Описание
MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service (CPU consumption) via a long password.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| mediawiki | fixed | 1:1.19.20+dfsg-2.3 | package | |
| mediawiki | end-of-life | wheezy | package | |
| mediawiki | end-of-life | squeeze | package |
Примечания
https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-March/000175.html
https://www.openwall.com/lists/oss-security/2015/04/01/1
EPSS
Связанные уязвимости
MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service (CPU consumption) via a long password.
MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service (CPU consumption) via a long password.
MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service (CPU consumption) via a long password.
EPSS