4.3
CVSSv2

CVE-2011-1468

Published: 20/03/2011 Updated: 30/10/2018
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 440
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

Multiple memory leaks in the OpenSSL extension in PHP prior to 5.3.6 might allow remote malicious users to cause a denial of service (memory consumption) via (1) plaintext data to the openssl_encrypt function or (2) ciphertext data to the openssl_decrypt function.

Vulnerable Product Search on Vulmon Subscribe to Product

php php 4.0.3

php php 4.0.4

php php 4.0

php php 4.2.1

php php 4.2.2

php php 4.3.2

php php 4.3.3

php php 4.4.0

php php 4.4.1

php php 4.4.8

php php 4.4.9

php php 3.0.11

php php 3.0.18

php php 3.0.4

php php 3.0.7

php php 3.0.8

php php 5.2.10

php php 5.2.13

php php 5.2.3

php php 5.2.14

php php 5.2.4

php php 5.1.3

php php 5.0.4

php php 5.0.3

php php 5.0.0

php php 4.0.1

php php 4.0.2

php php 4.2.0

php php 4.3.10

php php 4.3.11

php php 4.3.8

php php 4.3.9

php php 4.4.6

php php 4.4.7

php php 3.0

php php 3.0.2

php php 3.0.16

php php 3.0.9

php php 1.0

php php 5.2.9

php php 5.2.12

php php 5.2.6

php php 5.2.8

php php 5.2.16

php php 5.2.7

php php 5.1.5

php php 5.0.5

php php 5.0.2

php php 5.0.1

php php

php php 5.3.0

php php 5.3.1

php php 5.3.2

php php 4.0.5

php php 4.0.6

php php 4.1.0

php php 4.1.1

php php 4.2.3

php php 4.3.0

php php 4.3.4

php php 4.3.5

php php 4.4.2

php php 4.4.3

php php 3.0.10

php php 3.0.13

php php 3.0.3

php php 3.0.15

php php 3.0.5

php php 3.0.6

php php 5.2.11

php php 5.2.5

php php 5.2.1

php php 5.2.2

php php 5.1.2

php php 5.1.1

php php 4.0.0

php php 4.0.7

php php 4.1.2

php php 4.3.1

php php 4.3.6

php php 4.3.7

php php 4.4.4

php php 4.4.5

php php 3.0.12

php php 3.0.1

php php 3.0.14

php php 3.0.17

php php 2.0b10

php php 2.0

php php 5.2.0

php php 5.2.17

php php 5.2.15

php php 5.1.0

php php 5.1.6

php php 5.1.4

php php 5.3.3

php php 5.3.4

Vendor Advisories

Several vulnerabilities have been discovered in PHP, the web scripting language The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2011-1072 It was discovered that insecure handling of temporary files in the PEAR installer could lead to denial of service CVE-2011-4153 Maksymilian Arciemowicz discovered ...
USN 1126-1 introduced two regressions in PHP ...
Multiple vulnerabilities in PHP ...

Exploits

source: wwwsecurityfocuscom/bid/46977/info PHP is prone to multiple remote denial-of-service vulnerabilities that affect the 'OpenSSL' extension Successful attacks will cause the application to consume excessive memory, creating a denial-of-service condition Versions prior to PHP 536 are vulnerable <?php $data = "jfdslkjvf ...
source: wwwsecurityfocuscom/bid/46977/info PHP is prone to multiple remote denial-of-service vulnerabilities that affect the 'OpenSSL' extension Successful attacks will cause the application to consume excessive memory, creating a denial-of-service condition Versions prior to PHP 536 are vulnerable <?php $data = "jfdslkjvflsd ...