Vulnerabilities > CVE-2013-4599 - Resource Management Errors vulnerability in Misery Project Misery
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
The Misery module 6.x-2.x before 6.x-2.5 and 7.x-2.x before 7.x-2.2 for Drupal, when the "delay misery" configuration is set to a high value, allows remote attackers to cause a denial of service (process consumption) via multiple requests.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 7 |
Common Weakness Enumeration (CWE)
References
- http://seclists.org/oss-sec/2013/q4/317
- http://seclists.org/oss-sec/2013/q4/317
- http://www.securityfocus.com/bid/63705
- http://www.securityfocus.com/bid/63705
- https://drupal.org/node/2134409
- https://drupal.org/node/2134409
- https://drupal.org/node/2134413
- https://drupal.org/node/2134413
- https://drupal.org/node/2135273
- https://drupal.org/node/2135273