Описание
The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, permits entity declarations without considering recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.9.1 (включая)
Одно из
cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.0:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.0.2:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.0.3:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.0.4:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.0.5:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.0.6:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.1.3:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.1.4:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.2:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.2:beta1:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.2.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.3:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.3.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.3.2:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.3.3:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.4.0:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.4.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.4.2:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.5.0:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.5.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.6:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.6.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.7:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.7.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.8:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.8.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.9.0:*:*:*:*:*:*:*
Конфигурация 2
Одно из
cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.0:beta1:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.0:beta2:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.0:beta3:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.0:beta4:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.0:dev:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.0:rc1:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.0:rc2:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.0:rc3:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.0:rc4:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.4:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.5:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.6:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.7:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.8:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.9:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.10:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.11:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.12:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.13:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.14:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.15:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.16:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.17:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.18:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.19:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.20:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.21:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.22:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.23:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.24:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.25:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.26:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.27:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.28:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.29:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.30:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.31:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:6.32:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.0:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.0:alpha1:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.0:alpha2:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.0:alpha3:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.0:alpha4:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.0:alpha5:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.0:alpha6:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.0:alpha7:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.0:beta1:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.0:beta2:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.0:beta3:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.0:dev:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.0:rc1:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.0:rc2:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.0:rc3:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.0:rc4:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.1:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.2:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.3:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.4:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.5:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.6:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.7:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.8:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.9:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.10:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.11:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.12:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.13:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.14:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.15:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.16:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.17:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.18:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.19:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.20:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.21:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.22:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.23:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.24:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.25:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.26:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.27:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.28:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.29:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.30:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:7.x-dev:*:*:*:*:*:*:*
Конфигурация 3
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
EPSS
Процентиль: 91%
0.07017
Низкий
5 Medium
CVSS2
Дефекты
CWE-399
Связанные уязвимости
ubuntu
почти 11 лет назад
The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, permits entity declarations without considering recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
debian
почти 11 лет назад
The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 a ...
github
около 3 лет назад
The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, permits entity declarations without considering recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
EPSS
Процентиль: 91%
0.07017
Низкий
5 Medium
CVSS2
Дефекты
CWE-399