| Package | Affected versions | Patched versions |
|---|---|---|
| php | ≤ 5.5.37 |
The php_url_parse_ex function in ext/standard/url.c in PHP before 5.5.38 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via vectors involving the smart_str data type.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free