PHP 'main/rfc1867.c' Remote Denial of Service Vulnerability

PHP 'main/rfc1867.c' Remote Denial of Service Vulnerability
PHP 'main/rfc1867.c' Remote Denial of Service Vulnerability

Release date:
Updated on:

Affected Systems:

PHP

Description:

Bugtraq id: 74903
CVE (CAN) ID: CVE-2015-4024

PHP is a widely used scripting language. It is especially suitable for Web development and can be embedded into HTML.

A remote denial of service vulnerability exists when PHP parses multiple http post requests. A specially crafted request can cause PHP to consume CPU resources and cause DOS.

<* Source: Shusheng Liu
*>

Suggestion:

Vendor patch:

PHP
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://git.php.net /? P = php-src.git; a = commitdiff; h = 4605d536d23b00813d11cc906bb48d39bdcf5f25

This article permanently updates the link address: