Описание
The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted interval specification.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 5.5.6+dfsg-1ubuntu1 |
| lucid | released | 5.3.2-1ubuntu4.22 |
| precise | released | 5.3.10-1ubuntu3.9 |
| quantal | released | 5.4.6-1ubuntu1.5 |
| raring | released | 5.4.9-4ubuntu2.4 |
| saucy | released | 5.5.3+dfsg-1ubuntu2.1 |
| upstream | needs-triage |
Показывать по
EPSS
5 Medium
CVSS2
Связанные уязвимости
The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted interval specification.
The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted interval specification.
The scan function in ext/date/lib/parse_iso_intervals.c in PHP through ...
The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted interval specification.
Уязвимость программного обеспечения PHP, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации
EPSS
5 Medium
CVSS2