CVE-2015-2936
published 2015-04-13CVE-2015-2936: MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service (CPU consumption) via a long…
PriorityP430high7.1CVSS 2.0
AVNACMAuNCNINAC
EPSS
2.69%
84.3th percentile
MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service (CPU consumption) via a long password.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | mediawiki | < mediawiki 1:1.19.20+dfsg-2.3 (bookworm) | mediawiki 1:1.19.20+dfsg-2.3 (bookworm) |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | >= 0 < 1:1.19.20+dfsg-2.3 | 1:1.19.20+dfsg-2.3 |
| mediawiki | mediawiki | >= 0 < 1:1.19.20+dfsg-2.3 | 1:1.19.20+dfsg-2.3 |
| mediawiki | mediawiki | >= 0 < 1:1.19.20+dfsg-2.3 | 1:1.19.20+dfsg-2.3 |
| mediawiki | mediawiki | >= 0 < 1:1.19.20+dfsg-2.3 | 1:1.19.20+dfsg-2.3 |
CVSS provenance
nvdv2.07.1HIGHAV:N/AC:M/Au:N/C:N/I:N/A:C
osv7.1HIGH
vendor_debian7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-8x5j-h9hv-6r4c: MediaWiki 1
ghsa_unreviewed·2022-05-17
CVE-2015-2936 [HIGH] GHSA-8x5j-h9hv-6r4c: MediaWiki 1
MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service (CPU consumption) via a long password.
OSV
CVE-2015-2936: MediaWiki 1
osv·2015-04-13·CVSS 7.1
CVE-2015-2936 [HIGH] CVE-2015-2936: MediaWiki 1
MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service (CPU consumption) via a long password.
Debian
CVE-2015-2936: mediawiki - MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows r...
vendor_debian·2015·CVSS 7.1
CVE-2015-2936 [HIGH] CVE-2015-2936: mediawiki - MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows r...
MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service (CPU consumption) via a long password.
Scope: local
bookworm: resolved (fixed in 1:1.19.20+dfsg-2.3)
bullseye: resolved (fixed in 1:1.19.20+dfsg-2.3)
forky: resolved (fixed in 1:1.19.20+dfsg-2.3)
sid: resolved (fixed in 1:1.19.20+dfsg-2.3)
trixie: resolved (fixed in 1:1.19.20+dfsg-2.3)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.mandriva.com/security/advisories?name=MDVSA-2015:200http://www.openwall.com/lists/oss-security/2015/04/01/1http://www.openwall.com/lists/oss-security/2015/04/07/3http://www.securityfocus.com/bid/73477https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-March/000175.htmlhttps://phabricator.wikimedia.org/T64685https://security.gentoo.org/glsa/201510-05http://www.mandriva.com/security/advisories?name=MDVSA-2015:200http://www.openwall.com/lists/oss-security/2015/04/01/1http://www.openwall.com/lists/oss-security/2015/04/07/3http://www.securityfocus.com/bid/73477https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-March/000175.htmlhttps://phabricator.wikimedia.org/T64685https://security.gentoo.org/glsa/201510-05
2015-04-13
Published