PT-2014-8470 · Typo3+1 · Typo3 Calendar Base+1

Publicado 2014-10-22 · Atualizado 2014-10-23 · CVE-2014-8325

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions TYPO3 Calendar Base (cal) extension versions prior to 1.5.9 TYPO3 Calendar Base (cal) extension version 1.6.x prior to 1.6.1

Description The issue allows remote attackers to cause a denial of service, specifically resource consumption, through vectors related to the PHP PCRE library.

Recommendations For versions prior to 1.5.9, update to version 1.5.9 or later. For version 1.6.x prior to 1.6.1, update to version 1.6.1 or later.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2014-8325

Produtos afetados

Php Pcre Library

Typo3 Calendar Base

Referências · 5

• http://openwall.com/lists/oss-security/2014/10/17/11 · Nota
• http://securityfocus.com/bid/70645 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-8325 · Nota de Segurança
• http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-013 · Aviso do Fabricante
• http://typo3.org/extensions/repository/view/cal · Correção