CVE-2006-5098: Medium severity andreas gohr dokuwiki vulnerability
Published Sep 29, 2006
·Updated
lib/exec/fetch.php in DokuWiki before 2006-03-09e allows remote attackers to cause a denial of service (CPU consumption) via large w and h parameters, when resizing an image.
Affected Software
3 affected components
Andreas Gohr Dokuwiki=release_2006-03-05
Andreas Gohr Dokuwiki=release_2006-03-09
Andreas Gohr Dokuwiki=release_2006-03-09e
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Sep 29, 2006
CVE Published
11:07 PM
Data Sourced
via NVD·11:07 PM
RemedyDescriptionSeverityAffected Software
Sep 30, 2006
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-5098?
CVE-2006-5098 has been classified as a moderate severity vulnerability due to its potential to cause denial of service.
2
How does CVE-2006-5098 allow for denial of service?
CVE-2006-5098 allows denial of service by causing excessive CPU consumption when large width and height parameters are used for image resizing.
3
Which versions of DokuWiki are affected by CVE-2006-5098?
CVE-2006-5098 affects DokuWiki versions prior to release 2006-03-09e.
4
How can I mitigate the effects of CVE-2006-5098?
To mitigate CVE-2006-5098, users should upgrade to at least DokuWiki release 2006-03-09e or later.
5
What should I do if I am unable to update DokuWiki to fix CVE-2006-5098?
If you cannot update DokuWiki, consider implementing input validation to restrict the size of the width and height parameters.