Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a large integer in the first argument to the cal_from_jd function.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Apache | — | Apply OS X security update 2011-006Upgrade macOS to the latest version | Aug 28, 2015 | Mar 19, 2011 |
| Apple Osx Php | — | Apply OS X security update 2011-006 | Dec 16, 2011 | Mar 19, 2011 |
| Centos_linux | — | Upgrade php-commonUpgrade php53-bcmathUpgrade php-dbaUpgrade php53-dbaUpgrade phpUpgrade php-pdoUpgrade php53-mysqlUpgrade php53-snmpUpgrade php-pgsqlUpgrade php53-ldapUpgrade php53-pgsqlUpgrade php-ncursesUpgrade php53-cliUpgrade php53-pdoUpgrade php53-pspellUpgrade php53-imapUpgrade php53-gdUpgrade php-imapUpgrade php-domxmlUpgrade php-ldapUpgrade php-soapUpgrade php53-odbcUpgrade php-odbcUpgrade php53-processUpgrade php-bcmathUpgrade php53-xmlrpcUpgrade php53-mbstringUpgrade php-snmpUpgrade php-mbstringUpgrade php53-commonUpgrade php-develUpgrade php-xmlrpcUpgrade php-xmlUpgrade php53-intlUpgrade php-cliUpgrade php53-soapUpgrade php53-develUpgrade php-mysqlUpgrade php-gdUpgrade php53-xmlUpgrade php-pearUpgrade php53 | Dec 1, 2016 | Mar 19, 2011 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Mar 19, 2011 |
| Oracle_linux | — | Upgrade php-pgsqlUpgrade php-embeddedUpgrade php53-xmlrpcUpgrade php53-imapUpgrade php-gdUpgrade php-enchantUpgrade php53-mysqlUpgrade php53-develUpgrade php-mysqlUpgrade php53-mbstringUpgrade php-ncursesUpgrade php-odbcUpgrade php53Upgrade php53-bcmathUpgrade php-dbaUpgrade php-processUpgrade php53-gdUpgrade php-pspellUpgrade php-intlUpgrade php-mbstringUpgrade php53-intlUpgrade php-ldapUpgrade php-pdoUpgrade php53-dbaUpgrade php-soapUpgrade php53-pgsqlUpgrade php53-pdoUpgrade php-develUpgrade php-bcmathUpgrade php53-xmlUpgrade php53-pspellUpgrade php-ztsUpgrade php-commonUpgrade php-cliUpgrade php-xmlrpcUpgrade php-xmlUpgrade php53-odbcUpgrade php53-cliUpgrade php53-processUpgrade php-recodeUpgrade php53-snmpUpgrade php53-ldapUpgrade php53-commonUpgrade php53-soapUpgrade php-tidyUpgrade php-snmpUpgrade phpUpgrade php-imap | Oct 16, 2024 | Mar 20, 2011 |
| Php | — | Upgrade to PHP version 5.3.6 | Oct 1, 2012 | Mar 19, 2011 |
| Suse | — | Upgrade php53-xslUpgrade php7-xmlwriterUpgrade php8-ffiUpgrade php53-develUpgrade php8-embedUpgrade php7-tokenizerUpgrade php8-enchantUpgrade php7-ctypeUpgrade php53-opensslUpgrade php53-pspellUpgrade php8-domUpgrade php8-sysvshmUpgrade php8-sqliteUpgrade php8-gettextUpgrade php8-bz2Upgrade php53-exifUpgrade php53-xmlwriterUpgrade php8-shmopUpgrade php8-calendarUpgrade php53-intlUpgrade php8-pdoUpgrade php8-zipUpgrade php7-develUpgrade php8-gdUpgrade php53-xmlrpcUpgrade php53-pgsqlUpgrade php53-dbaUpgrade php8-sodiumUpgrade php8-pgsqlUpgrade php53-pearUpgrade php7-mysqlUpgrade php8-ctypeUpgrade php8-sysvsemUpgrade php8-ldapUpgrade php8-soapUpgrade php8-readlineUpgrade php8-opcacheUpgrade php53-domUpgrade php8-exifUpgrade php53-mysqlUpgrade apache2-mod_php8Upgrade php72-develUpgrade php53-gmpUpgrade apache2-mod_php53Upgrade php53-fastcgiUpgrade php53-jsonUpgrade php53-bz2Upgrade php8-intlUpgrade php53-tokenizerUpgrade php8-socketsUpgrade php8-bcmathUpgrade php7-xmlreaderUpgrade php53-socketsUpgrade php8-iconvUpgrade php8-sysvmsgUpgrade php53-fileinfoUpgrade php53-snmpUpgrade php8-odbcUpgrade php53-suhosinUpgrade php8-opensslUpgrade php53-curlUpgrade php53-calendarUpgrade php53-tidyUpgrade php8-xmlwriterUpgrade php53-zlibUpgrade php8-fileinfoUpgrade php8-tidyUpgrade php53-mbstringUpgrade php53-iconvUpgrade php8-curlUpgrade php53-xmlreaderUpgrade php53Upgrade php53-gettextUpgrade php8-cliUpgrade php8-posixUpgrade php53-pdoUpgrade php8-fastcgiUpgrade php8-xmlreaderUpgrade php8-fpm-apacheUpgrade php53-ldapUpgrade php7-jsonUpgrade php8-mysqlUpgrade php53-ftpUpgrade php8-pharUpgrade php53-shmopUpgrade php53-sqliteUpgrade php53-bcmathUpgrade php8-ftpUpgrade php53-imapUpgrade php53-sysvsemUpgrade php7Upgrade php53-gdUpgrade php53-wddxUpgrade php53-soapUpgrade apache2-mod_php7Upgrade php53-sysvmsgUpgrade php53-sysvshmUpgrade php8-develUpgrade php8-mbstringUpgrade php8-xslUpgrade php8-tokenizerUpgrade php7-pdoUpgrade php8-snmpUpgrade php8-gmpUpgrade php8-zlibUpgrade php5-develUpgrade php8-fpmUpgrade php53-mcryptUpgrade php8-dbaUpgrade php53-readlineUpgrade php8-pcntlUpgrade php7-iconvUpgrade php53-zipUpgrade php53-odbcUpgrade php7-sqliteUpgrade php53-posixUpgrade php7-domUpgrade php8Upgrade php53-pcntlUpgrade php53-ctypeUpgrade php7-pgsql | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade php5-cgiUpgrade php5-gdUpgrade php5-cliUpgrade php5-devUpgrade libapache2-mod-php5Upgrade php5-curlUpgrade php5-intlUpgrade php-pearUpgrade php5Upgrade php5-common | Nov 8, 2024 | Mar 20, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub