Описание
The build_tablename function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP through 5.6.7 does not validate token extraction for table names, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted name.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 5.6.4+dfsg-4ubuntu2 |
| esm-infra-legacy/trusty | not-affected | 5.5.9+dfsg-1ubuntu4.6 |
| lucid | not-affected | code not present |
| precise | not-affected | code not present |
| trusty | released | 5.5.9+dfsg-1ubuntu4.6 |
| trusty/esm | not-affected | 5.5.9+dfsg-1ubuntu4.6 |
| upstream | needs-triage | |
| utopic | released | 5.5.12+dfsg-2ubuntu4.2 |
Показывать по
5 Medium
CVSS2
Связанные уязвимости
The build_tablename function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP through 5.6.7 does not validate token extraction for table names, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted name.
The build_tablename function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP through 5.6.7 does not validate token extraction for table names, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted name.
The build_tablename function in pgsql.c in the PostgreSQL (aka pgsql) ...
The build_tablename function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP through 5.6.7 does not validate token extraction for table names, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted name.
Уязвимость функция build_tablename (pgsql.c) интерпретатора языка программирования PHP, позволяющая нарушителю вызвать отказ в обслуживании
5 Medium
CVSS2