PHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the out_charset parameter to the iconv function; or a long string in the charset parameter to the (2) iconv_mime_decode_headers, (3) iconv_mime_decode, or (4) iconv_strlen function. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade glibc | Jul 30, 2024 | Sep 12, 2007 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Sep 12, 2007 |
| Php | — | Upgrade to PHP version 5.2.5 | Oct 1, 2012 | Sep 12, 2007 |
| Php Fixed Iconv Functions To Limit Argument Sizes | — | Upgrade to PHP version 5.2.5 | Sep 16, 2010 | Sep 12, 2007 |
| Suse | — | Upgrade php53-mysqlUpgrade apache2-mod_php5Upgrade php5Upgrade php53-wddxUpgrade php53-bcmathUpgrade php53-shmopUpgrade php53-pdoUpgrade php5-bz2Upgrade php5-opensslUpgrade php8-socketsUpgrade php5-soapUpgrade php5-gdUpgrade php8-zlibUpgrade php53-socketsUpgrade php53-odbcUpgrade php8-opensslUpgrade php8-embedUpgrade php53-pearUpgrade php8-zipUpgrade php53-bz2Upgrade php53-mbstringUpgrade php53-suhosinUpgrade php5-bcmathUpgrade php8-dbaUpgrade php8-ftpUpgrade php5-sysvshmUpgrade php8-iconvUpgrade php53-mcryptUpgrade php5-mysqlUpgrade php8-exifUpgrade php8-pcntlUpgrade php5-gmpUpgrade php8-xslUpgrade php53-snmpUpgrade php8-tokenizerUpgrade php53-jsonUpgrade php53-tidyUpgrade php5-calendarUpgrade php53-sysvshmUpgrade php53-calendarUpgrade php5-wddxUpgrade php53-pgsqlUpgrade php8-posixUpgrade php53-dbaUpgrade php53-readlineUpgrade php53-sqliteUpgrade php8-soapUpgrade php8-develUpgrade php8-mysqlUpgrade php5-mcryptUpgrade php8-cliUpgrade php5-jsonUpgrade php5-pdoUpgrade php8-mbstringUpgrade php53-gmpUpgrade php5-gettextUpgrade php8-snmpUpgrade php5-pspellUpgrade php5-suhosinUpgrade php8-fileinfoUpgrade php5-ldapUpgrade php5-pcntlUpgrade php5-sysvsemUpgrade php8-odbcUpgrade php5-hashUpgrade php8-xmlreaderUpgrade php53-ldapUpgrade php53-ftpUpgrade php8-tidyUpgrade php5-fastcgiUpgrade php53-fastcgiUpgrade php8-fastcgiUpgrade php5-xmlreaderUpgrade php5-odbcUpgrade php8-sysvmsgUpgrade php8-sysvsemUpgrade php8-pharUpgrade php8-pgsqlUpgrade php53-soapUpgrade php8-domUpgrade php53-zipUpgrade php53-zlibUpgrade php8-bz2Upgrade php8-curlUpgrade php5-zlibUpgrade php53-xslUpgrade php5-domUpgrade php8-xmlwriterUpgrade php53-pspellUpgrade php8-bcmathUpgrade php8-sysvshmUpgrade php53-fileinfoUpgrade apache2-mod_php53Upgrade php8-gmpUpgrade php53-ctypeUpgrade php53-pcntlUpgrade php8-gettextUpgrade php53Upgrade php5-snmpUpgrade php8Upgrade php53-posixUpgrade php8-calendarUpgrade php53-gettextUpgrade php5-curlUpgrade php5-dbaseUpgrade php8-fpm-apacheUpgrade php8-enchantUpgrade php5-ctypeUpgrade php5-shmopUpgrade php8-ctypeUpgrade php53-opensslUpgrade php5-pgsqlUpgrade php53-sysvsemUpgrade php53-xmlreaderUpgrade php5-zipUpgrade php53-exifUpgrade php53-xmlrpcUpgrade php53-gdUpgrade php53-domUpgrade php8-opcacheUpgrade apache2-mod_php8Upgrade php53-intlUpgrade php53-imapUpgrade php5-xmlwriterUpgrade php8-sodiumUpgrade php8-ldapUpgrade php5-exifUpgrade php8-fpmUpgrade php53-iconvUpgrade php5-pearUpgrade php5-tokenizerUpgrade php8-ffiUpgrade php5-ftpUpgrade php5-xslUpgrade php8-gdUpgrade php5-mbstringUpgrade php53-develUpgrade php5-xmlrpcUpgrade php5-sysvmsgUpgrade php53-sysvmsgUpgrade php8-readlineUpgrade php8-intlUpgrade php8-shmopUpgrade php53-tokenizerUpgrade php53-curlUpgrade php8-pdoUpgrade php8-sqliteUpgrade php5-iconvUpgrade php53-xmlwriterUpgrade php5-dba | Feb 17, 2015 | Jul 9, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub