Lucene search

[email protected]CVE-2016-9858

HistoryDec 11, 2016 - 2:59 a.m.

CVE-2016-9858

2016-12-1102:59:57

CWE-20

[email protected]

web.nvd.nist.gov

phpmyadmin

dos

cve-2016-9858

security

vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

6.6

Confidence

High

EPSS

0.003

Percentile

71.3%

JSON

An issue was discovered in phpMyAdmin. With a crafted request parameter value it is possible to initiate a denial of service attack in saved searches feature. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.

Affected configurations

NVD

Node

phpmyadminphpmyadminMatch4.4.0

phpmyadminphpmyadminMatch4.4.1

phpmyadminphpmyadminMatch4.4.1.1

phpmyadminphpmyadminMatch4.4.2

phpmyadminphpmyadminMatch4.4.3

phpmyadminphpmyadminMatch4.4.4

phpmyadminphpmyadminMatch4.4.5

phpmyadminphpmyadminMatch4.4.6

phpmyadminphpmyadminMatch4.4.6.1

phpmyadminphpmyadminMatch4.4.7

phpmyadminphpmyadminMatch4.4.8

phpmyadminphpmyadminMatch4.4.9

phpmyadminphpmyadminMatch4.4.10

phpmyadminphpmyadminMatch4.4.11

phpmyadminphpmyadminMatch4.4.12

phpmyadminphpmyadminMatch4.4.13

phpmyadminphpmyadminMatch4.4.13.1

phpmyadminphpmyadminMatch4.4.14

phpmyadminphpmyadminMatch4.4.14.1

phpmyadminphpmyadminMatch4.4.15

phpmyadminphpmyadminMatch4.4.15.1

phpmyadminphpmyadminMatch4.4.15.2

phpmyadminphpmyadminMatch4.4.15.3

phpmyadminphpmyadminMatch4.4.15.4

phpmyadminphpmyadminMatch4.4.15.5

phpmyadminphpmyadminMatch4.4.15.6

phpmyadminphpmyadminMatch4.4.15.7

phpmyadminphpmyadminMatch4.4.15.8

Node

phpmyadminphpmyadminMatch4.6.0

phpmyadminphpmyadminMatch4.6.1

phpmyadminphpmyadminMatch4.6.2

phpmyadminphpmyadminMatch4.6.3

phpmyadminphpmyadminMatch4.6.4

Node

phpmyadminphpmyadminMatch4.0.0

phpmyadminphpmyadminMatch4.0.1

phpmyadminphpmyadminMatch4.0.2

phpmyadminphpmyadminMatch4.0.3

phpmyadminphpmyadminMatch4.0.4

phpmyadminphpmyadminMatch4.0.4.1

phpmyadminphpmyadminMatch4.0.4.2

phpmyadminphpmyadminMatch4.0.5

phpmyadminphpmyadminMatch4.0.6

phpmyadminphpmyadminMatch4.0.7

phpmyadminphpmyadminMatch4.0.8

phpmyadminphpmyadminMatch4.0.9

phpmyadminphpmyadminMatch4.0.10

phpmyadminphpmyadminMatch4.0.10.1

phpmyadminphpmyadminMatch4.0.10.2

phpmyadminphpmyadminMatch4.0.10.3

phpmyadminphpmyadminMatch4.0.10.4

phpmyadminphpmyadminMatch4.0.10.5

phpmyadminphpmyadminMatch4.0.10.6

phpmyadminphpmyadminMatch4.0.10.7

phpmyadminphpmyadminMatch4.0.10.8

phpmyadminphpmyadminMatch4.0.10.9

phpmyadminphpmyadminMatch4.0.10.10

phpmyadminphpmyadminMatch4.0.10.11

phpmyadminphpmyadminMatch4.0.10.12

phpmyadminphpmyadminMatch4.0.10.13

phpmyadminphpmyadminMatch4.0.10.14

phpmyadminphpmyadminMatch4.0.10.15

phpmyadminphpmyadminMatch4.0.10.16

phpmyadminphpmyadminMatch4.0.10.17

VendorProductVersionCPE
phpmyadminphpmyadmin4.4.15.8cpe:/a:phpmyadmin:phpmyadmin:4.4.15.8:::
phpmyadminphpmyadmin4.4.15.7cpe:/a:phpmyadmin:phpmyadmin:4.4.15.7:::
phpmyadminphpmyadmin4.4.15.6cpe:/a:phpmyadmin:phpmyadmin:4.4.15.6:::
phpmyadminphpmyadmin4.4.5cpe:/a:phpmyadmin:phpmyadmin:4.4.5:::
phpmyadminphpmyadmin4.4.15.4cpe:/a:phpmyadmin:phpmyadmin:4.4.15.4:::
phpmyadminphpmyadmin4.4.4cpe:/a:phpmyadmin:phpmyadmin:4.4.4:::
phpmyadminphpmyadmin4.4.15.2cpe:/a:phpmyadmin:phpmyadmin:4.4.15.2:::
phpmyadminphpmyadmin4.4.1cpe:/a:phpmyadmin:phpmyadmin:4.4.1:::
phpmyadminphpmyadmin4.4.9cpe:/a:phpmyadmin:phpmyadmin:4.4.9:::
phpmyadminphpmyadmin4.4.6.1cpe:/a:phpmyadmin:phpmyadmin:4.4.6.1:::

Vendor	Product	Version	CPE
phpmyadmin	phpmyadmin	4.4.15.8	cpe:/a:phpmyadmin:phpmyadmin:4.4.15.8:::
phpmyadmin	phpmyadmin	4.4.15.7	cpe:/a:phpmyadmin:phpmyadmin:4.4.15.7:::
phpmyadmin	phpmyadmin	4.4.15.6	cpe:/a:phpmyadmin:phpmyadmin:4.4.15.6:::
phpmyadmin	phpmyadmin	4.4.5	cpe:/a:phpmyadmin:phpmyadmin:4.4.5:::
phpmyadmin	phpmyadmin	4.4.15.4	cpe:/a:phpmyadmin:phpmyadmin:4.4.15.4:::
phpmyadmin	phpmyadmin	4.4.4	cpe:/a:phpmyadmin:phpmyadmin:4.4.4:::
phpmyadmin	phpmyadmin	4.4.15.2	cpe:/a:phpmyadmin:phpmyadmin:4.4.15.2:::
phpmyadmin	phpmyadmin	4.4.1	cpe:/a:phpmyadmin:phpmyadmin:4.4.1:::
phpmyadmin	phpmyadmin	4.4.9	cpe:/a:phpmyadmin:phpmyadmin:4.4.9:::
phpmyadmin	phpmyadmin	4.4.6.1	cpe:/a:phpmyadmin:phpmyadmin:4.4.6.1:::