CVE-2013-4113: php Out-of-bounds Write

CVSS: 6.8v2.0MediumModified

AliasesMGASA-2013-0216MGASA-2013-0233RHSA-2013:1049+5 more

Published 13-07-2013Last modified 06-08-2024

Vulnerability summary

CVE-2013-4113 is a medium (CVSS 6.8) Out-of-bounds Write vulnerability in php. EPSS estimates a 5.19% chance of exploitation in the next 30 days, higher than 92.3% of scored vulnerabilities.

Overall risk

28/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.8/10

010

Medium · v2.0 (NVD)

EPSS score

5.19%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 3 · Related 3

OPENSUSE-SU-2024:10290-1 OPENSUSE-SU-2024:10344-1 OPENSUSE-SU-2024:11169-1

Timeline

13-07-2013
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

ext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted document that is processed by the xml_parse_into_struct function.

CVSS metrics

1 score · 1 source · 1 version

v2.06.8

EPSS trend

Probability

5.19%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

0.00 pp

From 5.19% on 20-09-2026

20-09-202620-10-2026

EPSS score

5.19%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.

Affected systems

Redhat53 products

php< 0:5.1.6-40.el5_9 | < 0:5.3.3-23.el6_4 | < 0:5.1.6-23.4.el5_3 | < 0:5.1.6-27.el5_6.5 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1 | < 0:4.3.2-56.ent | < 0:4.3.9-3.37.el4
php-bcmath< 0:5.1.6-40.el5_9 | < 0:5.3.3-23.el6_4 | < 0:5.1.6-23.4.el5_3 | < 0:5.1.6-27.el5_6.5 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1
php-cli< 0:5.1.6-40.el5_9 | < 0:5.3.3-23.el6_4 | < 0:5.1.6-23.4.el5_3 | < 0:5.1.6-27.el5_6.5 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1
php-common< 0:5.1.6-40.el5_9 | < 0:5.3.3-23.el6_4 | < 0:5.1.6-23.4.el5_3 | < 0:5.1.6-27.el5_6.5 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1
php-dba< 0:5.1.6-40.el5_9 | < 0:5.3.3-23.el6_4 | < 0:5.1.6-23.4.el5_3 | < 0:5.1.6-27.el5_6.5 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1

