KLA10931
Denial of service vulnerability in PHP

An unspecified vulnerability was found in PHP before 5.3.29, 5.4.x before 5.4.30, and 5.5.x before 5.5.14. By exploiting this vulnerability malicious users can cause a denial of service. Other unspecified impacts are also possible. This vulnerability can be exploited remotely via a locale_get_display_name call with a long first argument.

Technical details

This vulnerability occurs in the get_icu_disp_value_src_php function in ext/intl/locale/locale_methods.c.

PHP before 5.3.29
PHP 5.4.x before 5.4.30
PHP 5.5.x before 5.5.14

Update to the latest version
Download PHP