PHP Regex Handler Memory information disclosure : 8/18/2015 12:47:54 PM
 | Communicate with co-workers in real time. Used by Netflix, Dropbox & Salesforce. $0/unlimited users. Get started >> From our sponsors  |
| Vulnerability Advisories |
| Vulnerabilities of scip VulDB |
PHP Regex Handler Memory information disclosure
8/16/2015 7:00:00 PM
General
scipID: 77272
Affected: PHP
Published: 08/17/2015
Risk: problematic
Created: 08/18/2015
Entry: 71.4% complete
Summary
A vulnerability was found in PHP (the affected version is unknown). It has been declared as problematic. This vulnerability affects an unknown function of the component Regex Handler. The manipulation with an unknown input leads to a information disclosure vulnerability (memory). As an impact it is known to affect confidentiality, integrity, and availability.
The weakness was disclosed 08/17/2015 as ZDI-15-394 as confirmed advisory (ZDI). The advisory is shared for download at zerodayinitiative.com. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. There are neither technical details nor an exploit publicly available. The advisory points out:
The specific flaw exists within the handling of invalid regular expressions. The issue lies in the failure to properly initialize pointers in a buffer while executing a regular expression. An attacker can leverage this to disclose the contents of any address in memory in the context of the process running PHP.
The vulnerability was handled as a non-public zero-day exploit for at least 308 days.
Applying a patch is able to eliminate this problem. The bugfix is ready for download at vcs.pcre.org. The vulnerability is also documented in the vulnerability database at X-Force (105673).CVSS
Base Score: 7.5 (CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P) [?]
Temp Score: 5.5 (CVSS2#E:U/RL:OF/RC:C) [?]
CPE
Exploiting
Class: Information disclosure
Local: No
Remote: Yes
Availability: No
Status: Unproven
Countermeasures
Recommended: Patch
Status: Official fix
0-Day Time: 308 days since found
Patch: vcs.pcre.org
Timeline
10/13/2014 | Vendor informed
08/17/2015 | Advisory disclosed
08/18/2015 | VulDB entry created
08/18/2015 | VulDB entry updated
Sources
Advisory: ZDI-15-394
Status: Confirmed
X-Force: 105673 – PHP regular expression information disclsoure
You are receiving this email because you subscribed to this feed at feedmyinbox.com
If you no longer wish to receive these emails, you can unsubscribe from this feed, or manage all your subscriptions
