oss-security - CVE Request: Use after free in PHP Collator::sortWithSortKeys function

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <CA+KTh2zX+FrBinNUikbOE5HBgzRpDbo9XxZ-iUBeOhbqaqUEEg@mail.gmail.com>
Date: Tue, 22 Dec 2015 23:29:54 +1300
From: Emmanuel Law <emmanuel.law@...il.com>
To: oss-security@...ts.openwall.com, cve-assign@...re.org
Cc: security@....net
Subject: CVE Request: Use after free in PHP Collator::sortWithSortKeys function

Hi,

I reported a use after free in PHP's Intl extension. The vulnerability is
in Collator::sortWithSortKeys function. Only Php 7.0.0 is affected.

https://bugs.php.net/bug.php?id=71020

This can potentially be remotely exploitable if the sorting function is
called on a user supplied array.

Not sure If this is CVE worthy. But if so, please assign it one.

Thanks.

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.