CVE-2012-3450

Publication date 6 August 2012

Last updated 24 July 2024

Ubuntu priority

Description

pdo_sql_parser.re in the PDO extension in PHP before 5.3.14 and 5.4.x before 5.4.4 does not properly determine the end of the query string during parsing of prepared statements, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted parameter value.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
php5	12.04 LTS precise	Fixed in 5.3.10-1ubuntu3.4
	11.10 oneiric	Fixed in 5.3.6-13ubuntu3.9
	11.04 natty	Fixed in 5.3.5-1ubuntu7.11
	10.04 LTS lucid	Fixed in 5.3.2-1ubuntu4.18
	8.04 LTS hardy	Fixed in 5.2.4-2ubuntu5.26

Notes

mdeslaur

pdo_sql_parser.re generates pdo_sql_parser.c, so both need to be patched.

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
php5	Upstream: http://git.php.net/?p=php-src.git;a=commit;h=1b78aef426a8f413ddd70854eb3fd5fbc95ef675 Upstream: http://git.php.net/?p=php-src.git;a=commit;h=e946eaca0bc747615fabd0fedb8a92ea800ed158 Upstream: http://git.php.net/?p=php-src.git;a=commit;h=c06ec6bde43a114af3bd84e986827839de1b1e4b

References

Related Ubuntu Security Notices (USN)

USN-1569-1
PHP vulnerabilities
17 September 2012