phpmyadmin/composer · Security
phpMyAdmin Denial of service (DOS) attack with dbase extension
- GHSA ID
- GHSA-426q-975p-w5cr
- CVE ID
- CVE-2016-6632
- Severity
- medium
- Published
- Updated
- CVSS
- 5.9 · CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v3
- 5.9 · CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
An issue was discovered in phpMyAdmin where, under certain conditions, phpMyAdmin may not delete temporary files during the import of ESRI files. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
References
- https://nvd.nist.gov/vuln/detail/CVE-2016-6632 ↗
- https://lists.debian.org/debian-lts-announce/2019/06/msg00009.html ↗
- https://security.gentoo.org/glsa/201701-32 ↗
- https://www.phpmyadmin.net/security/PMASA-2016-55 ↗
- http://www.securityfocus.com/bid/92497 ↗
- https://github.com/advisories/GHSA-426q-975p-w5cr ↗