CVE-2015-4024

Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before…

published June 9, 2015

CVSS
—
EPSS
50%
Percentile
98.9
In the wild
Unconfirmed
What it is

Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service (CPU consumption) via crafted form data that triggers an improper order-of-growth outcome.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.49885 · 98.9th percentile
Published
2015-06-09T18:00Z
EPSS history
Timeline
  • 09 JUN 18:00Z
    Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before…
    cvelistv5