Summary
Certain inputs provided to mb_encode_mimeheader trigger an endless loop.
Details
A discernible pattern has not yet been identified, but a specific string consistently reproduces the issue.
PoC
In PHP 8.3.3, execute:
mb_encode_mimeheader runs endlessly for some inputs
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2024-04-11 23:00 UTC
- Importiert: 2026-10-07 06:38 UTC
- CVSS: 7.5
- Quelle-ID:
php_sec - uid_hash:
160b9388aef36b8aba6c7ce75a156d943ea4374f917caf6358ed278f4f17250d
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
7.5 |
HIGH |
7.5 |
2024-04-29 |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| PHP Security (php/php-src GHSA) | vendor_advisory | php, runtime | - | de | https://github.com/php/php-src/security/advisories |