CVE-2011-1938: php

Vulnerability summary

CVE-2011-1938 is a high (CVSS 7.5) vulnerability in php. EPSS estimates a 23.13% chance of exploitation in the next 30 days, higher than 97.7% of scored vulnerabilities. 2 public exploits are recorded.

Timeline

1. 31-05-2011
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.

• CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.