CVE-2007-1285: canonical ubuntu_linux Uncontrolled Recursion

Modified

Published 06-03-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-1285 is a high (CVSS 7.5) Uncontrolled Recursion vulnerability in canonical ubuntu_linux. EPSS estimates a 18.83% chance of exploitation in the next 30 days, higher than 97.2% of scored vulnerabilities. 3 public exploits are recorded.

Priority

Prioritisepublic exploit

Public exploit (exploit-database, 01-03-2007)

Source freshness unavailable

How is this decided?

CVSS score

7.5/10

010

High · v3.1 (NVD)

EPSS score

18.83%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits3reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 5

RHSA-2007:0082 RHSA-2007:0154 RHSA-2007:0155 RHSA-2007:0162 RHSA-2007:0163

Timeline

06-03-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines.

CVSS metrics

2 scores · 1 source · 2 versions

v3.17.5v2.05.0

EPSS trend

Probability

18.83%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

No change 0.00 pp

From 18.83% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

3 found

referenceUnverified
Exploit Reference (launchpad.net)
Maturity: unknown
referenceUnverified
Exploit Reference (php-security.org)
Maturity: unknown
exploit-databasedosphpVerified
PHP 3/4/5 - ZendEngine Variable Destruction Remote Denial of Service
Maturity: poc

Weaknesses

CWE · root cause

CWE-674Uncontrolled RecursionThe product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat3 products

enterprise_linux_desktop3.0 | 4.0
enterprise_linux_server2.0 | 3.0 | 4.0
enterprise_linux_workstation2.0 | 3.0 | 4.0

Canonical1 product

ubuntu_linuxEOL7.10

Novell1 product

suse_linux10.0 | 10.1

Php1 product

php≥ 4.0.0, < 4.4.7 | ≥ 5.0.0, < 5.2.2

Suse1 product

linux_enterprise_server8 | 10:sp1

5 vendors · 7 products

References

38 links

launchpad.net/bugs/173043X Refsource CONFIRMExploitIssue Tracking
www.securityfocus.com/bid/22764VDB EntryX Refsource BIDBroken LinkThird Party Advisory
rhn.redhat.com/errata/RHSA-2007-0154.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/26048Third Party AdvisoryX Refsource SECUNIABroken LinkVendor Advisory
www.securityfocus.com/archive/1/466166/100/0/threadedMailing ListX Refsource BUGTRAQBroken LinkThird Party AdvisoryVDB Entry
security.gentoo.org/glsa/glsa-200705-19.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/24941Third Party AdvisoryX Refsource SECUNIABroken LinkVendor Advisory
secunia.com/advisories/27864Third Party AdvisoryX Refsource SECUNIABroken LinkVendor Advisory
www.redhat.com/support/errata/RHSA-2007-0162.htmlVendor AdvisoryX Refsource REDHATBroken Link
us2.php.net/releases/4_4_7.phpX Refsource CONFIRMRelease Notes

Show all 38 references

www.php.net/releases/4_4_8.phpX Refsource CONFIRMRelease Notes
slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.335136Vendor AdvisoryX Refsource SLACKWAREBroken Link
www.php.net/ChangeLog-5.phpX Refsource CONFIRMRelease Notes
secunia.com/advisories/28936Third Party AdvisoryX Refsource SECUNIABroken LinkVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2007:090Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
www.php-security.org/MOPB/MOPB-03-2007.htmlX Refsource MISCBroken LinkExploitVendor Advisory
usn.ubuntu.com/549-1/Vendor AdvisoryX Refsource UBUNTUBroken Link
secunia.com/advisories/24909Third Party AdvisoryX Refsource SECUNIABroken LinkVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2007:087Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
secunia.com/advisories/24945Third Party AdvisoryX Refsource SECUNIABroken LinkVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11017VDB EntrySignatureX Refsource OVALBroken Link
issues.rpath.com/browse/RPL-1268X Refsource CONFIRMBroken Link
www.osvdb.org/32769VDB EntryX Refsource OSVDBBroken Link
us2.php.net/releases/5_2_2.phpX Refsource CONFIRMRelease Notes
www.securitytracker.com/id?1017771VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory
www.redhat.com/support/errata/RHSA-2007-0082.htmlVendor AdvisoryX Refsource REDHATBroken Link
secunia.com/advisories/24924Third Party AdvisoryX Refsource SECUNIABroken LinkVendor Advisory
rhn.redhat.com/errata/RHSA-2007-0155.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/24910Third Party AdvisoryX Refsource SECUNIABroken LinkVendor Advisory
www.php.net/ChangeLog-4.phpX Refsource CONFIRMRelease Notes
www.php.net/releases/5_2_4.phpX Refsource CONFIRMRelease Notes
www.mandriva.com/security/advisories?name=MDKSA-2007:089Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
secunia.com/advisories/25445Third Party AdvisoryX Refsource SECUNIABroken LinkVendor Advisory
rhn.redhat.com/errata/RHSA-2007-0163.htmlVendor AdvisoryX Refsource REDHATBroken Link
www.ubuntu.com/usn/usn-549-2Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
secunia.com/advisories/26642Third Party AdvisoryX Refsource SECUNIABroken LinkVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2007:088Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.htmlVendor AdvisoryX Refsource SUSEMailing List