Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (crash) and possibly read sensitive memory via a large third argument to the shmop_read function.
CVSS Details
- CVSS 3.1 Base Score: 9.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Apache | — | Apply OS X security update 2011-006Upgrade macOS to the latest version | Aug 28, 2015 | Mar 15, 2011 |
| Apple Osx Php | — | Apply OS X security update 2011-006 | Dec 16, 2011 | Mar 15, 2011 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Mar 15, 2011 |
| Php | — | Upgrade to PHP version 5.3.6 | Jul 17, 2012 | Mar 15, 2011 |
| Suse | — | Upgrade php5-xmlwriterUpgrade php8-exifUpgrade php8-tokenizerUpgrade php8-sysvmsgUpgrade php5-sysvshmUpgrade php8-iconvUpgrade apache2-mod_php5Upgrade php7-tokenizerUpgrade php53-mcryptUpgrade php8-dbaUpgrade php5-pcntlUpgrade php5-calendarUpgrade php7-xmlwriterUpgrade php8-xslUpgrade php8-fileinfoUpgrade php53-pgsqlUpgrade php8-opensslUpgrade php53-gmpUpgrade php53-curlUpgrade php8-calendarUpgrade php8-bcmathUpgrade php5-mysqlUpgrade php5-wddxUpgrade php53-suhosinUpgrade php5-pspellUpgrade php53-bcmathUpgrade php5-pgsqlUpgrade php5-zipUpgrade php53-bz2Upgrade php53-ftpUpgrade php7-xmlreaderUpgrade php7-pdoUpgrade php8-embedUpgrade php5-bcmathUpgrade php8-ffiUpgrade php8-snmpUpgrade php7-ctypeUpgrade php53-gettextUpgrade php8-pcntlUpgrade php8-sodiumUpgrade php53-sysvmsgUpgrade php5-develUpgrade php53-pearUpgrade php72-develUpgrade php53-develUpgrade php53-mysqlUpgrade php5-hashUpgrade php7-pgsqlUpgrade php8-cliUpgrade php5-suhosinUpgrade php5-dbaUpgrade php53-fastcgiUpgrade php53-domUpgrade php8-intlUpgrade php53-ldapUpgrade php53-tidyUpgrade php8-sqliteUpgrade php53-pspellUpgrade php5-tokenizerUpgrade php8-zipUpgrade php53-mbstringUpgrade php53-xmlrpcUpgrade php8-fastcgiUpgrade php8-socketsUpgrade php7-iconvUpgrade php5-pdoUpgrade php53-jsonUpgrade php53-dbaUpgrade php5-gettextUpgrade php5-sysvsemUpgrade php5-jsonUpgrade php8-xmlreaderUpgrade php8-gdUpgrade php5-gdUpgrade php8-sysvshmUpgrade php8-posixUpgrade php5Upgrade php53-wddxUpgrade php8-ldapUpgrade php8-gmpUpgrade php5-xslUpgrade php53-zlibUpgrade php53-sysvsemUpgrade php5-mcryptUpgrade php8-zlibUpgrade php5-xmlreaderUpgrade php5-ldapUpgrade php5-opensslUpgrade php5-bz2Upgrade php53-xmlwriterUpgrade php53-socketsUpgrade php53-sysvshmUpgrade php53-readlineUpgrade php8Upgrade php8-enchantUpgrade php5-iconvUpgrade php53-opensslUpgrade php7-jsonUpgrade php5-fastcgiUpgrade php5-gmpUpgrade php53-iconvUpgrade php5-xmlrpcUpgrade php5-domUpgrade php7-sqliteUpgrade php8-pdoUpgrade apache2-mod_php8Upgrade php53-calendarUpgrade php53-imapUpgrade php53-snmpUpgrade php8-shmopUpgrade php53-posixUpgrade php8-mbstringUpgrade php8-ftpUpgrade php8-ctypeUpgrade apache2-mod_php7Upgrade php8-xmlwriterUpgrade apache2-mod_php53Upgrade php53-shmopUpgrade php7-mysqlUpgrade php53-xslUpgrade php53-intlUpgrade php7Upgrade php8-fpmUpgrade php5-shmopUpgrade php8-fpm-apacheUpgrade php8-odbcUpgrade php5-sysvmsgUpgrade php5-snmpUpgrade php5-mbstringUpgrade php5-dbaseUpgrade php8-sysvsemUpgrade php53-ctypeUpgrade php53-pdoUpgrade php8-curlUpgrade php8-pgsqlUpgrade php5-ftpUpgrade php53-xmlreaderUpgrade php8-bz2Upgrade php8-tidyUpgrade php53-fileinfoUpgrade php53-soapUpgrade php8-mysqlUpgrade php5-curlUpgrade php8-domUpgrade php8-pharUpgrade php5-soapUpgrade php5-ctypeUpgrade php8-gettextUpgrade php8-soapUpgrade php53-sqliteUpgrade php8-readlineUpgrade php5-zlibUpgrade php53-tokenizerUpgrade php53-zipUpgrade php5-odbcUpgrade php5-exifUpgrade php7-domUpgrade php8-develUpgrade php8-opcacheUpgrade php53Upgrade php5-pearUpgrade php53-odbcUpgrade php53-pcntlUpgrade php53-gdUpgrade php53-exifUpgrade php7-devel | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade php5-commonUpgrade php5-curlUpgrade php5-cgiUpgrade php5Upgrade php5-cliUpgrade php5-gdUpgrade php5-intlUpgrade php-pearUpgrade libapache2-mod-php5Upgrade php5-dev | Nov 8, 2024 | Mar 15, 2011 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub