Lucene search
Drupal security teamPATCHSTACK:075D41FDD591A35C4EF184FCB92E82B4HistoryAug 15, 2014 - 12:00 a.m.
WordPress <= 3.9.1 - Denial Of Service Attacks #1
2014-08-1500:00:00
Drupal security team
patchstack.com
9
0.929 High
EPSS
Percentile
99.0%
The Incutio XML-RPC (IXR) Library, that is used in WordPress 3.9.1, does not limit the number of elements in an XML document. In that way the attackers can cause a denial of service attacks via a large document.
Related records:
http://db.threatpress.com/vulnerability/wordpress/wordpress-3-9-1-denial-of-service-attacks-2
Solution
Update WordPress.
Related
checkpoint_advisories
checkpoint_advisories
nvd
nvd
CVE-2014-5266
2014-08-18 11:15:27
nessus
nessus
Drupal 6.x < 6.33 / 7.x < 7.31 XML-RPC DoS
2014-08-13 00:00:00
Fedora 20 : drupal6-6.33-1.fc20 (2014-9281)
2014-09-29 00:00:00
Fedora 19 : drupal7-7.31-1.fc19 (2014-9277)
2014-08-22 00:00:00
ubuntucve
ubuntucve
CVE-2014-5266
2014-08-18 00:00:00
prion
prion
Design/Logic Flaw
2014-08-18 11:15:00
cve
cve
CVE-2014-5266
2014-08-18 11:15:27
debiancve
debiancve
CVE-2014-5266
2014-08-18 11:15:27
cvelist
cvelist
CVE-2014-5266
2014-08-18 10:00:00
openvas
openvas
Fedora Update for drupal6 FEDORA-2014-9281
2014-10-01 00:00:00
Debian Security Advisory DSA 2999-1 (drupal7 - security update)
2014-08-09 00:00:00
Fedora Update for drupal7 FEDORA-2014-9277
2014-08-22 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: drupal7-7.31-1.fc19
2014-08-21 09:41:54
[SECURITY] Fedora 20 Update: drupal6-6.33-1.fc20
2014-09-26 09:05:28
[SECURITY] Fedora 20 Update: drupal7-7.31-1.fc20
2014-08-21 09:45:41
osv
osv
drupal7 - security update
2014-08-09 00:00:00
wordpress - security update
2014-08-09 00:00:00
wordpress - security update
2014-09-17 00:00:00
drupal
drupal
SA-CORE-2014-004 - Drupal core - Denial of service
2014-08-06 00:00:00
debian
debian
[SECURITY] [DLA 56-1] wordpress security update
2014-09-17 12:05:09