Lucene search
Ubuntu.comUB:CVE-2011-1148HistoryMar 18, 2011 - 12:00 a.m.
CVE-2011-1148
2011-03-1800:00:00
ubuntu.com
ubuntu.com
11
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.016 Low
EPSS
Percentile
87.1%
Use-after-free vulnerability in the substr_replace function in PHP 5.3.6
and earlier allows context-dependent attackers to cause a denial of service
(memory corruption) or possibly have unspecified other impact by using the
same variable for multiple arguments.
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 6.06 | noarch | php5 | <Β 5.1.2-1ubuntu3.22 | UNKNOWN |
| ubuntu | 8.04 | noarch | php5 | <Β 5.2.4-2ubuntu5.15 | UNKNOWN |
| ubuntu | 9.10 | noarch | php5 | <Β 5.2.10.dfsg.1-2ubuntu6.9 | UNKNOWN |
| ubuntu | 10.04 | noarch | php5 | <Β 5.3.2-1ubuntu4.8 | UNKNOWN |
| ubuntu | 10.10 | noarch | php5 | <Β 5.3.3-1ubuntu9.4 | UNKNOWN |
| ubuntu | 11.04 | noarch | php5 | <Β 5.3.5-1ubuntu7.1 | UNKNOWN |
| ubuntu | 11.10 | noarch | php5 | <Β 5.3.6-13ubuntu1 | UNKNOWN |
Related
prion
prion
Design/Logic Flaw
2011-03-18 15:55:00
seebug
seebug
PHP "substr_replace()"ιζΎειη¨θΏη¨ε
εη ΄εζΌζ΄
2011-03-18 00:00:00
cve
cve
CVE-2011-1148
2011-03-18 15:55:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 01:03:24
openvas
openvas
PHP 'substr_replace()' Use After Free Vulnerability
2011-03-22 00:00:00
FreeBSD Ports: php5, php5-sockets
2011-09-21 00:00:00
Slackware Advisory SSA:2011-237-01 php
2012-09-10 00:00:00
f5
f5
K15441 : PHP vulnerability CVE-2011-1148
2014-08-07 00:00:00
SOL15441 - PHP vulnerability CVE-2011-1148
2014-08-07 00:00:00
freebsd
freebsd
php -- multiple vulnerabilities
2011-08-18 00:00:00
nessus
nessus
Slackware 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 13.37 / current : php (SSA:2011-237-01)
2011-08-26 00:00:00
PHP 5.3 < 5.3.7 Multiple Vulnerabilities
2011-08-23 00:00:00
securityvulns
securityvulns
[slackware-security] php (SSA:2011-237-01)
2011-08-27 00:00:00
PHP multiple security vulnerabilities
2011-08-27 00:00:00
[USN-1126-1] PHP vulnerabilities
2011-05-01 00:00:00
slackware
slackware
[slackware-security] php
2011-08-25 16:35:35
fedora
fedora
[SECURITY] Fedora 15 Update: maniadrive-1.2-32.fc15
2011-09-18 23:00:38
[SECURITY] Fedora 16 Update: php-5.3.8-1.fc16
2011-09-09 17:13:35
[SECURITY] Fedora 14 Update: php-5.3.8-1.fc14
2011-09-18 22:59:22
amazon
amazon
Important: php
2011-10-11 00:07:00
redhat
redhat
(RHSA-2012:0033) Moderate: php security update
2012-01-18 00:00:00
(RHSA-2011:1423) Moderate: php53 and php security update
2011-11-02 00:00:00
oraclelinux
oraclelinux
php security update
2012-01-18 00:00:00
php53 and php security update
2011-11-02 00:00:00
php security update
2012-06-29 00:00:00
centos
centos
php security update
2012-01-18 19:55:58
php53 security update
2011-11-03 03:59:22
osv
osv
php5 - several
2012-02-13 00:00:00
debian
debian
[SECURITY] [DSA 2408-1] php5 security update
2012-02-13 18:15:24
ubuntu
ubuntu
PHP vulnerabilities
2011-04-29 00:00:00
PHP Regressions
2011-05-05 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2011-10-10 00:00:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.016 Low
EPSS
Percentile
87.1%
Related for UB:CVE-2011-1148