CVE-2014-9218: Medium severity phpmyadmin vulnerability
Published Dec 8, 2014
·Updated
libraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.7, 4.1.x before 4.1.14.8, and 4.2.x before 4.2.13.1 allows remote attackers to cause a denial of service (resource consumption) via a long password.
Affected Software
53 affected components
phpMyAdmin phpMyAdmin=4.0.0
phpMyAdmin phpMyAdmin=4.0.0-rc2
phpMyAdmin phpMyAdmin=4.0.0-rc3
phpMyAdmin phpMyAdmin=4.0.1
phpMyAdmin phpMyAdmin=4.0.2
phpMyAdmin phpMyAdmin=4.0.3
phpMyAdmin phpMyAdmin=4.0.4
phpMyAdmin phpMyAdmin=4.0.4.1
phpMyAdmin phpMyAdmin=4.0.4.2
phpMyAdmin phpMyAdmin=4.0.5
phpMyAdmin phpMyAdmin=4.0.6
phpMyAdmin phpMyAdmin=4.0.7
phpMyAdmin phpMyAdmin=4.0.8
phpMyAdmin phpMyAdmin=4.0.9
phpMyAdmin phpMyAdmin=4.0.10
phpMyAdmin phpMyAdmin=4.0.10.2
phpMyAdmin phpMyAdmin=4.0.10.5
phpMyAdmin phpMyAdmin=4.1.0
phpMyAdmin phpMyAdmin=4.1.1
phpMyAdmin phpMyAdmin=4.1.2
phpMyAdmin phpMyAdmin=4.1.3
phpMyAdmin phpMyAdmin=4.1.4
phpMyAdmin phpMyAdmin=4.1.5
phpMyAdmin phpMyAdmin=4.1.6
phpMyAdmin phpMyAdmin=4.1.7
phpMyAdmin phpMyAdmin=4.1.8
phpMyAdmin phpMyAdmin=4.1.9
phpMyAdmin phpMyAdmin=4.1.10
phpMyAdmin phpMyAdmin=4.1.11
phpMyAdmin phpMyAdmin=4.1.12
phpMyAdmin phpMyAdmin=4.1.13
phpMyAdmin phpMyAdmin=4.1.14
phpMyAdmin phpMyAdmin=4.1.14.1
phpMyAdmin phpMyAdmin=4.1.14.3
phpMyAdmin phpMyAdmin=4.1.14.6
phpMyAdmin phpMyAdmin=4.2.0
phpMyAdmin phpMyAdmin=4.2.1
phpMyAdmin phpMyAdmin=4.2.2
phpMyAdmin phpMyAdmin=4.2.3
phpMyAdmin phpMyAdmin=4.2.4
phpMyAdmin phpMyAdmin=4.2.5
phpMyAdmin phpMyAdmin=4.2.6
phpMyAdmin phpMyAdmin=4.2.7
phpMyAdmin phpMyAdmin=4.2.7.1
phpMyAdmin phpMyAdmin=4.2.8
phpMyAdmin phpMyAdmin=4.2.8.1
phpMyAdmin phpMyAdmin=4.2.9
phpMyAdmin phpMyAdmin=4.2.9.1
phpMyAdmin phpMyAdmin=4.2.10
phpMyAdmin phpMyAdmin=4.2.10.1
phpMyAdmin phpMyAdmin=4.2.11
phpMyAdmin phpMyAdmin=4.2.12
phpMyAdmin phpMyAdmin=4.2.13
Event History
Dec 8, 2014
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-9218?
CVE-2014-9218 has a medium severity due to its potential for causing denial of service via resource consumption.
2
How do I fix CVE-2014-9218?
To fix CVE-2014-9218, upgrade phpMyAdmin to version 4.0.10.7 or later, 4.1.14.8 or later, or 4.2.13.1 or later.
3
What versions of phpMyAdmin are affected by CVE-2014-9218?
CVE-2014-9218 affects phpMyAdmin versions 4.0.x before 4.0.10.7, 4.1.x before 4.1.14.8, and 4.2.x before 4.2.13.1.
4
What is the impact of exploiting CVE-2014-9218?
Exploiting CVE-2014-9218 could lead to denial of service, disrupting access to phpMyAdmin.
5
Who is at risk for CVE-2014-9218?
Any user running an affected version of phpMyAdmin is at risk for CVE-2014-9218.