Description

The password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes (aka phpass) module 6.x-2.x before 6.x-2.1 for Drupal allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted request.

Remediation

References

CVE-2014-9016

Related Vulnerabilities

WordPress Plugin zM Ajax Login & Register Multiple Vulnerabilities (1.0.9)

Envoy Proxy Always-Incorrect Control Flow Implementation Vulnerability (CVE-2022-21655)

Oracle Database Server CVE-2023-22071 Vulnerability (CVE-2023-22071)

Oracle JRE CVE-2014-0461 Vulnerability (CVE-2014-0461)

WordPress Plugin PitchPrint Arbitrary File Upload (7.2.1)

Severity

Medium

Classification

CVE-2014-9016

Tags

Missing Update Known Vulnerabilities