CVE-2014-8325 The Calendar Base (cal) extension before 1.5.9 and 1.6.x before 1.6.1 for TYPO3 allows remote attackers to cause a denial of service (resource consumption) via vectors related to the PHP PCRE library.
HighCVSS 7.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Calendar Base (cal) extension before 1.5.9 and 1.6.x before 1.6.1 for TYPO3 allows remote attackers to cause a denial of service (resource consumption) via vectors related to the PHP PCRE library.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| calender base project calender base | <= 1.5.8 | No fix listed |
| calender base project calender base | = 1.5.0 | No fix listed |
| calender base project calender base | = 1.5.1 | No fix listed |
| calender base project calender base | = 1.5.2 | No fix listed |
| calender base project calender base | = 1.5.3 | No fix listed |
| calender base project calender base | = 1.5.4 | No fix listed |
| calender base project calender base | = 1.5.5 | No fix listed |
| calender base project calender base | = 1.5.6 | No fix listed |
| calender base project calender base | = 1.5.7 | No fix listed |
| calender base project calender base | = 1.6.0 | No fix listed |
References
- typo3.org patch
- typo3.org patch vendor-advisory
- [oss-security] 20141017 Re: CVE request: TYPO3-EXT-SA-2014-013 mailing-list
- 70645 vdb-entry