Bug 1399433 (CVE-2014-9912) - CVE-2014-9912 php: stack buffer overflow in locale_get_display_name
Summary: CVE-2014-9912 php: stack buffer overflow in locale_get_display_name
Keywords:
Status: CLOSED WONTFIX
Alias: CVE-2014-9912
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: 1360344
TreeView+ depends on / blocked
 
Reported: 2016-11-29 04:41 UTC by Doran Moppert
Modified: 2019-09-29 14:00 UTC (History)
5 users (show)

Fixed In Version: php 5.5.13, php 5.4.30, php 5.3.29
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-11-30 03:51:18 UTC

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description Doran Moppert 2016-11-29 04:41:34 UTC 
A string of more than 255 characters passed to locale_get_display_name (in the php-intl package) will cause a stack buffer overflow in the ICU library.

Upstream issue:

https://bugs.php.net/bug.php?id=67397

Upstream patch:

https://bugs.php.net/patch-display.php?bug_id=67397&patch=bug67397-patch&revision=latest

CVE assignment:

https://seclists.org/oss-sec/2016-q4/525

Note that this patch is actually a workaround for CVE-2014-9911 in icu.
Note You need to log in before you can comment on or make changes to this bug.