MEDIUM
php: shm_put_var interruption vulnerability (MOPS-2010-009)
Published May 7, 2010
6.4
MEDIUMCVSS 2.0
EPSS 1.00%
Description
The sysvshm extension for PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to write to arbitrary memory addresses by using an object's __sleep function to interrupt an internal call to the shm_put_var function, which triggers access of a freed resource.
Affected products
No data.
Configuration 1
OR
- 5.2.0
- 5.2.1
- 5.2.2
- 5.2.3
- 5.2.4
- 5.2.5
- 5.2.6
- 5.2.8
- 5.2.9
- 5.2.10
- 5.2.11
- 5.2.12
- 5.2.13
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Red Hat statement
Red Hat does not consider interruption issues allowing safe_mode / open_basedir restriction bypass to be security sensitive. For more details see https://bugzilla.redhat.com/show_bug.cgi?id=169857#c1 and http://www.php.net/security-note.php
Weaknesses (1)
References (5)
- http://php-security.org/2010/05/05/mops-2010-009-php-shm_put_var-already-freed-resource-access-vulnerability/index.html x_refsource_MISCExploit
- https://access.redhat.com/security/cve/CVE-2010-1861 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=618579 Issue Tracking
- https://nvd.nist.gov/vuln/detail/CVE-2010-1861
- https://www.cve.org/CVERecord?id=CVE-2010-1861
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published May 7, 2010
Updated Sep 16, 2024
Reserved May 7, 2010
Link CVE-2010-1861
CISA Vulnrichment
Updated n/a