Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wjjc-m3fc-fcm8

Опубликовано: 17 мая 2022
Источник: github
Github: Прошло ревью
CVSS4: 8.7
CVSS3: 7.5

Описание

MoinMoin Denial of Service vulnerability via password_checker function

The password_checker function in config/multiconfig.py in MoinMoin prior to version 1.6.1 uses the cracklib and python-crack features even though they are not thread-safe, which allows remote attackers to cause a denial of service (segmentation fault and crash) via unknown vectors.

Пакеты

Наименование

moin

pip
Затронутые версииВерсия исправления

< 1.6.1

1.6.1

EPSS

Процентиль: 67%
0.00543
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-400

Связанные уязвимости

ubuntu
больше 16 лет назад

The password_checker function in config/multiconfig.py in MoinMoin 1.6.1 uses the cracklib and python-crack features even though they are not thread-safe, which allows remote attackers to cause a denial of service (segmentation fault and crash) via unknown vectors.

nvd
больше 16 лет назад

The password_checker function in config/multiconfig.py in MoinMoin 1.6.1 uses the cracklib and python-crack features even though they are not thread-safe, which allows remote attackers to cause a denial of service (segmentation fault and crash) via unknown vectors.

debian
больше 16 лет назад

The password_checker function in config/multiconfig.py in MoinMoin 1.6 ...

EPSS

Процентиль: 67%
0.00543
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-400