Fluid Attacks Database

Description

Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory consumption) via (1) plaintext data to the openssl_encrypt function or (2) ciphertext data to the openssl_decrypt function.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
rpm rhel6	php	<0:5.3.3-3.el6_1.3	0:5.3.3-3.el6_1.3
rpm rhel5	php53	<0:5.3.3-1.el5_7.3	0:5.3.3-1.el5_7.3

Aliases

1. CVE-2011-14682. NVD-2011-14683. OSV-2011-1468

References

1. https://www.exploit-db.com/exploits/354872. https://www.exploit-db.com/exploits/35486

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.