Description
Unspecified vulnerability in the chunk_split function in PHP before 5.2.4 has unknown impact and attack vectors, related to an incorrect size calculation.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | php5 | 5.2.3-1+lenny1 | DTSA-61-1 |
| Debian 4.0 | php5 | 5.2.0-8+etch9 | DSA-1444-1 |
Advisories 2
- DSA-1444-1 php5 several issues Debian Security (DSA / DLA) · Mar 9, 2026
- DTSA-61-1 php5 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- https://launchpad.net/bugs/173043
- DSA-1444 vendor-advisory
- GLSA-200710-02 vendor-advisory
- 27864 third-party-advisory
- http://www.php.net/ChangeLog-5.php#5.2.4
- USN-549-1 vendor-advisory
- 28249 third-party-advisory
- MDVSA-2008:125 vendor-advisory
- 27102 third-party-advisory
- ADV-2007-3023 vdb-entry
- http://www.php.net/releases/5_2_4.php
- USN-549-2 vendor-advisory
- MDVSA-2008:126 vendor-advisory
- 26642 third-party-advisory