php-debuginfo< 0:5.1.6-40.el5_9 | < 0:5.3.3-23.el6_4 | < 0:5.1.6-23.4.el5_3 | < 0:5.1.6-27.el5_6.5 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1 | < 0:4.3.2-56.ent | < 0:4.3.9-3.37.el4
php-devel< 0:5.1.6-40.el5_9 | < 0:5.3.3-23.el6_4 | < 0:5.1.6-23.4.el5_3 | < 0:5.1.6-27.el5_6.5 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1 | < 0:4.3.2-56.ent | < 0:4.3.9-3.37.el4
php-domxml< 0:4.3.9-3.37.el4
php-embedded< 0:5.3.3-23.el6_4 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1
php-enchant< 0:5.3.3-23.el6_4 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1
php-fpm< 0:5.3.3-23.el6_4
php-gd< 0:5.1.6-40.el5_9 | < 0:5.3.3-23.el6_4 | < 0:5.1.6-23.4.el5_3 | < 0:5.1.6-27.el5_6.5 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1 | < 0:4.3.9-3.37.el4
php-imap< 0:5.1.6-40.el5_9 | < 0:5.3.3-23.el6_4 | < 0:5.1.6-23.4.el5_3 | < 0:5.1.6-27.el5_6.5 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1 | < 0:4.3.2-56.ent | < 0:4.3.9-3.37.el4
php-intl< 0:5.3.3-23.el6_4 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1
php-ldap< 0:5.1.6-40.el5_9 | < 0:5.3.3-23.el6_4 | < 0:5.1.6-23.4.el5_3 | < 0:5.1.6-27.el5_6.5 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1 | < 0:4.3.2-56.ent | < 0:4.3.9-3.37.el4
php-mbstring< 0:5.1.6-40.el5_9 | < 0:5.3.3-23.el6_4 | < 0:5.1.6-23.4.el5_3 | < 0:5.1.6-27.el5_6.5 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1 | < 0:4.3.9-3.37.el4
php-mysql< 0:5.1.6-40.el5_9 | < 0:5.3.3-23.el6_4 | < 0:5.1.6-23.4.el5_3 | < 0:5.1.6-27.el5_6.5 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1 | < 0:4.3.2-56.ent | < 0:4.3.9-3.37.el4
php-ncurses< 0:5.1.6-40.el5_9 | < 0:5.1.6-23.4.el5_3 | < 0:5.1.6-27.el5_6.5 | < 0:4.3.9-3.37.el4
php-odbc< 0:5.1.6-40.el5_9 | < 0:5.3.3-23.el6_4 | < 0:5.1.6-23.4.el5_3 | < 0:5.1.6-27.el5_6.5 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1 | < 0:4.3.2-56.ent | < 0:4.3.9-3.37.el4
php-pdo< 0:5.1.6-40.el5_9 | < 0:5.3.3-23.el6_4 | < 0:5.1.6-23.4.el5_3 | < 0:5.1.6-27.el5_6.5 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1
php-pear< 0:4.3.9-3.37.el4
php-pgsql< 0:5.1.6-40.el5_9 | < 0:5.3.3-23.el6_4 | < 0:5.1.6-23.4.el5_3 | < 0:5.1.6-27.el5_6.5 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1 | < 0:4.3.2-56.ent | < 0:4.3.9-3.37.el4
php-process< 0:5.3.3-23.el6_4 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1
php-pspell< 0:5.3.3-23.el6_4 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1
php-recode< 0:5.3.3-23.el6_4 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1
php-snmp< 0:5.1.6-40.el5_9 | < 0:5.3.3-23.el6_4 | < 0:5.1.6-23.4.el5_3 | < 0:5.1.6-27.el5_6.5 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1 | < 0:4.3.9-3.37.el4
php-soap< 0:5.1.6-40.el5_9 | < 0:5.3.3-23.el6_4 | < 0:5.1.6-23.4.el5_3 | < 0:5.1.6-27.el5_6.5 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1
php-tidy< 0:5.3.3-23.el6_4 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1
php-xml< 0:5.1.6-40.el5_9 | < 0:5.3.3-23.el6_4 | < 0:5.1.6-23.4.el5_3 | < 0:5.1.6-27.el5_6.5 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1
php-xmlrpc< 0:5.1.6-40.el5_9 | < 0:5.3.3-23.el6_4 | < 0:5.1.6-23.4.el5_3 | < 0:5.1.6-27.el5_6.5 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1 | < 0:4.3.9-3.37.el4
php-zts< 0:5.3.3-23.el6_4 | < 0:5.3.3-3.el6_2.10 | < 0:5.3.3-14.el6_3.1
php53< 0:5.3.3-13.el5_9.1 | < 0:5.3.3-1.el5_6.3
php53-bcmath< 0:5.3.3-13.el5_9.1 | < 0:5.3.3-1.el5_6.3
php53-cli< 0:5.3.3-13.el5_9.1 | < 0:5.3.3-1.el5_6.3
php53-common< 0:5.3.3-13.el5_9.1 | < 0:5.3.3-1.el5_6.3
php53-dba< 0:5.3.3-13.el5_9.1 | < 0:5.3.3-1.el5_6.3
php53-debuginfo< 0:5.3.3-13.el5_9.1 | < 0:5.3.3-1.el5_6.3
php53-devel< 0:5.3.3-13.el5_9.1 | < 0:5.3.3-1.el5_6.3
php53-gd< 0:5.3.3-13.el5_9.1 | < 0:5.3.3-1.el5_6.3
php53-imap< 0:5.3.3-13.el5_9.1 | < 0:5.3.3-1.el5_6.3
php53-intl< 0:5.3.3-13.el5_9.1 | < 0:5.3.3-1.el5_6.3
php53-ldap< 0:5.3.3-13.el5_9.1 | < 0:5.3.3-1.el5_6.3
php53-mbstring< 0:5.3.3-13.el5_9.1 | < 0:5.3.3-1.el5_6.3
php53-mysql< 0:5.3.3-13.el5_9.1 | < 0:5.3.3-1.el5_6.3
php53-odbc< 0:5.3.3-13.el5_9.1 | < 0:5.3.3-1.el5_6.3
php53-pdo< 0:5.3.3-13.el5_9.1 | < 0:5.3.3-1.el5_6.3
php53-pgsql< 0:5.3.3-13.el5_9.1 | < 0:5.3.3-1.el5_6.3
php53-process< 0:5.3.3-13.el5_9.1 | < 0:5.3.3-1.el5_6.3
php53-pspell< 0:5.3.3-13.el5_9.1 | < 0:5.3.3-1.el5_6.3
php53-snmp< 0:5.3.3-13.el5_9.1 | < 0:5.3.3-1.el5_6.3
php53-soap< 0:5.3.3-13.el5_9.1 | < 0:5.3.3-1.el5_6.3
php53-xml< 0:5.3.3-13.el5_9.1 | < 0:5.3.3-1.el5_6.3
php53-xmlrpc< 0:5.3.3-13.el5_9.1 | < 0:5.3.3-1.el5_6.3

