Drupal Core Image Derivatives Denial of Service Vulnerability
BID:58069
Info
Drupal Core Image Derivatives Denial of Service Vulnerability
| Bugtraq ID: | 58069 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2013-0316 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 20 2013 12:00AM |
| Updated: | Apr 13 2015 09:58PM |
| Credit: | Bèr Kessels, aBrookland, and Chad Fennell |
| Vulnerable: |
Mandriva Business Server 1 X86 64 Mandriva Business Server 1 Drupal Drupal 7.6 Drupal Drupal 7.5 Drupal Drupal 7.4 Drupal Drupal 7.3 Drupal Drupal 7.2 Drupal Drupal 7.19 Drupal Drupal 7.18 Drupal Drupal 7.17 Drupal Drupal 7.16 Drupal Drupal 7.15 Drupal Drupal 7.14 Drupal Drupal 7.13 Drupal Drupal 7.12 Drupal Drupal 7.11 Drupal Drupal 7.10 Drupal Drupal 7.1 Drupal Drupal 7.0 |
| Not Vulnerable: |
Drupal Drupal 7.20 |
Discussion
Drupal Core Image Derivatives Denial of Service Vulnerability
Drupal is prone to a denial-of-service vulnerability.
Successful exploits may allow an attacker to trigger high CPU consumption and make the application unresponsive. This causes a denial-of-service condition to legitimate users.
Drupal 7.x versions prior to 7.20 are vulnerable.
Drupal is prone to a denial-of-service vulnerability.
Successful exploits may allow an attacker to trigger high CPU consumption and make the application unresponsive. This causes a denial-of-service condition to legitimate users.
Drupal 7.x versions prior to 7.20 are vulnerable.
Exploit / POC
Drupal Core Image Derivatives Denial of Service Vulnerability
Attackers can exploit this issue through a browser.
Attackers can exploit this issue through a browser.
Solution / Fix
Drupal Core Image Derivatives Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Mandriva Business Server 1 X86 64
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Mandriva Business Server 1 X86 64
-
Mandriva drupal-7.24-1.1.mbs1.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva drupal-7.24-1.mbs1.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva drupal-mysql-7.24-1.1.mbs1.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva drupal-mysql-7.24-1.mbs1.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva drupal-postgresql-7.24-1.1.mbs1.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva drupal-postgresql-7.24-1.mbs1.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva drupal-sqlite-7.24-1.1.mbs1.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva drupal-sqlite-7.24-1.mbs1.noarch.rpm
http://www.mandriva.com/en/downloads/
References
Drupal Core Image Derivatives Denial of Service Vulnerability
References:
References: