NULL pointer dereference in PHP - CVE-2015-1352
Published: November 27, 2018
Vulnerability identifier: #VU16105
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2015-1352
CWE-ID: CWE-476
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dreference error in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP through 5.6.7 does not validate token extraction for table names, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a specially crafted name. A remote attacker can perform a denial of service (DoS) attack.
Affected software
PHP
Amazon Linux AMI
Slackware Linux
Fedora
php5 (Ubuntu package)
php
Amazon Linux AMI
Slackware Linux
Fedora
php5 (Ubuntu package)
php
How to mitigate CVE-2015-1352
Install update from vendor's website.
php5 (Ubuntu package) - addressed in versions 5.3.10-1ubuntu3.16, 5.5.9+dfsg-1ubuntu4.6, 5.5.12+dfsg-2ubuntu4.2
php - addressed in versions 5.6.8-1.fc21, 5.6.8-1.fc22
php - addressed in versions 5.6.8-1.fc21, 5.6.8-1.fc22