Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2014-5266
HistoryAug 18, 2014 - 12:00 a.m.

CVE-2014-5266

2014-08-1800:00:00
ubuntu.com
ubuntu.com
17

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.929 High

EPSS

Percentile

99.0%

JSON

The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and
Drupal 6.x before 6.33 and 7.x before 7.31, does not limit the number of
elements in an XML document, which allows remote attackers to cause a
denial of service (CPU consumption) via a large document, a different
vulnerability than CVE-2014-5265.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchdrupal7< anyUNKNOWN
ubuntu14.04noarchwordpress< 3.8.2+dfsg-1ubuntu0.1UNKNOWN

Related

nessus 10
prion 2
nvd 2
cve 2
debiancve 2
cvelist 2
openvas 10
osv 3
fedora 5
drupal 1
checkpoint_advisories 3
patchstack 2
debian 1
ubuntucve 1
nessus
nessus
Drupal 6.x < 6.33 / 7.x < 7.31 XML-RPC DoS
2014-08-13 00:00:00
Fedora 20 : drupal7-7.31-1.fc20 (2014-9278)
2014-08-22 00:00:00
Fedora 20 : drupal6-6.33-1.fc20 (2014-9281)
2014-09-29 00:00:00
prion
prion
Design/Logic Flaw
2014-08-18 11:15:00
Design/Logic Flaw
2014-08-18 11:15:00
nvd
nvd
CVE-2014-5266
2014-08-18 11:15:27
CVE-2014-5265
2014-08-18 11:15:27
cve
cve
CVE-2014-5266
2014-08-18 11:15:27
CVE-2014-5265
2014-08-18 11:15:27
debiancve
debiancve
CVE-2014-5266
2014-08-18 11:15:27
CVE-2014-5265
2014-08-18 11:15:27
cvelist
cvelist
CVE-2014-5266
2014-08-18 10:00:00
CVE-2014-5265
2014-08-18 10:00:00
openvas
openvas
Fedora Update for drupal6 FEDORA-2014-9281
2014-10-01 00:00:00
Fedora Update for drupal7 FEDORA-2014-9277
2014-08-22 00:00:00
Fedora Update for drupal7 FEDORA-2014-9278
2014-08-22 00:00:00
osv
osv
drupal7 - security update
2014-08-09 00:00:00
wordpress - security update
2014-09-17 00:00:00
wordpress - security update
2014-08-09 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: drupal7-7.31-1.fc19
2014-08-21 09:41:54
[SECURITY] Fedora 20 Update: drupal6-6.33-1.fc20
2014-09-26 09:05:28
[SECURITY] Fedora 20 Update: drupal7-7.31-1.fc20
2014-08-21 09:45:41
drupal
drupal
SA-CORE-2014-004 - Drupal core - Denial of service
2014-08-06 00:00:00
checkpoint_advisories
checkpoint_advisories
Drupal Core XML-RPC Endpoint xmlrpc.php Internal Entity Expansion Denial of Service - Ver2 (CVE-2014-5265)
2015-03-26 00:00:00
Drupal Core XML-RPC Endpoint xmlrpc.php Tags Denial of Service (CVE-2014-5266)
2014-09-22 00:00:00
Drupal Core XML-RPC Endpoint xmlrpc.php Internal Entity Expansion Denial of Service - Ver2 (CVE-2014-5265)
2015-03-26 00:00:00
patchstack
patchstack
WordPress <= 3.9.1 - Denial Of Service Attacks #2
2014-08-15 00:00:00
WordPress <= 3.9.1 - Denial Of Service Attacks #1
2014-08-15 00:00:00
debian
debian
[SECURITY] [DLA 56-1] wordpress security update
2014-09-17 12:05:09
ubuntucve
ubuntucve
CVE-2014-5265
2014-08-18 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.929 High

EPSS

Percentile

99.0%

JSON
Related for UB:CVE-2014-5266
nessus10prion2nvd2cve2debiancve2cvelist2openvas10osv3fedora5drupal1checkpoint_advisories3patchstack2debian1ubuntucve1