Vulnerability Bulletins |
SA-CORE-2013-002 - Drupal core - Denial of service |
|
| Affected software | Drupal |
|
Advisory ID: DRUPAL-SA-CORE-2013-002Project: Drupal coreVersion: 7.xDate: 2013-February-20Security risk: CriticalExploitable from: RemoteVulnerability: Denial of serviceDescriptionDrupal cores Image module allows for the on-demand generation of image derivatives. This capability can be abused by requesting a large number of new derivatives which can fill up the server disk space, and which can cause a very high CPU load. Either of these effects may lead to the site becoming unavailable or More info: https://www.drupal.org/SA-CORE-2013-002 |
|