| Package | Affected versions | Patched versions |
|---|---|---|
| php | = 5.4.0= 5.4.1= 5.4.10= 5.4.11= 5.4.12= 5.4.13= 5.4.14= 5.4.15= 5.4.16= 5.4.17= 5.4.18= 5.4.19= 5.4.2= 5.4.20= 5.4.21= 5.4.22= 5.4.23= 5.4.24= 5.4.25= 5.4.26= 5.4.27= 5.4.28= 5.4.29= 5.4.3= 5.4.30= 5.4.31= 5.4.32= 5.4.4= 5.4.5= 5.4.6= 5.4.7= 5.4.8= 5.4.9= 5.5.0= 5.5.1= 5.5.10= 5.5.11= 5.5.12= 5.5.13= 5.5.14= 5.5.15= 5.5.16= 5.5.17= 5.5.2= 5.5.3= 5.5.4= 5.5.5= 5.5.6= 5.5.7= 5.5.8= 5.5.9= 5.6.0= 5.6.1≤ 5.4.33 |
Integer overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an argument to the unserialize function that triggers calculation of a large length value.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free