Unrated severityNVD Advisory· Published Apr 13, 2015· Updated Jun 17, 2026
CVE-2015-2936
CVE-2015-2936
Description
MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service (CPU consumption) via a long password.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
7- lists.wikimedia.org/pipermail/mediawiki-announce/2015-March/000175.htmlnvdPatchVendor Advisory
- www.mandriva.com/security/advisoriesnvd
- www.openwall.com/lists/oss-security/2015/04/01/1nvd
- www.openwall.com/lists/oss-security/2015/04/07/3nvd
- www.securityfocus.com/bid/73477nvd
- phabricator.wikimedia.org/T64685nvd
- security.gentoo.org/glsa/201510-05nvd
News mentions
0No linked articles in our index yet.