CVE-2014-4049

Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a denial of service…

published June 18, 2014

CVSS
—
EPSS
11%
Percentile
95.9
In the wild
Unconfirmed
What it is

Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS TXT record, related to the dns_get_record function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.10910 · 95.9th percentile
Published
2014-06-18T19:00Z
EPSS history
Timeline
  • 18 JUN 19:00Z
    Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a denial of service…
    cvelistv5