CVE-2014-3597

Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow remote DNS servers to cause a…

published August 23, 2014

CVSS
—
EPSS
15%
Percentile
96.8
In the wild
Unconfirmed
What it is

Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow remote DNS servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted DNS record, related to the dns_get_record function and the dn_expand function. NOTE: this issue exists because of an incomplete fix for CVE-2014-4049.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.15427 · 96.8th percentile
Published
2014-08-23T01:00Z
EPSS history
Timeline
  • 23 AUG 01:00Z
    Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow remote DNS servers to cause a…
    cvelistv5