Design/Logic Flaw

2010-05-2722:30:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.1%

JSON

Use-after-free vulnerability in the request shutdown functionality in PHP 5.2 before 5.2.13 and 5.3 before 5.3.2 allows context-dependent attackers to cause a denial of service (crash) via a stream context structure that is freed before destruction occurs.

CPENameOperatorVersion
phpeq5.2.9
phpeq5.3.1
phpeq5.2.7
phpeq5.2.2
phpeq5.2.5
phpeq5.2.12
phpeq5.2.11
phpeq5.2.6
phpeq5.3.0
phpeq5.2.3

Name	Operator	Version
php	eq	5.2.9
php	eq	5.3.1
php	eq	5.2.7
php	eq	5.2.2
php	eq	5.2.5
php	eq	5.2.12
php	eq	5.2.11
php	eq	5.2.6
php	eq	5.3.0
php	eq	5.2.3

Rows per page:

1-10 of 151

References

lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html

lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html

php-security.org/2010/05/12/mops-2010-022-php-stream-context-use-after-free-on-request-shutdown-vulnerability/index.html