CVE-2011-3182

medium · 5

PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) or trigger a buffer overflow by leveraging the ability to provide an arbitrary value for a function argument, related to (1) ext/curl/interface.c, (2) ext/date/lib/parse_date.c, (3) ext/date/lib/parse_iso_intervals.c, (4) ext/date/lib/parse_tz.c, (5) ext/date/lib/timelib.c, (6) ext/pdo_odbc/pdo_odbc.c, (7) ext/reflection/php_reflection.c, (8) ext/soap/php_sdl.c, (9) ext/xmlrpc/libxmlrpc/base64.c, (10) TSRM/tsrm_win32.c, and (11) the strtotime function.

CVSS

19.2%

EPSS (exploit prob.)

97th

EPSS percentile

2011-08-25

Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

Vendor	Product	Affected versions
php	php	<= 5.3.6
php	php	1.0
php	php	2.0
php	php	2.0b10
php	php	3.0
php	php	3.0.1
php	php	3.0.2
php	php	3.0.3
php	php	3.0.4
php	php	3.0.5
php	php	3.0.6
php	php	3.0.7
php	php	3.0.8
php	php	3.0.9
php	php	3.0.10
php	php	3.0.11
php	php	3.0.12
php	php	3.0.13
php	php	3.0.14
php	php	3.0.15
php	php	3.0.16
php	php	3.0.17
php	php	3.0.18
php	php	4.0
php	php	4.0
php	php	4.0
php	php	4.0
php	php	4.0
php	php	4.0.0
php	php	4.0.1
php	php	4.0.2
php	php	4.0.3
php	php	4.0.4
php	php	4.0.5
php	php	4.0.6
php	php	4.0.7
php	php	4.1.0
php	php	4.1.1
php	php	4.1.2
php	php	4.2.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2011-3182