Lucene search
Ubuntu.comUB:CVE-2009-4418HistoryDec 24, 2009 - 12:00 a.m.
CVE-2009-4418
2009-12-2400:00:00
ubuntu.com
ubuntu.com
4
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
41.8%
The unserialize function in PHP 5.3.0 and earlier allows context-dependent
attackers to cause a denial of service (resource consumption) via a deeply
nested serialized variable, as demonstrated by a string beginning with a:1:
followed by many {a:1: sequences.
Notes
| Author | Note |
|---|---|
| mdeslaur | as of 2010/01/04, not fixed yet can only be exploited by a malicious script, not a security issue. Marking as ignored. |
Related
prion
prion
Design/Logic Flaw
2009-12-24 17:30:00
cvelist
cvelist
CVE-2009-4418
2022-10-03 16:24:04
nvd
nvd
CVE-2009-4418
2009-12-24 17:30:00
openvas
openvas
PHP 'unserialize()' Function Denial of Service Vulnerability
2009-12-31 00:00:00
cve
cve
CVE-2009-4418
2022-10-03 16:24:04
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
41.8%
Related for UB:CVE-2009-4418