PT-2014-8470 · Typo3+1 · Typo3 Calendar Base+1

Published 2014-10-22 · Updated 2014-10-23 · CVE-2014-8325

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions TYPO3 Calendar Base (cal) extension versions prior to 1.5.9 TYPO3 Calendar Base (cal) extension version 1.6.x prior to 1.6.1

Description The issue allows remote attackers to cause a denial of service, specifically resource consumption, through vectors related to the PHP PCRE library.

Recommendations For versions prior to 1.5.9, update to version 1.5.9 or later. For version 1.6.x prior to 1.6.1, update to version 1.6.1 or later.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2014-8325

Affected Products

Php Pcre Library

Typo3 Calendar Base

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2014-8325 · Security Note
• http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-013 · Vendor Advisory
• http://typo3.org/extensions/repository/view/cal · Patch
• http://openwall.com/lists/oss-security/2014/10/17/11 · Note
• http://securityfocus.com/bid/70645 · Note