CVE-2015-4644

The php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not…

published May 16, 2016

CVSS
—
EPSS
6%
Percentile
93.4
In the wild
Unconfirmed
What it is

The php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not validate token extraction for table names, which might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted name. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1352.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06146 · 93.4th percentile
Published
2016-05-16T10:00Z
EPSS history
Timeline
  • 16 MAY 10:00Z
    The php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not…
    cvelistv5