Description

Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service (CPU consumption) via crafted form data that triggers an improper order-of-growth outcome.

Remediation

References

CVE-2015-4024

Related Vulnerabilities

PHP Use of Externally-Controlled Format String Vulnerability (CVE-2015-8617)

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000392)

WordPress Plugin Cf7Save Extension Cross-Site Scripting (1.0)

Oracle JRE CVE-2011-3563 Vulnerability (CVE-2011-3563)

WordPress Plugin Smart Forms-when you need more than just a contact form Cross-Site Scripting (2.1.0)

Severity

Medium

Classification

CVE-2015-4024

Tags

Missing Update Known Vulnerabilities