Re: CVE Request -- PHP strrchr() Interruption Information Leak Vulnerability

[Josh Bressers <bressers () redhat com>]

----- "Péter Veres" <moltesalt () gmail com> wrote:

> Hi Steve,
>
> PHP’s strrchr() function can be interrupted and used for information
> leakage due to call time pass by reference.
>
> Could you allocate a CVE id for this issue?

Do you have some sort of reference for this? I'm not finding anything in the
usual places.

I'll assign an ID once I have more information.

Thanks.

-- 
    JB