PT-2013-1338 · Php+1 · Php+1

Publicado 2013-06-18 · Atualizado 2013-09-12 · CVE-2013-4635

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.26 PHP versions 5.4.x prior to 5.4.16

Description The issue is related to an integer overflow in the SdnToJewish function, which can cause a denial of service, resulting in an application hang. This can be triggered by providing a large argument to the jdtojewish function. The vulnerability is associated with errors in number processing and can be exploited by a remote attacker to cause a service disruption.

Recommendations For PHP versions prior to 5.3.26, update to version 5.3.26 or later. For PHP versions 5.4.x prior to 5.4.16, update to version 5.4.16 or later.

Correção

DoS

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

BDU:2022-02635

CVE-2013-4635

MGASA-2013-0172

MGASA-2013-0176

Produtos afetados

Php

Suse

Referências · 20

• https://advisories.mageia.org/MGASA-2013-0172.html · Nota de Segurança
• https://bdu.fstec.ru/vul/2022-02635 · Nota de Segurança
• https://bugs.php.net/bug.php?id=64879 · Nota
• https://bugs.php.net/bug.php?id=64895 · Nota
• http://attrition.org/pipermail/vim/2013-June/002697.html · Nota
• https://osv.dev/vulnerability/MGASA-2013-0176 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=10456 · Nota
• https://osv.dev/vulnerability/MGASA-2013-0172 · Aviso do Fabricante
• http://ubuntu.com/usn/USN-1905-1 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00007.html · Aviso do Fabricante
• http://secunia.com/advisories/54104 · Nota
• http://lwn.net/Vulnerabilities/559055 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00034.html · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2013-0176.html · Nota de Segurança
• http://php.net/ChangeLog-5.php · Aviso do Fabricante