CVE-2009-3622

描述

Algorithmic complexity vulnerability in wp-trackback.php in WordPress before 2.8.5 allows remote attackers to cause a denial of service (CPU consumption and server hang) via a long title parameter in conjunction with a charset parameter composed of many comma-separated "UTF-8" substrings, related to the mb_convert_encoding function in PHP.

如何修補 CVE-2009-3622

要修補 CVE-2009-3622,請將受影響套件升級到下列已修補版本。

• Debian/wordpress—升級至 2.8.5-1 或更新版本

CVE-2009-3622 正在被利用嗎?

中等 — EPSS 為 5.8%,可持續追蹤但非最高優先。

受影響套件(1)

• from 0, < 2.8.5-1

參考連結(1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2009-3622