PHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the out_charset parameter to the iconv function; or a long string in the charset parameter to the (2) iconv_mime_decode_headers, (3) iconv_mime_decode, or (4) iconv_strlen function. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade glibc | Jul 30, 2024 | Sep 12, 2007 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Sep 12, 2007 |
| Php | — | Upgrade to PHP version 5.2.5 | Oct 1, 2012 | Sep 12, 2007 |
| Php Fixed Iconv Functions To Limit Argument Sizes | — | Upgrade to PHP version 5.2.5 | Sep 16, 2010 | Sep 12, 2007 |
| Suse | — | Upgrade php53-gmpUpgrade php8-ftpUpgrade php5-xmlreaderUpgrade php8-dbaUpgrade php5-mcryptUpgrade php8-iconvUpgrade php53-mysqlUpgrade php5-mysqlUpgrade php5-jsonUpgrade php8-cliUpgrade php8-xslUpgrade php5-gmpUpgrade php53-snmpUpgrade php5-suhosinUpgrade php53-pdoUpgrade php5-gettextUpgrade php5-bcmathUpgrade php5Upgrade php53-ftpUpgrade php53-fastcgiUpgrade php53-shmopUpgrade php5-calendarUpgrade php53-bcmathUpgrade php5-hashUpgrade php53-pgsqlUpgrade php8-develUpgrade php8-socketsUpgrade php53-jsonUpgrade php53-bz2Upgrade php8-embedUpgrade php53-pearUpgrade php53-tidyUpgrade php8-posixUpgrade php53-suhosinUpgrade php8-fastcgiUpgrade php53-mbstringUpgrade php53-dbaUpgrade php8-zipUpgrade php53-calendarUpgrade php53-odbcUpgrade php8-tidyUpgrade php5-sysvshmUpgrade php53-socketsUpgrade php8-opensslUpgrade php8-sysvmsgUpgrade php53-sysvshmUpgrade php53-mcryptUpgrade apache2-mod_php5Upgrade php8-zlibUpgrade php5-pdoUpgrade php53-sqliteUpgrade php53-readlineUpgrade php5-fastcgiUpgrade php53-ldapUpgrade php8-odbcUpgrade php5-wddxUpgrade php8-mysqlUpgrade php8-pcntlUpgrade php8-snmpUpgrade php8-soapUpgrade php5-odbcUpgrade php5-bz2Upgrade php8-fileinfoUpgrade php5-ldapUpgrade php5-soapUpgrade php8-exifUpgrade php8-mbstringUpgrade php8-xmlreaderUpgrade php53-wddxUpgrade php8-tokenizerUpgrade php5-pspellUpgrade php5-sysvsemUpgrade php5-pcntlUpgrade php5-opensslUpgrade php5-gdUpgrade php8-ffiUpgrade php5-ftpUpgrade php53-tokenizerUpgrade php53-iconvUpgrade php8-calendarUpgrade php8-domUpgrade php8-ldapUpgrade php8-sysvsemUpgrade php5-curlUpgrade php53-pspellUpgrade php5-xmlwriterUpgrade php8-bcmathUpgrade php5-mbstringUpgrade php5-dbaseUpgrade php53-sysvsemUpgrade php5-shmopUpgrade php5-domUpgrade php53-fileinfoUpgrade php5-pearUpgrade php8-pdoUpgrade php53-intlUpgrade php53Upgrade php53-imapUpgrade php8-gdUpgrade php53-zipUpgrade php8-gettextUpgrade php8-enchantUpgrade php53-domUpgrade php5-ctypeUpgrade php8-pgsqlUpgrade php8-pharUpgrade php5-xmlrpcUpgrade php53-gettextUpgrade php53-xmlrpcUpgrade php53-posixUpgrade php5-xslUpgrade php5-zipUpgrade php5-exifUpgrade php5-iconvUpgrade php8-opcacheUpgrade php53-exifUpgrade php53-develUpgrade php5-sysvmsgUpgrade php53-pcntlUpgrade php8-sodiumUpgrade php53-opensslUpgrade php53-soapUpgrade php5-zlibUpgrade php53-ctypeUpgrade php53-xmlwriterUpgrade php5-tokenizerUpgrade php5-pgsqlUpgrade php8-xmlwriterUpgrade php8-bz2Upgrade php8Upgrade php5-snmpUpgrade php8-ctypeUpgrade php53-zlibUpgrade apache2-mod_php53Upgrade php8-readlineUpgrade php8-sysvshmUpgrade php8-gmpUpgrade php8-shmopUpgrade php53-xslUpgrade php5-dbaUpgrade php8-sqliteUpgrade php8-intlUpgrade apache2-mod_php8Upgrade php53-xmlreaderUpgrade php8-curlUpgrade php53-curlUpgrade php8-fpm-apacheUpgrade php53-gdUpgrade php53-sysvmsgUpgrade php8-fpm | Feb 17, 2015 | Jul 9, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub