Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m6h3-3xr9-pp23

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via an MP3 file that triggers incorrect MIME type detection during access to an finfo object.

The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via an MP3 file that triggers incorrect MIME type detection during access to an finfo object.

EPSS

Процентиль: 58%
0.00364
Низкий

Дефекты

CWE-20

Связанные уязвимости

ubuntu
около 12 лет назад

The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via an MP3 file that triggers incorrect MIME type detection during access to an finfo object.

redhat
больше 12 лет назад

The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via an MP3 file that triggers incorrect MIME type detection during access to an finfo object.

nvd
около 12 лет назад

The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via an MP3 file that triggers incorrect MIME type detection during access to an finfo object.

debian
около 12 лет назад

The mget function in libmagic/softmagic.c in the Fileinfo component in ...

CVSS3: 3.7
fstec
около 12 лет назад

Уязвимость функции mget интерпретатора языка программирования PHP, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 58%
0.00364
Низкий

Дефекты

CWE-20