CVE-2015-1352

5

MEDIUMCVSS v2

Published

March 30, 2015

Affected

2 projects

Assigned by

MITRE

Severity scale

010

Description

The build_tablename function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP through 5.6.7 does not validate token extraction for table names, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted name.

php

NPMAllows you to run PHP code in Node.js in various ways.

= *, >= 5.6.0, < 5.6.8, < 5.4.40, >= 5.5.0, < 5.5.24NVD

php

Python Package IndexHandle some of the strange standards in PHP projects

= *, >= 5.6.0, < 5.6.8, < 5.4.40, >= 5.5.0, < 5.5.24NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2015-1352

Description

More on this CVE