PT-2013-1338 · Php+1 · Php+1

Published 2013-06-18 · Updated 2013-09-12 · CVE-2013-4635

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.26 PHP versions 5.4.x prior to 5.4.16

Description The issue is related to an integer overflow in the SdnToJewish function, which can cause a denial of service, resulting in an application hang. This can be triggered by providing a large argument to the jdtojewish function. The vulnerability is associated with errors in number processing and can be exploited by a remote attacker to cause a service disruption.

Recommendations For PHP versions prior to 5.3.26, update to version 5.3.26 or later. For PHP versions 5.4.x prior to 5.4.16, update to version 5.4.16 or later.

Fix

DoS

Weakness Enumeration

CWE-189

Related Identifiers

BDU:2022-02635

CVE-2013-4635

MGASA-2013-0172

MGASA-2013-0176

Affected Products

Php

Suse

References · 20

• https://advisories.mageia.org/MGASA-2013-0172.html · Security Note
• https://bdu.fstec.ru/vul/2022-02635 · Security Note
• https://osv.dev/vulnerability/MGASA-2013-0176 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2013-0172 · Vendor Advisory
• http://ubuntu.com/usn/USN-1905-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00007.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00034.html · Vendor Advisory
• https://advisories.mageia.org/MGASA-2013-0176.html · Security Note
• http://php.net/ChangeLog-5.php · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00006.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-4635 · Security Note
• https://bugs.php.net/bug.php?id=64879 · Note
• https://bugs.php.net/bug.php?id=64895 · Note
• http://attrition.org/pipermail/vim/2013-June/002697.html · Note
• https://bugs.mageia.org/show_bug.cgi?id=10456 · Note