5
CVSSv2

CVE-2013-0316

Published: 27/03/2013 Updated: 28/03/2013
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

The Image module in Drupal 7.x prior to 7.20 allows remote malicious users to cause a denial of service (CPU and disk space consumption) via a large number of new derivative requests.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

drupal drupal 7.0

drupal drupal 7.2

drupal drupal 7.9

drupal drupal 7.10

drupal drupal 7.17

drupal drupal 7.19

drupal drupal 7.11

drupal drupal 7.12

drupal drupal 7.13

drupal drupal 7.14

drupal drupal 7.15

drupal drupal 7.4

drupal drupal 7.5

drupal drupal 7.6

drupal drupal 7.7

drupal drupal 7.1

drupal drupal 7.3

drupal drupal 7.8

drupal drupal 7.x-dev

drupal drupal 7.16

drupal drupal 7.18

Vendor Advisories

Debian Bug report logs - #701165 drupal7: CVE-2013-0316 Package: drupal7; Maintainer for drupal7 is Gunnar Wolf <gwolf@debianorg>; Source for drupal7 is src:drupal7 (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Fri, 22 Feb 2013 10:30:01 UTC Severity: grave Tags: security Fixed in ver ...