Lucene search

K
osvGoogleOSV:GHSA-QF3F-7X69-QFV3
HistoryMay 14, 2022 - 3:14 a.m.

phpMyAdmin DoS Vulnerability

2022-05-1403:14:46
Google
osv.dev
13
phpmyadmin
denial-of-service
vulnerability
unauthenticated user
persistent connections

EPSS

0.004

Percentile

73.3%

An issue was discovered in phpMyAdmin. An unauthenticated user is able to execute a denial-of-service (DoS) attack by forcing persistent connections when phpMyAdmin is running with $cfg['AllowArbitraryServer']=true. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.