NetSight
IP …
medium5.0

CVE-2015-4024

Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6…

Impact

Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service (CPU consumption) via crafted form data that triggers an improper order-of-growth outcome.

Affected products

VendorProductAffected versions
RedhatEnterprise Linux
Versions 6.0, 7.0
AppleMac Os X
through 10.10.4
PhpPhp
through 5.4.40
Versions 5.4.39, 5.5.0, 5.5.1, 5.5.2, 5.5.3
HpSystem Management Homepage
through 7.5.3.1
OracleLinux
Versions 6, 7
OracleSolaris
Version 11.2
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Hpc Node
Version 7.0
RedhatEnterprise Linux Hpc Node Eus
Version 7.1
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Server Eus
Version 7.1
RedhatEnterprise Linux Workstation
Version 7.0

Weakness classification

CWE-399

References