Описание
ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | php | Will not fix | ||
| Red Hat Enterprise Linux 5 | php53 | Will not fix | ||
| Red Hat Enterprise Linux 6 | php | Will not fix | ||
| Red Hat Enterprise Linux 7 | php | Will not fix | ||
| Red Hat OpenShift Enterprise 2 | php | Will not fix | ||
| Red Hat Software Collections | rh-php56-php | Will not fix | ||
| Red Hat Software Collections for Red Hat Enterprise Linux 6 | rh-php70-php | Fixed | RHSA-2018:1296 | 03.05.2018 |
| Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUS | rh-php70-php | Fixed | RHSA-2018:1296 | 03.05.2018 |
| Red Hat Software Collections for Red Hat Enterprise Linux 7 | rh-php70-php | Fixed | RHSA-2018:1296 | 03.05.2018 |
| Red Hat Software Collections for Red Hat Enterprise Linux 7.3 EUS | rh-php70-php | Fixed | RHSA-2018:1296 | 03.05.2018 |
Показывать по
Дополнительная информация
Статус:
EPSS
4.3 Medium
CVSS3
4.3 Medium
CVSS2
Связанные уязвимости
ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string.
ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string.
ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remo ...
ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string.
Уязвимость компонента ext/wddx/wddx.c интерпретатора языка программирования PHP, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
4.3 Medium
CVSS3
4.3 Medium
CVSS2