PHP Fileinfo Component 'libmagic/softmagic.c' Remote Denial of Service Vulnerability

Bugtraq ID:	60728
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-4636
Remote:	Yes
Local:	No
Published:	Jun 06 2013 12:00AM
Updated:	Mar 19 2015 09:46AM
Credit:	The vendor reported this issue.
Vulnerable:	PHP PHP 5.4.3 PHP PHP 5.4.2 PHP PHP 5.4.1 Gentoo Linux
Not Vulnerable:

PHP Fileinfo Component 'libmagic/softmagic.c' Remote Denial of Service Vulnerability

PHP is prone to a remote denial-of-service vulnerability.

Successfully exploiting this vulnerability allows remote attackers to cause denial-of-service conditions in the context of an application.

PHP 5.4.16 prior versions are vulnerable.

PHP Fileinfo Component 'libmagic/softmagic.c' Remote Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

PHP Fileinfo Component 'libmagic/softmagic.c' Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

PHP Fileinfo Component 'libmagic/softmagic.c' Remote Denial of Service Vulnerability

References:

• PHP Homepage (PHP Group)