| Package | Affected versions | Patched versions |
|---|---|---|
| suhosin | = 0.9.0= 0.9.1= 0.9.10= 0.9.11= 0.9.12= 0.9.13= 0.9.14= 0.9.15= 0.9.16= 0.9.17= 0.9.18= 0.9.19= 0.9.2= 0.9.20= 0.9.21= 0.9.22= 0.9.23= 0.9.24= 0.9.25= 0.9.26= 0.9.27= 0.9.28= 0.9.29= 0.9.3= 0.9.30= 0.9.4= 0.9.5= 0.9.6= 0.9.6.1= 0.9.6.2= 0.9.6.3= 0.9.7= 0.9.8= 0.9.9= 0.9.9.1≤ 0.9.31 |
Stack-based buffer overflow in the suhosin_encrypt_single_cookie function in the transparent cookie-encryption feature in the Suhosin extension before 0.9.33 for PHP, when suhosin.cookie.encrypt and suhosin.multiheader are enabled, might allow remote attackers to execute arbitrary code via a long string that is used in a Set-Cookie HTTP header.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free