CVE-2007-1285
Fixed in a distro release EPSS 19%
The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines.
Products: php, canonical ubuntu_linux, novell suse_linux, suse linux_enterprise_server, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 2.1 | php | 0:4.1.2-2.17 |
| Red Hat Enterprise Linux 2.1 | php-devel | 0:4.1.2-2.17 |
| Red Hat Enterprise Linux 2.1 | php-imap | 0:4.1.2-2.17 |
| Red Hat Enterprise Linux 2.1 | php-ldap | 0:4.1.2-2.17 |
| Red Hat Enterprise Linux 2.1 | php-manual | 0:4.1.2-2.17 |
| Red Hat Enterprise Linux 2.1 | php-mysql | 0:4.1.2-2.17 |
| Red Hat Enterprise Linux 2.1 | php-odbc | 0:4.1.2-2.17 |
| Red Hat Enterprise Linux 2.1 | php-pgsql | 0:4.1.2-2.17 |
| Red Hat Enterprise Linux 3 | php | 0:4.3.2-40.ent |
| Red Hat Enterprise Linux 3 | php-debuginfo | 0:4.3.2-40.ent |
| Red Hat Enterprise Linux 3 | php-devel | 0:4.3.2-40.ent |
| Red Hat Enterprise Linux 3 | php-imap | 0:4.3.2-40.ent |
| Red Hat Enterprise Linux 3 | php-ldap | 0:4.3.2-40.ent |
| Red Hat Enterprise Linux 3 | php-mysql | 0:4.3.2-40.ent |
| Red Hat Enterprise Linux 3 | php-odbc | 0:4.3.2-40.ent |
| Red Hat Enterprise Linux 3 | php-pgsql | 0:4.3.2-40.ent |
| Red Hat Enterprise Linux 4 | php | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-debuginfo | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-devel | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-domxml | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-gd | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-imap | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-ldap | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-mbstring | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-mysql | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-ncurses | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-odbc | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-pear | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-pgsql | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-snmp | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-xmlrpc | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 5 | php | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-bcmath | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-cli | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-common | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-dba | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-debuginfo | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-devel | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-gd | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-imap | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-ldap | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-mbstring | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-mysql | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-ncurses | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-odbc | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-pdo | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-pgsql | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-snmp | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-soap | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-xml | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-xmlrpc | 0:5.1.6-7.el5 |
| Red Hat rhel application stack 1 | php | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-bcmath | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-cli | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-common | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-dba | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-debuginfo | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-devel | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-gd | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-imap | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-ldap | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-mbstring | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-mysql | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-ncurses | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-odbc | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-pdo | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-pgsql | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-snmp | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-soap | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-xml | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-xmlrpc | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel stronghold 4.0 | stronghold-php | 0:4.1.2-15 |
| Red Hat rhel stronghold 4.0 | stronghold-php-devel | 0:4.1.2-15 |
| Red Hat rhel stronghold 4.0 | stronghold-php-imap | 0:4.1.2-15 |
| Red Hat rhel stronghold 4.0 | stronghold-php-ldap | 0:4.1.2-15 |
| Red Hat rhel stronghold 4.0 | stronghold-php-manual | 0:4.1.2-15 |
| Red Hat rhel stronghold 4.0 | stronghold-php-mysql | 0:4.1.2-15 |
| Red Hat rhel stronghold 4.0 | stronghold-php-odbc | 0:4.1.2-15 |
| Red Hat rhel stronghold 4.0 | stronghold-php-pgsql | 0:4.1.2-15 |
| Red Hat rhel stronghold 4.0 | stronghold-php-snmp | 0:4.1.2-15 |