PT-2010-3540 · Php+1 · Php+1
Published
2010-05-12
·
Updated
2017-08-17
·
CVE-2010-1917
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
PHP versions 5.2 through 5.2.13
PHP versions 5.3 through 5.3.2
Description
A stack consumption issue allows context-dependent attackers to cause a denial of service, resulting in a PHP crash, by providing a crafted first argument to the
fnmatch function, such as a long string.Recommendations
For PHP versions 5.2 through 5.2.13, update to a version outside of this range to resolve the issue.
For PHP versions 5.3 through 5.3.2, update to a version outside of this range to resolve the issue.
As a temporary workaround, consider restricting the use of the
fnmatch function with untrusted input until a patch is available.Exploit
Fix
DoS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Php
Red Hat