CVE-2013-4635

2013-06-2100:00:00

ubuntu.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.032 Low

EPSS

Percentile

91.1%

JSON

Integer overflow in the SdnToJewish function in jewish.c in the Calendar
component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows
context-dependent attackers to cause a denial of service (application hang)
via a large argument to the jdtojewish function.

Bugs

<https://bugs.php.net/bug.php?id=64895>

Notes

Author	Note
seth-arnold	codesearch.debian.net shows no callers of this jdtojewish php function. Flaws in PHP itself that allow crashing the interpreter are not in themselves security problems.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchphp5< 5.3.2-1ubuntu4.20UNKNOWN
ubuntu12.04noarchphp5< 5.3.10-1ubuntu3.7UNKNOWN
ubuntu12.10noarchphp5< 5.4.6-1ubuntu1.3UNKNOWN
ubuntu13.04noarchphp5< 5.4.9-4ubuntu2.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	php5	< 5.3.2-1ubuntu4.20	UNKNOWN
ubuntu	12.04	noarch	php5	< 5.3.10-1ubuntu3.7	UNKNOWN
ubuntu	12.10	noarch	php5	< 5.4.6-1ubuntu1.3	UNKNOWN
ubuntu	13.04	noarch	php5	< 5.4.9-4ubuntu2.2	UNKNOWN