NVD

Id
41625  
Name
CVE-2013-6712  
Description
The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted interval specification.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-11-27  
Modified Date
2016-04-07  
Seq
2013-6712  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
210582 41625 CVE-2013-6712 http://git.php.net/?p=php-src.git;a=commit;h=12fe4e90be7bfa2a763197079f68f5568a14e071  View
210583 41625 CVE-2013-6712 APPLE-SA-2015-04-08-2  View
210584 41625 CVE-2013-6712 openSUSE-SU-2013:1963  View
210585 41625 CVE-2013-6712 openSUSE-SU-2013:1964  View
210586 41625 CVE-2013-6712 RHSA-2014:1765  View
210587 41625 CVE-2013-6712 https://bugs.php.net/bug.php?id=66060  View
210588 41625 CVE-2013-6712 SSRT101447  View
210589 41625 CVE-2013-6712 https://support.apple.com/HT204659  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23747 JVNDB-2013-005322 PHP の ext/date/lib/parse_iso_intervals.c の scan 関数におけるサービス運用妨害 (DoS) の脆弱性 PHP の ext/date/lib/parse_iso_intervals.c の scan 関数は、DateInterval オブジェクトの生成を適切に制限しないため、サービス運用妨害 (ヒープベースのバッファオーバーリード) 状態にされる脆弱性が存在します。 CVE-2013-6712 66654 CVE-2013-6712 41625 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005322.html 2013-11-27 2015-08-03 View