CVE-2011-4153
NoneCVSS
—
EPSS
11.8%
Published
Jan 18, 2012
CISA due date
—
The record
PHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that performs strndup operations on untrusted string data, as demonstrated by the define function in zend_builtin_functions.c, and unspecified functions in ext/soap/php_sdl.c, ext/standard/syslog.c, ext/standard/browscap.c, ext/oci8/oci8.c, ext/com_dotnet/com_typeinfo.c, and main/php_open_temporary_file.c.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:6.0 | php5 | 0 | 5.3.3-7+squeeze8 |
| Red Hat:enterprise_linux:5::client_workstation | php | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php-bcmath | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php-cli | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php-common | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php-dba | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php-debuginfo | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php-devel | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php-gd | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php-imap | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php-ldap | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php-mbstring | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php-mysql | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php-ncurses | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php-odbc | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php-pdo | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php-pgsql | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php-snmp | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php-soap | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php-xml | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php-xmlrpc | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php53 | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php53-bcmath | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php53-cli | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php53-common | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php53-dba | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php53-debuginfo | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php53-devel | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php53-gd | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php53-imap | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php53-intl | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php53-ldap | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php53-mbstring | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php53-mysql | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php53-odbc | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php53-pdo | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php53-pgsql | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php53-process | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php53-pspell | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php53-snmp | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php53-soap | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php53-xml | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | php53-xmlrpc | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::server | php | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::server | php-bcmath | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::server | php-cli | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::server | php-common | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::server | php-dba | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::server | php-debuginfo | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::server | php-devel | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::server | php-gd | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::server | php-imap | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::server | php-ldap | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::server | php-mbstring | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::server | php-mysql | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::server | php-ncurses | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::server | php-odbc | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::server | php-pdo | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::server | php-pgsql | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::server | php-snmp | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::server | php-soap | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::server | php-xml | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::server | php-xmlrpc | 0 | 0:5.1.6-39.el5_8 |
| Red Hat:enterprise_linux:5::server | php53 | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::server | php53-bcmath | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::server | php53-cli | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::server | php53-common | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::server | php53-dba | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::server | php53-debuginfo | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::server | php53-devel | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::server | php53-gd | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::server | php53-imap | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::server | php53-intl | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::server | php53-ldap | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::server | php53-mbstring | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::server | php53-mysql | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::server | php53-odbc | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::server | php53-pdo | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::server | php53-pgsql | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::server | php53-process | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::server | php53-pspell | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::server | php53-snmp | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::server | php53-soap | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::server | php53-xml | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:5::server | php53-xmlrpc | 0 | 0:5.3.3-13.el5_8 |
| Red Hat:enterprise_linux:6::client | php | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-bcmath | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-cli | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-common | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-dba | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-debuginfo | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-devel | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-embedded | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-enchant | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-gd | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-imap | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-intl | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-ldap | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-mbstring | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-mysql | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-odbc | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-pdo | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-pgsql | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-process | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-pspell | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-recode | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-snmp | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-soap | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-tidy | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-xml | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-xmlrpc | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::client | php-zts | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-bcmath | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-cli | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-common | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-dba | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-debuginfo | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-devel | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-embedded | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-enchant | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-gd | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-imap | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-intl | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-ldap | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-mbstring | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-mysql | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-odbc | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-pdo | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-pgsql | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-process | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-pspell | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-recode | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-snmp | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-soap | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-tidy | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-xml | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-xmlrpc | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::computenode | php-zts | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-bcmath | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-cli | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-common | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-dba | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-debuginfo | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-devel | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-embedded | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-enchant | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-gd | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-imap | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-intl | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-ldap | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-mbstring | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-mysql | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-odbc | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-pdo | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-pgsql | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-process | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-pspell | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-recode | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-snmp | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-soap | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-tidy | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-xml | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-xmlrpc | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::server | php-zts | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-bcmath | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-cli | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-common | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-dba | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-debuginfo | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-devel | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-embedded | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-enchant | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-gd | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-imap | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-intl | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-ldap | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-mbstring | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-mysql | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-odbc | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-pdo | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-pgsql | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-process | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-pspell | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-recode | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-snmp | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-soap | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-tidy | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-xml | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-xmlrpc | 0 | 0:5.3.3-14.el6_3 |
| Red Hat:enterprise_linux:6::workstation | php-zts | 0 | 0:5.3.3-14.el6_3 |
| openSUSE:Tumbleweed | php5 | 0 | 5.6.28-1.1 |
| openSUSE:Tumbleweed | php7 | 0 | 7.0.14-1.4 |
| openSUSE:Tumbleweed | php8 | 0 | 8.0.11-1.1 |
Related vulnerabilities
- CVE-2015-6834 Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and… Also affects php5
- CVE-2015-5589 The phar_convert_to_other function in ext/phar/phar_object.c in PHP before 5.4.43, 5.5.x… Also affects php5
- CVE-2015-4643 Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x… Also affects php5
- CVE-2015-4602 The __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before… Also affects php5
- CVE-2015-4600 The SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before… Also affects php5
- CVE-2015-4599 The SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before… Also affects php5
- CVE-2015-3411 PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that… Also affects php5
- CVE-2015-6836 The SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before… Also affects php5