Lucene search

K
freebsdFreeBSD5DEF3175-F3F9-4476-BA40-B46627CC638C
HistoryMay 22, 2013 - 12:00 a.m.

PHP5 -- Integer overflow in Calendar module

2013-05-2200:00:00
vuxml.freebsd.org
7

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.032 Low

EPSS

Percentile

91.1%

The PHP development team reports:

Integer overflow in the SdnToJewish function in jewish.c
in the Calendar component in PHP before 5.3.26 and 5.4.x
before 5.4.16 allows context-dependent attackers to cause a
denial of service (application hang) via a large argument to
the jdtojewish function.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchphp5= 5.4.0UNKNOWN
FreeBSDanynoarchphp5< 5.4.16UNKNOWN
FreeBSDanynoarchphp53< 5.3.26UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.032 Low

EPSS

Percentile

91.1%