Candidate: CVE-2013-0316 PublicDate: 2013-03-27 21:55:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0316 http://www.openwall.com/lists/oss-security/2013/02/20 http://drupal.org/SA-CORE-2013-002 Description: The Image module in Drupal 7.x before 7.20 allows remote attackers to cause a denial of service (CPU and disk space consumption) via a large number of new derivative requests. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_drupal7: upstream_drupal7: released (7.20) hardy_drupal7: DNE lucid_drupal7: DNE oneiric_drupal7: DNE precise_drupal7: ignored (reached end-of-life) precise/esm_drupal7: DNE (precise was needed) quantal_drupal7: ignored (reached end-of-life) raring_drupal7: not-affected (7.22-1) saucy_drupal7: not-affected (7.22-1) trusty_drupal7: not-affected (7.22-1) trusty/esm_drupal7: DNE (trusty was not-affected [7.22-1]) utopic_drupal7: not-affected (7.22-1) vivid_drupal7: not-affected (7.22-1) vivid/stable-phone-overlay_drupal7: DNE vivid/ubuntu-core_drupal7: DNE wily_drupal7: not-affected (7.22-1) xenial_drupal7: not-affected (7.22-1) yakkety_drupal7: not-affected (7.22-1) zesty_drupal7: not-affected (7.22-1) devel_drupal7: not-affected (7.22-1)