CVE-2006-4486

Опубликовано: 31 авг. 2006

Источник: nvd

CVSS2: 2.6

EPSS Низкий

Описание

Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction.

Ссылки

ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc
http://rhn.redhat.com/errata/RHSA-2006-0688.html
http://secunia.com/advisories/21546
Vendor Advisory
http://secunia.com/advisories/22004
Vendor Advisory
http://secunia.com/advisories/22069
Vendor Advisory
http://secunia.com/advisories/22225
Vendor Advisory
http://secunia.com/advisories/22331
Vendor Advisory
http://secunia.com/advisories/22440
Vendor Advisory
http://secunia.com/advisories/22487
Vendor Advisory
http://secunia.com/advisories/22538
Vendor Advisory
http://secunia.com/advisories/25945
Vendor Advisory
http://securitytracker.com/id?1016984
http://support.avaya.com/elmodocs2/security/ASA-2006-221.htm
http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm
http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm
http://www.debian.org/security/2007/dsa-1331
http://www.hardened-php.net/hphp/changelog.html#hardening_patch_0.4.14
Patch
http://www.novell.com/linux/security/advisories/2006_52_php.html
http://www.php.net/ChangeLog-5.php#5.1.6
http://www.php.net/release_5_1_6.php
Patch

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*

cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*

cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*

cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*

cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01759

Низкий

2.6 Low

CVSS2

Дефекты

CWE-189

Связанные уязвимости

CVE-2006-4486

ubuntu

почти 19 лет назад

Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction.

CVE-2006-4486

redhat

почти 19 лет назад

Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction.

CVE-2006-4486

debian

почти 19 лет назад

Integer overflow in memory allocation routines in PHP before 5.1.6, wh ...

GHSA-wmm8-4p47-889q

github

около 3 лет назад

Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction.

EPSS

Процентиль: 82%

0.01759

Низкий

2.6 Low

CVSS2

Дефекты

CWE-189