Vulnerability in Php

CVE-2012-0789

Memory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service (memory consumption) by triggering many strtotime function calls, which are not properly handled by the php_date_parse_tzfile cache.

EPSS: 0.083 (94.3th percentile) — read the EPSS interpretation.

Affected products

  • Php — versions 5.0.0, 5.0.1, 5.0.2
  • N/a — versions n/a

Weakness classification (CWE)

References