CVE-2012-0781

2012-01-1800:00:00

ubuntu.com

php 5.3.8

tidy_diagnose

denial of service

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.041

Percentile

92.2%

JSON

The tidy_diagnose function in PHP 5.3.8 might allow remote attackers to
cause a denial of service (NULL pointer dereference and application crash)
via crafted input to an application that attempts to perform Tidy::diagnose
operations on invalid objects, a different vulnerability than
CVE-2011-4153.

Bugs

<https://bugs.php.net/bug.php?id=54682>

Notes

Author	Note
sbeattie	upstream added a fix for this, but reverted it as it added a regression, and asserts it should be fixed in libtidy
mdeslaur	upstream finally fixed it in r323118

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchphp5< 5.2.4-2ubuntu5.25UNKNOWN
ubuntu10.04noarchphp5< 5.3.2-1ubuntu4.17UNKNOWN
ubuntu11.04noarchphp5< 5.3.5-1ubuntu7.10UNKNOWN
ubuntu11.10noarchphp5< 5.3.6-13ubuntu3.8UNKNOWN
ubuntu12.04noarchphp5< 5.3.10-1ubuntu3.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	php5	< 5.2.4-2ubuntu5.25	UNKNOWN
ubuntu	10.04	noarch	php5	< 5.3.2-1ubuntu4.17	UNKNOWN
ubuntu	11.04	noarch	php5	< 5.3.5-1ubuntu7.10	UNKNOWN
ubuntu	11.10	noarch	php5	< 5.3.6-13ubuntu3.8	UNKNOWN
ubuntu	12.04	noarch	php5	< 5.3.10-1ubuntu3.2	UNKNOWN