Lucene search
Yuji TounaiPATCHSTACK:9844A349272E94AE6CC75F01DDF8CCD2HistoryAug 15, 2014 - 12:00 a.m.
WordPress <= 3.9.1 - Denial Of Service Attacks #2
2014-08-1500:00:00
Yuji Tounai
patchstack.com
11
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
The Incutio XML-RPC (IXR) Library permits entity declarations without considering recursion during entity expansion. In that way the attackers can cause a denial of service attacks via a crafted XML document containing a large number of nested entity references.
Related records:
http://db.threatpress.com/vulnerability/wordpress/wordpress-3-9-1-denial-of-service-attacks
Solution
Update WordPress.
Related
checkpoint_advisories
checkpoint_advisories
debiancve
debiancve
CVE-2014-5265
2014-08-18 11:15:00
CVE-2014-5266
2014-08-18 11:15:00
cve
cve
CVE-2014-5266
2014-08-18 11:15:00
CVE-2014-5265
2014-08-18 11:15:00
cvelist
cvelist
CVE-2014-5266
2014-08-18 10:00:00
CVE-2014-5265
2014-08-18 10:00:00
nessus
nessus
Drupal 6.x < 6.33 / 7.x < 7.31 XML-RPC DoS
2014-08-13 00:00:00
Debian DSA-2999-1 : drupal7 - security update
2014-08-10 00:00:00
Fedora 19 : drupal7-7.31-1.fc19 (2014-9277)
2014-08-22 00:00:00
prion
prion
Design/Logic Flaw
2014-08-18 11:15:00
Design/Logic Flaw
2014-08-18 11:15:00
ubuntucve
ubuntucve
CVE-2014-5266
2014-08-18 00:00:00
CVE-2014-5265
2014-08-18 00:00:00
openvas
openvas
Debian Security Advisory DSA 2999-1 (drupal7 - security update)
2014-08-09 00:00:00
Debian: Security Advisory (DSA-2999-1)
2014-08-08 00:00:00
Fedora Update for drupal7 FEDORA-2014-9277
2014-08-22 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: drupal6-6.33-1.fc20
2014-09-26 09:05:28
[SECURITY] Fedora 19 Update: drupal7-7.31-1.fc19
2014-08-21 09:41:54
[SECURITY] Fedora 20 Update: drupal7-7.31-1.fc20
2014-08-21 09:45:41
osv
osv
drupal7 - security update
2014-08-09 00:00:00
wordpress - security update
2014-08-09 00:00:00
wordpress - security update
2014-09-17 00:00:00
drupal
drupal
SA-CORE-2014-004 - Drupal core - Denial of service
2014-08-06 00:00:00
debian
debian
[SECURITY] [DLA 56-1] wordpress security update
2014-09-17 12:05:46
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
Related for PATCHSTACK:9844A349272E94AE6CC75F01DDF8CCD2