Description

In PHP before 5.6.31, 7.x before 7.0.17, and 7.1.x before 7.1.3, remote attackers could cause a CPU consumption denial of service attack by injecting long form variables, related to main/php_variables.c.

Remediation

References

CVE-2017-11142

Related Vulnerabilities

WordPress Plugin Image Widget Unspecified Vulnerability (4.1.2)

Ruby on Rails Missing Encryption of Sensitive Data Vulnerability (CVE-2010-3299)

WordPress Plugin WP Job Manager Unspecified Vulnerability (1.32.2)

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-17578)

silverstripeCMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4961)

Severity

High

Classification

CVE-2017-11142 CWE-400 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities