 4.0.x4.1.x4.2.x - Denial of Service
2014-12-15 00:00:00
ubuntucve
ubuntucve
CVE-2014-9218
2014-12-08 00:00:00
debiancve
debiancve
CVE-2014-9218
2014-12-08 11:59:11
cve
cve
CVE-2014-9218
2014-12-08 11:59:11
zdt
zdt
phpMyAdmin 4.0.x, 4.1.x, 4.2.x - DoS
2014-12-16 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: phpMyAdmin-4.2.13.1-1.fc19
2014-12-15 04:28:07
[SECURITY] Fedora 21 Update: phpMyAdmin-4.2.13.1-1.fc21
2014-12-12 04:10:10
[SECURITY] Fedora 20 Update: phpMyAdmin-4.2.13.1-1.fc20
2014-12-12 04:20:42
nessus
nessus
securityvulns
securityvulns
[ MDVSA-2014:243 ] phpmyadmin
2014-12-22 00:00:00
freebsd
freebsd
phpMyAdmin -- XSS and DoS vulnerabilities
2014-12-03 00:00:00
typo3
typo3
Multiple vulnerabilities in extension phpMyAdmin (phpmyadmin)
2014-12-08 00:00:00
debian
debian
[SECURITY] [DLA 336-1] phpmyadmin security update
2015-10-28 19:55:06
[SECURITY] [DSA 3382-1] phpmyadmin security update
2015-10-28 19:52:25
osv
osv
phpmyadmin - security update
2015-10-28 00:00:00
phpmyadmin - security update
2015-10-28 00:00:00
phpmyadmin vulnerabilities
2021-03-16 14:27:57
ubuntu
ubuntu
phpMyAdmin vulnerabilities
2021-03-16 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
9
Confidence
High
EPSS
0.218
Percentile
96.5%
Related for NVD:CVE-2014-9218