Lucene search

K
patchstackJaver Nieto and Andres RojasPATCHSTACK:D04840C4827D2466E5C3C1A408C61DEA
HistoryDec 01, 2014 - 12:00 a.m.

WordPress <=4.0.1 - Denial of Service Attacks

2014-12-0100:00:00
Javer Nieto and Andres Rojas
patchstack.com
12

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

WordPress 4.0.1 is prone to a denial of service vulnerability that allows an attacker to send specially crafted requests. These requests resulting in CPU and memory exhaustion and in that way the site becomes unavailable.

Solution

           Update WordPress. 
CPENameOperatorVersion
wordpressle4.0.1

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P