Vulnerability
CVE-2013-4635
CVE-2013-4635 is a medium-severity vulnerability (CVSS v2 5.0). As of 2026-10-08, 20 740 hosts in our data show software it affects on an open service in at least 15 countries.
Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows context-dependent attackers to cause a denial of service (application hang) via a large argument to the jdtojewish function.
- Published
- 2013-06-21
- Last modified
- 2026-06-16
- CVSS score
- 5.0 CVSS v2
- CVSS vector (v2)
- AV:N/AC:L/Au:N/C:N/I:N/A:P
- Exploit likelihood (EPSS)
- 4.2% in the next 30 days (higher than 91% of CVEs)
Exposure in our data
20 740 hosts
Hosts whose banner shows an affected software version on a service open at their latest check.
Not counted: 183 hosts with this CVE only from an older observation.
Not counted: 5 hosts where the software version is too vague to tell (only a major release).
Not counted: 2 923 more on distribution builds that may be patched (the distribution may have backported the fix without changing the version).
Not counted: 2 hosts whose data looks unreliable.
35 more hosts had it earlier (the software version has since changed or the service is gone).
Counted 2026-10-08 03:20 UTC
By country
| United States US | 9 875 |
| China CN | 1 126 |
| Austria AT | 1 093 |
| South Korea KR | 856 |
| Japan JP | 781 |
| Sweden SE | 781 |
| Germany DE | 756 |
| France FR | 489 |
| Canada CA | 474 |
| Italy IT | 411 |
| United Kingdom GB | 373 |
| Poland PL | 311 |
| Taiwan TW | 301 |
| Finland FI | 261 |
| Russia RU | 254 |
Affected software seen
| php 4.4.0 | 6 784 |
| php 5.3.3 | 4 923 |
| php 5.2.17 | 1 881 |
| php 5.1.6 | 1 025 |
| php 5.2.6 | 485 |
| php 4.3.3 | 388 |
| php 5.2.9 | 313 |
| php 5.3.10 | 305 |
| php 4.4.9 | 278 |
| php 5.3.6 | 265 |
| php 5.3.8 | 264 |
| php 4.3.10 | 244 |