Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2009-1271

Опубликовано: 19 дек. 2008
Источник: redhat
CVSS2: 4.3
EPSS Низкий

Описание

The JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x before 5.2.9 allows remote attackers to cause a denial of service (segmentation fault) via a malformed string to the json_decode API function.

Отчет

This issue did not affect PHP versions as shipped in Red Hat Enterprise Linux 2.1, 3, 4, and 5, and Red Hat Application Stack v1.

Дополнительная информация

Статус:

Low
https://bugzilla.redhat.com/show_bug.cgi?id=494530php: crash on malformed input in json_decode()

EPSS

Процентиль: 92%
0.08804
Низкий

4.3 Medium

CVSS2

Связанные уязвимости

ubuntu
больше 16 лет назад

The JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x before 5.2.9 allows remote attackers to cause a denial of service (segmentation fault) via a malformed string to the json_decode API function.

nvd
больше 16 лет назад

The JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x before 5.2.9 allows remote attackers to cause a denial of service (segmentation fault) via a malformed string to the json_decode API function.

debian
больше 16 лет назад

The JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x before ...

github
больше 3 лет назад

The JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x before 5.2.9 allows remote attackers to cause a denial of service (segmentation fault) via a malformed string to the json_decode API function.

EPSS

Процентиль: 92%
0.08804
Низкий

4.3 Medium

CVSS2