CVE-2011-4885 EXPLOIT
5.0
MEDIUM · CVSS 2.0 · EPSS 83.4% (pctl 100)
Patch early
A public exploit exists.
Description
PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
Scoring
| CVSS | 5.0 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:P |
| EPSS | 83.37% — more likely to be exploited than 100% of all CVEs |
| Weakness | CWE-20 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2011-12-30 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| php | php |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | PHP Hash Table Collision - Denial of Service (PoC) | 2012-01-03 |
| exploit-db | PHP 5.3.8 - Hashtables Denial of Service | 2012-01-01 |
| exploit-db | MyBulletinBoard (MyBB) 1.1.5 - 'CLIENT-IP' SQL Injection | 2006-07-15 |
References
- http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
- http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html
- http://marc.info/?l=bugtraq&m=132871655717248&w=2
- http://marc.info/?l=bugtraq&m=133469208622507&w=2
- http://rhn.redhat.com/errata/RHSA-2012-0071.html
- http://secunia.com/advisories/47404
- http://secunia.com/advisories/48668
- http://support.apple.com/kb/HT5281
- http://svn.php.net/viewvc?view=revision&revision=321003
- http://svn.php.net/viewvc?view=revision&revision=321040
- http://www.debian.org/security/2012/dsa-2399
- http://www.exploit-db.com/exploits/18296
- http://www.exploit-db.com/exploits/18305
- http://www.kb.cert.org/vuls/id/903934
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:197
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
- http://www.nruns.com/_downloads/advisory28122011.pdf
→ the Explorer · watch your stack · NVD