oss-security - Re: CVE request: PHP socket_connect()

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Tue, 24 May 2011 07:43:02 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: Pierre Joye <pierre.php@...il.com>, coley <coley@...re.org>
Subject: Re: CVE request: PHP socket_connect() - stack buffer
 overflow

----- Original Message -----
> Hi,
> Could a CVE be assigned to this issue?
> 
> PHP - Stack buffer overflow in socket_connect():
> Fix: http://svn.php.net/viewvc?view=revision&revision=311369
> 
> Found by: Mateusz Kocielski, Marek Kroemeke and Filip Palian
> 

Please use CVE-2011-1938.

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.