NetSight
IP …
medium5.1

CVE-2014-4049

Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a denial of service (…

Impact

Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS TXT record, related to the dns_get_record function.

Affected products

VendorProductAffected versions
OpensuseOpensuse
Version 11.3
PhpPhp
from 5.3.0 before 5.3.29
from 5.4.0 before 5.4.30
from 5.5.0 before 5.5.14
Version 5.6.0
DebianDebian Linux
Versions 7.0, 8.0

Weakness classification

CWE-119

References