Intrusion PreventionDrupal.Core.xmlrpc.php.Internal.Entity.Expansion.DoS
Description
This indicates an attack attempt to exploit A Denial-Of-Service vulnerability in Drupal Core.
The vulnerability is due to an input validation error when the affected application parses a XML-RPC packet. A remote attacker can exploit this to cause a denial of service condition in the affected application.
Affected Products
Drupal Drupal 6.x prior to 6.33
Drupal Drupal 7.x prior to 7.31
Impact
Denial of Service: Remote attackers can crash vulnerable systems.
Recommended Actions
Apply the latest update from the vendor
https://www.drupal.org/SA-CORE-2014-004
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 39150 |
| Created | Nov 03, 2014 |
| Updated | Jul 07, 2022 |
| Risk |
|
| CVE ID | CVE-2014-5265 |
| Exploit Prediction Score | 43.59% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, BSD, MacOS |
| Affected App | Other |