| Package | Affected versions | Patched versions |
|---|---|---|
| drupal | ≥ 7.0, < 7.34 | 7.34 |
| secure passwords hashes | ≥ 6.x-2.0, < 6.x-2.1 | 6.x-2.1 |
The password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes (aka phpass) module 6.x-2.x before 6.x-2.1 for Drupal allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free