blogsafe.org My Downloads

BlogSafe.org

PHP CVEs

Vulnerabilities in the PHP language itself, and which PHP versions they affect.

← Back to CVE list

CVE-2015-4024

MEDIUM 5.0 CVSS 2.0
Published
June 9, 2015
Last modified
June 17, 2026
NVD status
Modified
Reported by
cve@mitre.org
Weakness
CWE-399
CVSS vector
AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service (CPU consumption) via crafted form data that triggers an improper order-of-growth outcome.

Affected products and versions

  • PHP — Up to and including 5.4.40
  • PHP versions 5.4.39, 5.5.0, 5.5.0alpha1, 5.5.0alpha2, 5.5.0alpha3, 5.5.0alpha4, 5.5.0alpha5, 5.5.0alpha6, 5.5.0beta1, 5.5.0beta2, 5.5.0beta3, 5.5.0beta4, 5.5.0rc1, 5.5.0rc2, 5.5.1, 5.5.2, 5.5.3, 5.5.4, 5.5.5, 5.5.6, 5.5.7, 5.5.8, 5.5.9, 5.5.10, 5.5.11, 5.5.12, 5.5.13, 5.5.14, 5.5.18, 5.5.19, 5.5.20, 5.5.21, 5.5.22, 5.5.23, 5.5.24, 5.6.0alpha1, 5.6.0alpha2, 5.6.0alpha3, 5.6.0alpha4, 5.6.0alpha5, 5.6.0beta1, 5.6.0beta2, 5.6.0beta3, 5.6.0beta4, 5.6.2, 5.6.3, 5.6.4, 5.6.5, 5.6.6, 5.6.7, 5.6.8

References

  • lists.apple.com http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html Mailing List, Third Party Advisory
  • lists.fedoraproject.org http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html
  • lists.fedoraproject.org http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html
  • lists.fedoraproject.org http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html
  • lists.opensuse.org http://lists.opensuse.org/opensuse-updates/2015-06/msg00002.html
  • php.net http://php.net/ChangeLog-5.php Patch
  • rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2015-1135.html Third Party Advisory
  • rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2015-1186.html
  • rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2015-1187.html Third Party Advisory
  • rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2015-1218.html
  • rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2015-1219.html
  • www.debian.org http://www.debian.org/security/2015/dsa-3280
  • www.oracle.com http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html Third Party Advisory
  • www.oracle.com http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html Third Party Advisory
  • www.securityfocus.com http://www.securityfocus.com/bid/74903
  • www.securitytracker.com http://www.securitytracker.com/id/1032432
  • bugs.php.net https://bugs.php.net/bug.php?id=69364 Exploit, Patch
  • h20566.www2.hpe.com https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763 Third Party Advisory
  • support.apple.com https://support.apple.com/kb/HT205031
  • nvd.nist.gov Official NVD record