medium4.3
CVE-2013-4599
The Misery module 6.x-2.x before 6.x-2.5 and 7.x-2.x before 7.x-2.2 for Drupal, when the "delay misery" configuration is set to a high value, allows remote att…
Impact
The Misery module 6.x-2.x before 6.x-2.5 and 7.x-2.x before 7.x-2.2 for Drupal, when the "delay misery" configuration is set to a high value, allows remote attackers to cause a denial of service (process consumption) via multiple requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Misery Project | Misery | Versions 6.x-2.0, 6.x-2.1, 6.x-2.2, 6.x-2.3, 6.x-2.4, 7.x-2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/oss-sec/2013/q4/317
- http://www.securityfocus.com/bid/63705
- https://drupal.org/node/2134409
- https://drupal.org/node/2134413
- https://drupal.org/node/2135273
- http://seclists.org/oss-sec/2013/q4/317
- http://www.securityfocus.com/bid/63705
- https://drupal.org/node/2134409
- https://drupal.org/node/2134413
- https://drupal.org/node/2135273