Description
The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.2.1, allows context-dependent attackers to obtain sensitive information (memory contents) via a serialized variable entry with a large length value, which triggers a buffer over-read.
Remediation
References
Related Vulnerabilities
Envoy Proxy Improper Encoding or Escaping of Output Vulnerability (CVE-2024-45808)
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5489)
MySQL CVE-2019-2693 Vulnerability (CVE-2019-2693)
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-5539)