Show all 53

Mageia11 products

php< 5.3.27-1.mga2
php-apc< 3.1.13-1.9.mga2
php-eaccelerator< 0.9.6.1-10.11.mga2
php-firebird< 5.3.27-1.mga2
php-gd-bundled< 5.3.27-1.mga2

Show all 11

Debian1 product

php5< 5.3.3-7+squeeze16 | < 5.4.4-14+deb7u3

Php1 product

php≥ 5.3.0, < 5.3.27 | ≥ 5.4.0, < 5.4.18

4 vendors · 66 products

References

41 links

secunia.com/advisories/54071Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2013-1061.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/54165Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/54104Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2013-08/msg00007.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
git.php.net?p=php-src.git%3Ba=commit%3Bh=7d163e8a0880ae8af2dd869071393e5dc07ef271X Refsource CONFIRM
www.debian.org/security/2013/dsa-2723Vendor AdvisoryX Refsource DEBIANThird Party Advisory
secunia.com/advisories/54163Third Party AdvisoryX Refsource SECUNIA
bugs.php.net/bug.php?id=65236X Refsource CONFIRMVendor AdvisoryREPORT
www.ubuntu.com/usn/USN-1905-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory

Show all 41 references

rhn.redhat.com/errata/RHSA-2013-1062.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
support.apple.com/kb/HT6150X Refsource CONFIRMThird Party Advisory
php.net/ChangeLog-5.phpX Refsource CONFIRMVendor Advisory
rhn.redhat.com/errata/RHSA-2013-1050.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
rhn.redhat.com/errata/RHSA-2013-1049.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
rhn.redhat.com/errata/RHSA-2013-1063.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2013-08/msg00006.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2013-07/msg00034.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=983689X Refsource CONFIRMIssue TrackingREPORT
php.net/archive/2013.phpX Refsource CONFIRMVendor Advisory
advisories.mageia.org/MGASA-2013-0216.htmlAdvisory
www.php.net/ChangeLog-5.phpWEB
www.openwall.com/lists/oss-security/2013/07/11/6WEB
bugs.mageia.org/show_bug.cgi?id=10760REPORT
advisories.mageia.org/MGASA-2013-0233.htmlAdvisory
www.mandriva.com/en/support/security/advisories/mbs1/MDVSA-2013:195/Advisory
bugs.mageia.org/show_bug.cgi?id=10797REPORT
access.redhat.com/errata/RHSA-2013:1049Advisory
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1049.jsonAdvisory
access.redhat.com/security/cve/CVE-2013-4113REPORT
www.cve.org/CVERecord?id=CVE-2013-4113Advisory
nvd.nist.gov/vuln/detail/CVE-2013-4113Advisory
access.redhat.com/errata/RHSA-2013:1050Advisory
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1050.jsonAdvisory
access.redhat.com/errata/RHSA-2013:1061Advisory
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1061.jsonAdvisory
access.redhat.com/errata/RHSA-2013:1062Advisory
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1062.jsonAdvisory
access.redhat.com/errata/RHSA-2013:1063Advisory
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1063.jsonAdvisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities