Back to search
CVE-2013-6712
Published: Nov 28, 2013
Modified: Aug 6, 2024
PUBLISHED
Description
The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted interval specification.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
DSA-2816
vendor-advisory
x_refsource_DEBIAN
HPSBMU03112
vendor-advisory
x_refsource_HP
https://support.apple.com/HT204659
x_refsource_CONFIRM
openSUSE-SU-2013:1964
vendor-advisory
x_refsource_SUSE
APPLE-SA-2015-04-08-2
vendor-advisory
x_refsource_APPLE
openSUSE-SU-2013:1963
vendor-advisory
x_refsource_SUSE
RHSA-2014:1765
vendor-advisory
x_refsource_REDHAT
SSRT101447
vendor-advisory
x_refsource_HP
USN-2055-1
vendor-advisory
x_refsource_UBUNTU
https://bugs.php.net/bug.php?id=66060
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now