CVE-2012-5704 | Vulnerability Database | Aqua Security

The Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the administer hotblocks permission to cause a denial of service (infinite loop and time out) via a block that references itself.

Affected Software

Name	Vendor	Start Version	End Version
Hotblocks	Justin_dodge	6.x-1.5 (including)	6.x-1.5 (including)
Hotblocks	Justin_dodge	6.x-1.6 (including)	6.x-1.6 (including)
Hotblocks	Justin_dodge	6.x-1.7 (including)	6.x-1.7 (including)
Hotblocks	Justin_dodge	6.x-1.x-dev (including)	6.x-1.x-dev (including)

References

http://drupal.org/node/1732828
http://drupal.org/node/1732946
http://www.madirish.net/543
http://www.openwall.com/lists/oss-security/2012/10/04/6
http://www.openwall.com/lists/oss-security/2012/10/07/1
http://drupal.org/node/1732828
http://drupal.org/node/1732946
http://www.madirish.net/543
http://www.openwall.com/lists/oss-security/2012/10/04/6
http://www.openwall.com/lists/oss-security/2012/10/07/1

NVD	https://nvd.nist.gov/vuln/detail/CVE-2012-5704
CWE	https://cwe.mitre.org/data/definitions/399.html