CVE-2011-1464

php: Crash by retrieving string value of a variable, when high precision used

Published Mar 20, 2011 CVSS 2.0 · 4.3 Medium EPSS 2.8% KEV · Not listed
Description
Buffer overflow in the strval function in PHP before 5.3.6, when the precision configuration option has a large value, might allow context-dependent attackers to cause a denial of service (application crash) via a small numerical value in the argument.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2408-1 php5 security update
EUVD EUVD EUVD-2011-1469 Buffer overflow in the strval function in PHP before 5.3.6, when the precision configuration option has a large value, might allow context-dependent attackers to cause a denial of service (application crash) via a small numerical value in the argument.
Ubuntu USN Ubuntu USN USN-1126-1 PHP vulnerabilities
History

No history.

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 10:28 PM
Reserved
Mar 19, 2011, 12:00 AM
Status
Modified
Published
Mar 20, 2011, 2:00 AM
Modified
Jun 16, 2026, 11:29 PM
Severity
Public date
Feb 20, 2011, 12:00 AM