phpmyadmin/composer · Security
phpMyAdmin Denial of service (DOS) attack in transformation feature
- GHSA ID
- GHSA-rv6m-chvv-wmxg
- CVE ID
- CVE-2016-6618
- Severity
- medium
- Published
- Updated
- CVSS
- 6.5 · CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS v3
- 6.5 · CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
An issue was discovered in phpMyAdmin. The transformation feature allows a user to trigger a denial-of-service (DoS) attack against the server. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
References
- https://nvd.nist.gov/vuln/detail/CVE-2016-6618 ↗
- https://lists.debian.org/debian-lts-announce/2018/07/msg00006.html ↗
- https://security.gentoo.org/glsa/201701-32 ↗
- https://www.phpmyadmin.net/security/PMASA-2016-41 ↗
- http://www.securityfocus.com/bid/95047 ↗
- https://github.com/advisories/GHSA-rv6m-chvv-wmxg ↗