Uncontrolled Resource Consumption ('Resource Exhaustion') Affecting phpmyadmin/phpmyadmin package, versions >=4.0, <4.0.10.17 >=4.4, <4.4.15.8 >=4.6, <4.6.4
Snyk CVSS
Attack Complexity
High
Availability
High
Threat Intelligence
EPSS
0.54% (78th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PHP-PHPMYADMINPHPMYADMIN-6673803
- published 25 Apr 2024
- disclosed 17 May 2022
- credit Emanuel Bronshtein
Introduced: 17 May 2022
CVE-2016-6632 Open this link in a new tabHow to fix?
Upgrade phpmyadmin/phpmyadmin to version 4.0.10.17, 4.4.15.8, 4.6.4 or higher.
Overview
phpmyadmin/phpmyadmin is a web interface for MySQL and MariaDB.
Affected versions of this package are vulnerable to Uncontrolled Resource Consumption ('Resource Exhaustion') due to the improper handling of temporary files during the import of ESRI files. An attacker can cause a denial of service by exploiting the failure to delete temporary files under certain conditions.
Note: This doesn't compile with PHP7.