CVE-2015-1352 in PHP
Summary
The build_tablename function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP through 5.6.7 does not validate token extraction for table names, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted name.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
01/24/2015
Disclosure
03/30/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 69187 | PHP pgsql null pointer dereference | 476 | Unproven | Official fix | CVE-2015-1352 |