CVE Vulnerabilities

CVE-2015-4024

Published: Jun 09, 2015 | Modified: Dec 27, 2019
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
5 MODERATE
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V3
Ubuntu
MEDIUM

Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service (CPU consumption) via crafted form data that triggers an improper order-of-growth outcome.

Affected Software

Name Vendor Start Version End Version
Enterprise_linux Redhat 6.0 (including) 6.0 (including)
Enterprise_linux Redhat 7.0 (including) 7.0 (including)
Red Hat Enterprise Linux 6 RedHat php-0:5.3.3-46.el6_6 *
Red Hat Enterprise Linux 7 RedHat php-0:5.4.16-36.el7_1 *
Red Hat Software Collections for Red Hat Enterprise Linux 6 RedHat php55-php-0:5.5.21-4.el6 *
Red Hat Software Collections for Red Hat Enterprise Linux 6 RedHat rh-php56-php-0:5.6.5-7.el6 *
Red Hat Software Collections for Red Hat Enterprise Linux 6 RedHat php54-php-0:5.4.40-3.el6 *
Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUS RedHat php55-php-0:5.5.21-4.el6 *
Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUS RedHat rh-php56-php-0:5.6.5-7.el6 *
Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUS RedHat php54-php-0:5.4.40-3.el6 *
Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUS RedHat php55-php-0:5.5.21-4.el6 *
Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUS RedHat rh-php56-php-0:5.6.5-7.el6 *
Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUS RedHat php54-php-0:5.4.40-3.el6 *
Red Hat Software Collections for Red Hat Enterprise Linux 7 RedHat php55-php-0:5.5.21-4.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7 RedHat rh-php56-php-0:5.6.5-7.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7 RedHat php54-php-0:5.4.40-3.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUS RedHat php55-php-0:5.5.21-4.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUS RedHat rh-php56-php-0:5.6.5-7.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUS RedHat php54-php-0:5.4.40-3.el7 *
Php5 Ubuntu devel *
Php5 Ubuntu precise *
Php5 Ubuntu trusty *
Php5 Ubuntu upstream *
Php5 Ubuntu utopic *
Php5 Ubuntu vivid *

References