Vulnerability-Lookup

RHSA-2014_1766

Vulnerability from csaf_redhat - Published: 2014-10-30 19:45 - Updated: 2024-11-25 11:58

Summary

Red Hat Security Advisory: php55-php security update

Severity

Important

Notes

Topic: Updated php55-php packages that fix multiple security issues are now available for Red Hat Software Collections 1. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. A buffer overflow flaw was found in the Exif extension. A specially crafted JPEG or TIFF file could cause a PHP application using the exif_thumbnail() function to crash or, possibly, execute arbitrary code. (CVE-2014-3670) Multiple buffer overflow flaws were found in the way PHP parsed DNS responses. A malicious DNS server or a man-in-the-middle attacker could use these flaws to crash or, possibly, execute arbitrary code with the privileges of a PHP application that uses the dns_get_record() function. (CVE-2014-4049, CVE-2014-3597) Multiple denial of service flaws were found in the File Information (fileinfo) extension. A remote attacker could use these flaws to cause a PHP application using fileinfo to consume an excessive amount of CPU and possibly crash. (CVE-2014-0237, CVE-2014-0238, CVE-2014-3538) Multiple boundary check flaws were found in the File Information (fileinfo) extension. A remote attacker could use these flaws to cause a PHP application using fileinfo to crash. (CVE-2014-0207, CVE-2014-3478, CVE-2014-3479, CVE-2014-3480, CVE-2014-3487, CVE-2014-3587, CVE-2014-3710) A type confusion issue was found in PHP's phpinfo() function. A malicious script author could possibly use this flaw to disclose certain portions of server memory. (CVE-2014-4721) A type confusion issue was found in the SPL ArrayObject and SPLObjectStorage classes' unserialize() method. A remote attacker able to submit specially crafted input to a PHP application, which would then unserialize this input using one of the aforementioned methods, could use this flaw to execute arbitrary code with the privileges of the user running that PHP application. (CVE-2014-3515) Two use-after-free flaws were found in the way PHP handled certain Standard PHP Library (SPL) Iterators and ArrayIterators. A malicious script author could possibly use either of these flaws to disclose certain portions of server memory. (CVE-2014-4670, CVE-2014-4698) An integer overflow flaw was found in the way custom objects were unserialized. Specially crafted input processed by the unserialize() function could cause a PHP application to crash. (CVE-2014-3669) It was found that PHP's gd extension did not properly handle file names with a null character. A remote attacker could possibly use this flaw to make a PHP application access unexpected files and bypass intended file system access restrictions. (CVE-2014-5120) A NULL pointer dereference flaw was found in the gdImageCreateFromXpm() function of PHP's gd extension. A remote attacker could use this flaw to crash a PHP application using gd via a specially crafted X PixMap (XPM) file. (CVE-2014-2497) An out of bounds read flaw was found in the way the xmlrpc extension parsed dates in the ISO 8601 format. A specially crafted XML-RPC request or response could possibly cause a PHP application to crash. (CVE-2014-3668) The CVE-2014-0207, CVE-2014-0237, CVE-2014-0238, CVE-2014-3478, CVE-2014-3479, CVE-2014-3480, CVE-2014-3487, and CVE-2014-3710 issues were discovered by Francisco Alonso of Red Hat Product Security; the CVE-2014-3538 issue was discovered by Jan Kaluža of the Red Hat Web Stack Team; the CVE-2014-3597 issue was discovered by David Kutálek of Red Hat BaseOS QE. All php55-php users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the updated packages, the httpd24-httpd service must be restarted for the update to take effect.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2014-0207

A denial of service flaw was found in the way the File Information (fileinfo) extension parsed certain Composite Document Format (CDF) files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted CDF file.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

