oss-security - Possible CVE request: php5: phpinfo() Type Confusion Information Leak Vulnerability

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Thu, 3 Jul 2014 19:36:00 +0200
From: Salvatore Bonaccorso <carnil@...ian.org>
To: oss-security@...ts.openwall.com
Cc: cve-assign@...re.org
Subject: Possible CVE request: php5: phpinfo() Type Confusion Information
 Leak Vulnerability

Hi

Recent PHP updates mention bug #67498 in their changes[1,2]: Fixed bug
#67498 (phpinfo() Type Confusion Information Leak Vulnerability).

Upstream bug is at [3], which does not seem to have a CVE assigned.
(If so, could one be assigned?).

 [1] http://www.php.net/ChangeLog-5.php#5.4.30
 [2] http://www.php.net/ChangeLog-5.php#5.5.14
 [3] https://bugs.php.net/bug.php?id=67498

Thanks in advance,

Regards,
Salvatore

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.