Описание
Memory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service (memory consumption) by triggering many strtotime function calls, which are not properly handled by the php_date_parse_tzfile cache.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Application Stack v2 for Enterprise Linux | php | Will not fix | ||
| Red Hat Enterprise Linux 4 | php | Will not fix | ||
| Red Hat Enterprise Linux 5 | php | Fixed | RHSA-2012:1045 | 27.06.2012 |
| Red Hat Enterprise Linux 5 | php53 | Fixed | RHSA-2012:1047 | 27.06.2012 |
| Red Hat Enterprise Linux 6 | php | Fixed | RHSA-2012:1046 | 27.06.2012 |
Показывать по
Дополнительная информация
Статус:
4.3 Medium
CVSS2
Связанные уязвимости
Memory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service (memory consumption) by triggering many strtotime function calls, which are not properly handled by the php_date_parse_tzfile cache.
Memory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service (memory consumption) by triggering many strtotime function calls, which are not properly handled by the php_date_parse_tzfile cache.
Memory leak in the timezone functionality in PHP before 5.3.9 allows r ...
Memory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service (memory consumption) by triggering many strtotime function calls, which are not properly handled by the php_date_parse_tzfile cache.
Уязвимость функции timezone интерпретатора языка программирования PHP , позволяющая нарушителю вызвать отказ в обслуживании
4.3 Medium
CVSS2