SB2016022604 - Fedora EPEL 7 update for drupal7
Published: February 26, 2016 Updated: April 24, 2025
Security Bulletin ID
SB2016022604
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Denial of service (CVE-ID: CVE-2016-3162)
The weakness allows attackers to cause denial of service on the target system.The vulnerability is caused by attacker's influence on files uploaded by a valid user. A malicious user can read and change the links to the uploaded files locating in unsubmitted forms. Continuous attacks can lead to complete blockage of the uploaded files and deleting of temporary files.
Successful exploitation of this vulnerability results in denial of service on the vulnerable system.
Remediation
Install update from vendor's website.