PT-2012-1814 · Php+4 · Php+4
Maksymilian Arciemowicz
·
Published
2012-01-18
·
Updated
2024-06-15
·
CVE-2011-4153
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
PHP version 5.3.8
Description
The issue is related to the zend strndup function not always checking its return value, potentially allowing remote attackers to cause a denial of service through a NULL pointer dereference and application crash. This could be achieved by providing crafted input to an application that performs strndup operations on untrusted string data. The affected functions include the define function in zend builtin functions.c, and unspecified functions in ext/soap/php sdl.c, ext/standard/syslog.c, ext/standard/browscap.c, ext/oci8/oci8.c, ext/com dotnet/com typeinfo.c, and main/php open temporary file.c.
Recommendations
For PHP version 5.3.8, consider updating to a newer version to mitigate the risk, as the current version does not properly handle return values from the zend strndup function, leading to potential denial of service attacks.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Centos
Hp-Ux
Php
Red Hat
Suse