Total vulnerabilities in the database
The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a negative value, as demonstrated by an "a:2147483649:{" argument.
| Software | From | Fixed in |
|---|---|---|
| php / php | 4.0-beta1 | 4.0-beta1.x |
| php / php | 4.0-beta4 | 4.0-beta4.x |
| php / php | 4.0-rc1 | 4.0-rc1.x |
| php / php | 4.0 | 4.0.x |
| php / php | 4.0-beta2 | 4.0-beta2.x |
| php / php | 4.0-rc2 | 4.0-rc2.x |
| php / php | 4.0-beta_4_patch1 | 4.0-beta_4_patch1.x |
| php / php | 4.0-beta3 | 4.0-beta3.x |
| php / php | 4.0.0 | 4.4.5 |
| php / php | 5.0.0 | 5.2.1 |
| canonical / ubuntu_linux | 6.06 | 6.06.x |
| canonical / ubuntu_linux | 6.10 | 6.10.x |
| canonical / ubuntu_linux | 5.10 | 5.10.x |