strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service (infinite loop) via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU registers, as demonstrated using 2.2250738585072011e-308.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Apache | — | Upgrade macOS to the latest versionApply OS X security update 2011-006 | Aug 28, 2015 | Jan 10, 2011 |
| Apple Osx Php | — | Apply OS X security update 2011-006 | Dec 16, 2011 | Jan 10, 2011 |
| Centos_linux | — | Upgrade php53-cliUpgrade php53-soapUpgrade php53-odbcUpgrade php53-pdoUpgrade php53Upgrade php53-commonUpgrade php53-gdUpgrade php53-snmpUpgrade php53-imapUpgrade php53-xmlUpgrade php53-develUpgrade php53-mbstringUpgrade php53-pspellUpgrade php53-dbaUpgrade php53-processUpgrade php53-intlUpgrade php53-xmlrpcUpgrade php53-ldapUpgrade php53-pgsqlUpgrade php53-mysqlUpgrade php53-bcmath | Dec 1, 2016 | Jan 10, 2011 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 5, 2013 |
| Freebsd | — | Upgrade php5Upgrade php52 | Dec 10, 2025 | Jan 9, 2011 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Jan 10, 2011 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Jan 10, 2011 |
| Oracle_linux | — | Upgrade php53-dbaUpgrade php53-develUpgrade php-mbstringUpgrade php-develUpgrade php-mysqlUpgrade php-odbcUpgrade php53-ldapUpgrade php53-bcmathUpgrade php53-pgsqlUpgrade php-xmlrpcUpgrade php-commonUpgrade php-pgsqlUpgrade php53-processUpgrade php53-mysqlUpgrade php53-intlUpgrade php53-cliUpgrade php-cliUpgrade php-embeddedUpgrade php53-gdUpgrade php-enchantUpgrade php-soapUpgrade php53-mbstringUpgrade php-tidyUpgrade php53Upgrade php53-pspellUpgrade php-xmlUpgrade php-ldapUpgrade php-imapUpgrade php53-soapUpgrade php-pspellUpgrade php-recodeUpgrade php53-odbcUpgrade php53-pdoUpgrade php53-imapUpgrade php-bcmathUpgrade php-processUpgrade php53-commonUpgrade phpUpgrade php-snmpUpgrade php-intlUpgrade php53-xmlUpgrade php53-snmpUpgrade php-dbaUpgrade php-pdoUpgrade php-ztsUpgrade php-gdUpgrade php53-xmlrpc | Oct 16, 2024 | Jan 11, 2011 |
| Php | — | Upgrade to PHP version 5.3.5Upgrade to PHP version 5.2.17 | Jul 17, 2012 | Jan 11, 2011 |
| Suse | — | Upgrade php53-ldapUpgrade php7-xmlwriterUpgrade php7-xmlreaderUpgrade php53-socketsUpgrade php5-bcmathUpgrade php5-sysvshmUpgrade php5-domUpgrade php53-zlibUpgrade php8-pcntlUpgrade php5-develUpgrade php5-mysqlUpgrade php8-pgsqlUpgrade php5-sysvmsgUpgrade php8-snmpUpgrade php8-posixUpgrade php53-snmpUpgrade php5-gdUpgrade php8-ctypeUpgrade php53-jsonUpgrade php5-zipUpgrade php53-calendarUpgrade php5-pspellUpgrade php5-jsonUpgrade php8-zlibUpgrade php8-dbaUpgrade php53-mbstringUpgrade php53-sysvsemUpgrade php5-sysvsemUpgrade php8-opensslUpgrade php5Upgrade php53-sysvshmUpgrade php5-fastcgiUpgrade php8-exifUpgrade php8-sodiumUpgrade php8-sysvsemUpgrade php5-xslUpgrade php5-suhosinUpgrade php8-mbstringUpgrade php5-pdoUpgrade php5-xmlreaderUpgrade php8-fpm-apacheUpgrade php5-pearUpgrade php8-xslUpgrade php5-ldapUpgrade php7-domUpgrade php7-tokenizerUpgrade php8-iconvUpgrade php7-ctypeUpgrade php8-ftpUpgrade php5-gmpUpgrade php53-mcryptUpgrade php53-develUpgrade php8-soapUpgrade php5-opensslUpgrade php5-gettextUpgrade php5-shmopUpgrade php8-tidyUpgrade php8-pharUpgrade php5-iconvUpgrade php53-shmopUpgrade php8-tokenizerUpgrade php53-fileinfoUpgrade php5-hashUpgrade php7-jsonUpgrade php53-odbcUpgrade php53-tidyUpgrade php53-domUpgrade php53-soapUpgrade php8-sysvshmUpgrade php5-xmlrpcUpgrade php8-xmlreaderUpgrade php53-readlineUpgrade php53-ctypeUpgrade php53-sqliteUpgrade php53-sysvmsgUpgrade php8-sqliteUpgrade php5-bz2Upgrade apache2-mod_php7Upgrade php5-curlUpgrade php8-fileinfoUpgrade php5-mcryptUpgrade php8-curlUpgrade php53-bcmathUpgrade php8-fastcgiUpgrade php53-gdUpgrade php8-bcmathUpgrade php8-sysvmsgUpgrade php8-opcacheUpgrade apache2-mod_php53Upgrade php8-pdoUpgrade php53-zipUpgrade php5-ftpUpgrade php53-pdoUpgrade php8-gmpUpgrade php5-zlibUpgrade php5-tokenizerUpgrade php53-xslUpgrade php5-exifUpgrade php5-soapUpgrade php8-develUpgrade php5-pgsqlUpgrade php7-mysqlUpgrade php5-mbstringUpgrade php53-intlUpgrade php53-imapUpgrade php53-fastcgiUpgrade php8-domUpgrade php53-ftpUpgrade php8-ffiUpgrade php53-posixUpgrade php5-calendarUpgrade apache2-mod_php8Upgrade apache2-mod_php5Upgrade php8Upgrade php8-odbcUpgrade php8-gdUpgrade php53-xmlrpcUpgrade php7-pdoUpgrade php53-wddxUpgrade php53Upgrade php5-ctypeUpgrade php7-develUpgrade php5-dbaUpgrade php8-socketsUpgrade php53-xmlwriterUpgrade php53-xmlreaderUpgrade php8-ldapUpgrade php5-pcntlUpgrade php53-iconvUpgrade php53-gmpUpgrade php5-snmpUpgrade php53-pspellUpgrade php53-gettextUpgrade php7-pgsqlUpgrade php8-cliUpgrade php8-fpmUpgrade php5-xmlwriterUpgrade php8-mysqlUpgrade php53-bz2Upgrade php7Upgrade php8-gettextUpgrade php5-dbaseUpgrade php53-tokenizerUpgrade php5-wddxUpgrade php8-enchantUpgrade php7-iconvUpgrade php8-shmopUpgrade php53-dbaUpgrade php53-opensslUpgrade php53-pgsqlUpgrade php53-pearUpgrade php53-mysqlUpgrade php72-develUpgrade php8-intlUpgrade php8-readlineUpgrade php8-calendarUpgrade php7-sqliteUpgrade php8-zipUpgrade php53-curlUpgrade php5-odbcUpgrade php8-embedUpgrade php53-exifUpgrade php53-suhosinUpgrade php8-bz2Upgrade php53-pcntlUpgrade php8-xmlwriter | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade php5-cgiUpgrade php5-cliUpgrade libapache2-mod-php5 | Nov 8, 2024 | Jan 11, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub