Critical bug in PHP 5.2 and PHP 5.3

Posted on January 1, 2011 by admin

A critical bug has been discovered in PHP 5.3 and 5.2. This bug could easily generate a Denial of Service on servers in 32 bits (the recent ski developer under 64 bits indicate that the fault is apparently not 64-bit).

This bug is caused by certain values of floating point numbers with a significant number of decimals. The calculation or assessment of these values would result in a PHP occupying 100% CPU utilization of resources, much like an infinite loop …

Looks like there is a problem in the PHP code since this bug is reproducible under both Linux and Windows:

<? Php $ d = 2.2250738585072011e-308;?>

For those whose code is not quite at the point (no check on the values passed in URLs), you could be victim of attack.

Related posts:

  1. Cycling an empty array in PHP
  2. Restrict input length of the DB field to park
  3. MySQL: The ignorance of Boolean
  4. Rename groups of files in Linux
  5. Make a URL with cURL
  6. MySQL: from image to image to BLOB and BLOB
  7. URL Rewriting with the Apache module mod_rewrite
  8. Validate the value of a hex color with PHP
  9. Using the conditions for query UPDATE
  10. Save the output of phpinfo () in a file
This entry was posted in PHP and tagged , , , . Bookmark the permalink.

Comments are closed.