CVE-2013-4635
Last modified
CVE-2013-4635 is a vulnerability of currently unknown severity. Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows context-dependent attackers to cause a denial of service (application hang) via a large argument to the jdtojewish function.. EPSS estimates a 4.23% chance of exploitation in the next 30 days.
Description
Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows context-dependent attackers to cause a denial of service (application hang) via a large argument to the jdtojewish function.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Php | Php | <= 5.3.25 | — |
| Php | Php | 1.0 | — |
| Php | Php | 2.0 | — |
| Php | Php | 2.0b10 | — |
| Php | Php | 3.0 | — |
| Php | Php | 3.0.1 | — |
| Php | Php | 3.0.2 | — |
| Php | Php | 3.0.3 | — |
| Php | Php | 3.0.4 | — |
| Php | Php | 3.0.5 | — |
| Php | Php | 3.0.6 | — |
| Php | Php | 3.0.7 | — |
| Php | Php | 3.0.8 | — |
| Php | Php | 3.0.9 | — |
| Php | Php | 3.0.10 | — |
| Php | Php | 3.0.11 | — |
| Php | Php | 3.0.12 | — |
| Php | Php | 3.0.13 | — |
| Php | Php | 3.0.14 | — |
| Php | Php | 3.0.15 | — |
| Php | Php | 3.0.16 | — |
| Php | Php | 3.0.17 | — |
| Php | Php | 3.0.18 | — |
| Php | Php | 4.0 | Beta 4 Patch1 |
| Php | Php | 4.0.0 | — |
| Php | Php | 4.0.1 | — |
| Php | Php | 4.0.2 | — |
| Php | Php | 4.0.3 | — |
| Php | Php | 4.0.4 | — |
| Php | Php | 4.0.5 | — |
| Php | Php | 4.0.6 | — |
| Php | Php | 4.0.7 | — |
| Php | Php | 4.1.0 | — |
| Php | Php | 4.1.1 | — |
| Php | Php | 4.1.2 | — |
| Php | Php | 4.2.0 | — |
| Php | Php | 4.2.1 | — |
| Php | Php | 4.2.2 | — |
| Php | Php | 4.2.3 | — |
| Php | Php | 4.3.0 | — |
| Php | Php | 4.3.1 | — |
| Php | Php | 4.3.2 | — |
| Php | Php | 4.3.3 | — |
| Php | Php | 4.3.4 | — |
| Php | Php | 4.3.5 | — |
| Php | Php | 4.3.6 | — |
| Php | Php | 4.3.7 | — |
| Php | Php | 4.3.8 | — |
| Php | Php | 4.3.9 | — |
| Php | Php | 4.3.10 | — |
Showing 50 of 133 affected configurations. See NVD for the full list.
References
- http://www.php.net/ChangeLog-5.phpVendor Advisory
- http://www.php.net/ChangeLog-5.phpVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-4635?
How severe is CVE-2013-4635?
How do I fix CVE-2013-4635?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-4629The Huawei viewpoint VP9610 and VP9620 units for the Huawei …
- CVE-2013-4630Stack-based buffer overflow on Huawei AR 150, 200, 1200, 220…
- CVE-2013-4631Huawei AR 150, 200, 1200, 2200, and 3200 routers, when SNMPv…
- CVE-2013-4632The Huawei Access Router (AR) before V200R002SPC003 allows r…
- CVE-2013-4633Huawei Seco Versatile Security Manager (VSM) before V200R002…
- CVE-2013-4634SQL injection vulnerability in the jQuery autocomplete for i…
- CVE-2013-4636The mget function in libmagic/softmagic.c in the Fileinfo co…
- CVE-2013-4649Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN)…
- CVE-2013-4650MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows rem…
- CVE-2013-4651Siemens Scalance W7xx devices with firmware before 4.5.4 use…
- CVE-2013-4652Unspecified vulnerability in the command-line management int…
- CVE-2013-4653Multiple cross-site scripting (XSS) vulnerabilities in the s…
Are you affected by CVE-2013-4635?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST