PT-2016-2119 · Php+2 · Php+2

Jgeert1

·

Published

2016-05-21

·

Updated

2022-08-29

·

CVE-2015-8879

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.12
Description The issue is related to the odbc bindcols function in PHP, which mishandles driver behavior for SQL WVARCHAR columns. This can be exploited by remote attackers to cause a denial of service (application crash) under certain circumstances, specifically when using the odbc fetch array function to access a particular type of Microsoft SQL Server table.
Recommendations For PHP versions prior to 5.6.12, update to version 5.6.12 or later to resolve the issue. As a temporary workaround, consider restricting the use of the odbc fetch array function when accessing Microsoft SQL Server tables to minimize the risk of exploitation.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2016-01472
CVE-2015-8879
DLA-499-1
OPENSUSE-SU-2016_1553-1
RHSA-2016:2750
SUSE-SU-2016:1581-1
SUSE-SU-2016:1633-1
SUSE-SU-2016:1638-1

Affected Products

Sql Server
Php
Suse