Lucene search

K
f5F5F5:K15169
HistoryMay 14, 2015 - 12:00 a.m.

K15169 : PHP vulnerability CVE-2013-4113

2015-05-1400:00:00
my.f5.com
15

7.7 High

AI Score

Confidence

High

0.614 Medium

EPSS

Percentile

97.8%

Security Advisory Description

ext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted document that is processed by the xml_parse_into_struct function. (CVE-2013-4113)

Impact

Authenticated users accessing the Configuration utility may be able to cause a denial-of-service (DoS) by sending crafted XML requests.