📜 ⬆️ ⬇️

Vulnerability in php 5.3. * 32bit - float

In php, a trivial code was found that caused the interpreter to hang: an infinite loop and devouring processor resources.
<?php $d = 2.2250738585072011e-308; ?>
Attempts to handle this as a string through floatval (i.e., through any user input) also cause a hang.
As the saying goes: "Hello, DoS."

Version 5.3.1 and 5.3.2 are at least affected.
On the rub-64 bit is not played.

Details

')

Source: https://habr.com/ru/post/111213/


All Articles