Description
lib/exec/fetch.php in DokuWiki before 2006-03-09e allows remote attackers to cause a denial of service (CPU consumption) via large w and h parameters, when resizing an image.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | dokuwiki | 0.0.20060309-5.2 | — |
| Debian 13 | dokuwiki | 0.0.20060309-5.2 | — |
| Debian 12 | dokuwiki | 0.0.20060309-5.2 | — |
References
- ADV-2006-3851 vdb-entry
- GLSA-200609-20 vendor-advisory
- http://bugs.splitbrain.org/?do=details&id=924
- 22192 third-party-advisory
- 22199 third-party-advisory