The Login Security module 6.x-1.x before 6.x-1.3 and 7.x-1.x before 7.x-1.3 for Drupal, when using the login delay option, allows remote attackers to cause a denial of service (CPU consumption) via a large number of failed login attempts.
References
Link | Resource |
---|---|
https://drupal.org/node/2023507 | Patch |
https://drupal.org/node/2023585 | Vendor Advisory |
http://www.openwall.com/lists/oss-security/2013/06/20/3 | |
https://drupal.org/node/2023503 | Patch |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2013-08-28 15:55
Updated : 2013-10-07 10:46
NVD link : CVE-2013-2197
Mitre link : CVE-2013-2197
JSON object : View
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
Products Affected
drupal
- drupal
login_security_project
- login_security