CVE-2015-4024

Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service (CPU consumption) via crafted form data that triggers an improper order-of-growth outcome.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

50.13% chance of exploitation in the next 30 days, 99th percentile

Published

2015-06-09

Updated

2024-08-06

Proof-of-concept exploits (1)

• https://bugs.php.net/bug.php?id=69364

References

• CVE Record
• NVD entry

Related

• CVE-2015-4018
• CVE-2015-4027
• CVE-2015-4010
• CVE-2015-4029
• CVE-2015-4004
• CVE-2015-4038