NULL pointer dereference in PHP - CVE-2011-4153

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error. A remote attacker can trigger denial of service conditions via crafted input to an application that performs strndup operations on untrusted string data, as demonstrated by the define function in zend_builtin_functions.c, and unspecified functions in ext/soap/php_sdl.c, ext/standard/syslog.c, ext/standard/browscap.c, ext/oci8/oci8.c, ext/com_dotnet/com_typeinfo.c, and main/php_open_temporary_file.c.

Affected software

How to mitigate CVE-2011-4153

Links to Public Exploits and PoC-codes

• Exploit #4467 - PHP 5.3.8 - Multiple Vulnerabilities (August 11, 2020)

External References

• http://archives.neohapsis.com/archives/bugtraq/2012-01/0092.html
• http://cxsecurity.com/research/103
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
• http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html
• http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html
• http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00001.html
• http://marc.info/?l=bugtraq&m=134012830914727&w=2
• http://secunia.com/advisories/48668
• http://www.exploit-db.com/exploits/18370/

Related Security Bulletins

• Multiple vulnerabilities in PHP
• Multiple vulnerabilities in HP-UX Apache Web Server running PHP