SB2014080709 - Fedora EPEL 5 update for drupal6
Published: August 7, 2014 Updated: April 24, 2025
Security Bulletin ID
SB2014080709
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Resource exhaustion (CVE-ID: CVE-2014-5265)
The vulnerability allows a remote user to cause denial of service on the target system.The weakness is caused by vulnerability of PHP XML parser used by XML-RPC endpoint (xmlrpc.php) to attacks connected with XML payload. The attackers can cause CPU and memory exhaustion, open the maximum number of connection in the site's database that can result in denial of service.
Successful exploitation of this vulnerability may lead to denial of service on the vulnerable system.
Remediation
Install update from vendor's website.