Asymmetric denial of service In phpmyadmin
Description
An issue was discovered in phpMyAdmin. An authenticated user can trigger a denial-of-service (DoS) attack by entering a very long password at the change password dialog. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 alpine v3.2 | 4.4.15.8-r0 | ||
 debian 12 | 4:4.6.4+dfsg1-1 | ||
debian 13 | 4:4.6.4+dfsg1-1 | ||
debian 14 | 4:4.6.4+dfsg1-1 |
Aliases
1. 2. 3. 4. 5. 6. 7.