| Package | Affected versions | Patched versions |
|---|---|---|
| file | = 5.00= 5.01= 5.02= 5.03= 5.04= 5.05= 5.06= 5.07= 5.08= 5.09= 5.10= 5.11= 5.12= 5.13= 5.14= 5.15= 5.16= 5.17≤ 5.18 | |
| php | ≥ 5.4.0, < 5.4.32≥ 5.5.0, < 5.5.16 | 5.4.325.5.16 |
file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted file that triggers backtracking during processing of an awk rule. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7345.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free