VDB
GCVE-110-MAGEIA-2014-492
GCVE-110-MAGEIA-2014-492
Advisory Published
Updated drupal packages fix security vulnerability:
Aaron Averill discovered that a specially crafted request can give a user
access to another user's session, allowing an attacker to hijack a random
session (CVE-2014-9015).
Michael Cullum, Javier Nieto and Andres Rojas Guerrero discovered that the
password hashing API allows an attacker to send specially crafted requests
resulting in CPU and memory exhaustion. This may lead to the site becoming
unavailable or unresponsive (denial of service) (CVE-2014-9016).
anonymous users (CVE-2014-9016).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | drupal | 0 (affected), 7.34-1.mga4 (unaffected) | — |
| Mageia | drupal | 0 (affected), 7.34-1.mga3 (unaffected) | — |
Aliases
References
Browse GCVE Records
74,108 records in the GCVE database · Updated July 20, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.