5.9

CVE-2016-6622

An issue was discovered in phpMyAdmin. An unauthenticated user is able to execute a denial-of-service (DoS) attack by forcing persistent connections when phpMyAdmin is running with $cfg['AllowArbitraryServer']=true. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phpmyadmin ≫ Phpmyadmin Version 4.0.0
Phpmyadmin ≫ Phpmyadmin Version 4.0.1
Phpmyadmin ≫ Phpmyadmin Version 4.0.2
Phpmyadmin ≫ Phpmyadmin Version 4.0.3
Phpmyadmin ≫ Phpmyadmin Version 4.0.4
Phpmyadmin ≫ Phpmyadmin Version 4.0.4.1
Phpmyadmin ≫ Phpmyadmin Version 4.0.4.2
Phpmyadmin ≫ Phpmyadmin Version 4.0.5
Phpmyadmin ≫ Phpmyadmin Version 4.0.6
Phpmyadmin ≫ Phpmyadmin Version 4.0.7
Phpmyadmin ≫ Phpmyadmin Version 4.0.8
Phpmyadmin ≫ Phpmyadmin Version 4.0.9
Phpmyadmin ≫ Phpmyadmin Version 4.0.10
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.1
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.2
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.3
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.4
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.5
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.6
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.7
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.8
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.9
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.10
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.11
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.12
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.13
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.14
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.15
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.16
Phpmyadmin ≫ Phpmyadmin Version 4.4.0
Phpmyadmin ≫ Phpmyadmin Version 4.4.1
Phpmyadmin ≫ Phpmyadmin Version 4.4.1.1
Phpmyadmin ≫ Phpmyadmin Version 4.4.2
Phpmyadmin ≫ Phpmyadmin Version 4.4.3
Phpmyadmin ≫ Phpmyadmin Version 4.4.4
Phpmyadmin ≫ Phpmyadmin Version 4.4.5
Phpmyadmin ≫ Phpmyadmin Version 4.4.6
Phpmyadmin ≫ Phpmyadmin Version 4.4.6.1
Phpmyadmin ≫ Phpmyadmin Version 4.4.7
Phpmyadmin ≫ Phpmyadmin Version 4.4.8
Phpmyadmin ≫ Phpmyadmin Version 4.4.9
Phpmyadmin ≫ Phpmyadmin Version 4.4.10
Phpmyadmin ≫ Phpmyadmin Version 4.4.11
Phpmyadmin ≫ Phpmyadmin Version 4.4.12
Phpmyadmin ≫ Phpmyadmin Version 4.4.13
Phpmyadmin ≫ Phpmyadmin Version 4.4.13.1
Phpmyadmin ≫ Phpmyadmin Version 4.4.14
Phpmyadmin ≫ Phpmyadmin Version 4.4.14.1
Phpmyadmin ≫ Phpmyadmin Version 4.4.15
Phpmyadmin ≫ Phpmyadmin Version 4.4.15.1
Phpmyadmin ≫ Phpmyadmin Version 4.4.15.2
Phpmyadmin ≫ Phpmyadmin Version 4.4.15.3
Phpmyadmin ≫ Phpmyadmin Version 4.4.15.4
Phpmyadmin ≫ Phpmyadmin Version 4.4.15.5
Phpmyadmin ≫ Phpmyadmin Version 4.4.15.6
Phpmyadmin ≫ Phpmyadmin Version 4.4.15.7
Phpmyadmin ≫ Phpmyadmin Version 4.6.0
Phpmyadmin ≫ Phpmyadmin Version 4.6.1
Phpmyadmin ≫ Phpmyadmin Version 4.6.2
Phpmyadmin ≫ Phpmyadmin Version 4.6.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.8% 0.757
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.9 2.2 3.6
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://security.gentoo.org/glsa/201701-32
https://lists.debian.org/debian-lts-announce/2018/07/msg00006.html
http://www.securityfocus.com/bid/95049
https://www.phpmyadmin.net/security/PMASA-2016-45
Patch
Vendor Advisory