Description
Algorithmic complexity vulnerability in wp-trackback.php in WordPress before 2.8.5 allows remote attackers to cause a denial of service (CPU consumption and server hang) via a long title parameter in conjunction with a charset parameter composed of many comma-separated "UTF-8" substrings, related to the mb_convert_encoding function in PHP.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | wordpress | 2.8.5-1 | — |
| Debian 13 | wordpress | 2.8.5-1 | — |
| Debian 12 | wordpress | 2.8.5-1 | — |
References
- 20091019 [Wordpress] Resource Exhaustion (Denial of Service) mailing-list
- http://security-sh3ll.blogspot.com/2009/10/wordpress-resource-exhaustion-denial-of.html
- wordpress-wptrackback-dos(53884) vdb-entry
- [oss-security] 20091021 Re: CVE request: Wordpress Trackback DoS mailing-list
- http://codes.zerial.org/php/wp-trackbacks_dos.phps
- 37088 third-party-advisory
- 59077 vdb-entry
- http://rooibo.wordpress.com/2009/10/17/agujero-de-seguridad-en-wordpress/
- ADV-2009-2986 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=530056
- [oss-security] 20091021 CVE request: Wordpress Trackback DoS mailing-list
- 1023072 vdb-entry
- http://wordpress.org/development/2009/10/wordpress-2-8-5-hardening-release/