CVE-2011-1468
PHP < 5.3.6 - Denial of Service via OpenSSL Extension Memory Leak
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-1468. PoCs published by dovbysh.
AI-analyzed exploit summary This exploit demonstrates a denial-of-service vulnerability in PHP's OpenSSL extension by repeatedly calling openssl_encrypt with a large loop, causing excessive memory consumption. It targets versions prior to PHP 5.3.6.
Description
Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory consumption) via (1) plaintext data to the openssl_encrypt function or (2) ciphertext data to the openssl_decrypt function.
Exploits (2)
This exploit demonstrates a denial-of-service vulnerability in PHP's OpenSSL extension by repeatedly calling openssl_encrypt with a large loop, causing excessive memory consumption. It targets versions prior to PHP 5.3.6.
This exploit demonstrates a denial-of-service vulnerability in PHP's OpenSSL extension by repeatedly encrypting and decrypting data, causing excessive memory consumption. The issue is resolved by adding EVP_CIPHER_CTX_cleanup to the openssl_decrypt function.