Fixed 199 products

Product	Version	Remediation
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-0:5.5.6-13.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-bcmath-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-cli-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-common-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-dba-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-debuginfo-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-devel-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-enchant-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-fpm-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-gd-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-gmp-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-imap-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-intl-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-ldap-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-mbstring-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-mysqlnd-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-odbc-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-opcache-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-pdo-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-pgsql-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-process-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-pspell-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-recode-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-snmp-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-soap-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-tidy-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-xml-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.4.Z:php55-php-xmlrpc-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-0:5.5.6-13.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-bcmath-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-cli-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-common-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-dba-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-debuginfo-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-devel-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-enchant-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-fpm-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-gd-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-gmp-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-imap-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-intl-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-ldap-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-mbstring-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-mysqlnd-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-odbc-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-opcache-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-pdo-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-pgsql-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-process-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-pspell-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-recode-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-snmp-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-soap-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-tidy-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-xml-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.5.Z:php55-php-xmlrpc-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-0:5.5.6-13.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-bcmath-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-cli-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-common-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-dba-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-debuginfo-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-devel-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-enchant-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-fpm-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-gd-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-gmp-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-imap-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-intl-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-ldap-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-mbstring-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-mysqlnd-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-odbc-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-opcache-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-pdo-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-pgsql-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-process-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-pspell-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-recode-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-snmp-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-soap-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-tidy-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-xml-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2-6.6.Z:php55-php-xmlrpc-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-0:5.5.6-13.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-bcmath-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-cli-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-common-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-dba-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-debuginfo-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-devel-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-enchant-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-fpm-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-gd-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-gmp-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-imap-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-intl-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-ldap-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-mbstring-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-mysqlnd-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-odbc-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-opcache-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-pdo-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-pgsql-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-process-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-pspell-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-recode-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-snmp-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-soap-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-tidy-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-xml-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-1.2:php55-php-xmlrpc-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-0:5.5.6-13.el6.src	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-bcmath-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-cli-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-common-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-dba-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-debuginfo-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-devel-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-enchant-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-fpm-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-gd-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-gmp-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-imap-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-intl-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-ldap-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-mbstring-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-mysqlnd-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-odbc-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-opcache-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-pdo-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-pgsql-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-process-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-pspell-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-recode-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-snmp-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-soap-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-tidy-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-xml-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-1.2:php55-php-xmlrpc-0:5.5.6-13.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-0:5.5.6-13.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-bcmath-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-cli-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-common-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-dba-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-debuginfo-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-devel-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-enchant-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-fpm-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-gd-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-gmp-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-intl-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-ldap-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-mbstring-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-mysqlnd-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-odbc-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-opcache-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-pdo-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-pgsql-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-process-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-pspell-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-recode-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-snmp-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-soap-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-xml-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-1.2:php55-php-xmlrpc-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-0:5.5.6-13.el7.src	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-bcmath-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-cli-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-common-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-dba-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-debuginfo-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-devel-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-enchant-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-fpm-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-gd-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-gmp-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-intl-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-ldap-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-mbstring-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-mysqlnd-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-odbc-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-opcache-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-pdo-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-pgsql-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-process-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-pspell-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-recode-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-snmp-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-soap-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-xml-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-1.2:php55-php-xmlrpc-0:5.5.6-13.el7.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2014-0237

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-407 - Inefficient Algorithmic Complexity

Affected products

Fixed 199 products, the same list as for CVE-2014-0207

Threats

Impact Moderate

CVE-2014-0238

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 199 products, the same list as for CVE-2014-0207

Threats

Impact Moderate

CVE-2014-2497

A NULL pointer dereference flaw was found in the gdImageCreateFromXpm() function of PHP's gd extension. A remote attacker could use this flaw to crash a PHP application using gd via a specially crafted X PixMap (XPM) file.

2.6 ()


                
                  AV:N/AC:H/Au:N/C:N/I:N/A:P

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 199 products, the same list as for CVE-2014-0207

Threats

Impact Low

CVE-2014-3478

A buffer overflow flaw was found in the way the File Information (fileinfo) extension processed certain Pascal strings. A remote attacker able to make a PHP application using fileinfo convert a specially crafted Pascal string provided by an image file could cause that application to crash.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

Fixed 199 products, the same list as for CVE-2014-0207

Threats

Impact Moderate

CVE-2014-3479

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

Fixed 199 products, the same list as for CVE-2014-0207

Threats

Impact Moderate

CVE-2014-3480

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

Fixed 199 products, the same list as for CVE-2014-0207

Threats

Impact Moderate

CVE-2014-3487

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

Fixed 199 products, the same list as for CVE-2014-0207

Threats

Impact Moderate

CVE-2014-3515

A type confusion issue was found in the SPL ArrayObject and SPLObjectStorage classes' unserialize() method. A remote attacker able to submit specially crafted input to a PHP application, which would then unserialize this input using one of the aforementioned methods, could use this flaw to execute arbitrary code with the privileges of the user running that PHP application.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 199 products, the same list as for CVE-2014-0207

Threats

Impact Low

CVE-2014-3538

Multiple flaws were found in the File Information (fileinfo) extension regular expression rules for detecting various files. A remote attacker could use either of these flaws to cause a PHP application using fileinfo to consume an excessive amount of CPU.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

Fixed 199 products, the same list as for CVE-2014-0207

Threats

Impact Moderate

CVE-2014-3587

It was found that the fix for CVE-2012-1571 was incomplete; the File Information (fileinfo) extension did not correctly parse certain Composite Document Format (CDF) files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted CDF file.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 199 products, the same list as for CVE-2014-0207

Threats

Impact Moderate

CVE-2014-3597

Multiple buffer over-read flaws were found in the php_parserr() function of PHP. A malicious DNS server or a man-in-the-middle attacker could possibly use this flaw to crash a PHP application that used the dns_get_record() function to perform a DNS query.

2.6 ()


                
                  AV:N/AC:H/Au:N/C:N/I:N/A:P

CWE-125 - Out-of-bounds Read

Affected products

Fixed 199 products, the same list as for CVE-2014-0207

Threats

Impact Low

CVE-2014-3668

An out of bounds read flaw was found in the way the xmlrpc extension parsed dates in the ISO 8601 format. A specially crafted XML-RPC request or response could possibly cause a PHP application to crash.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-125 - Out-of-bounds Read

Affected products

Fixed 199 products, the same list as for CVE-2014-0207

Threats

Impact Moderate

CVE-2014-3669

An integer overflow flaw was found in the way custom objects were unserialized. Specially crafted input processed by the unserialize() function could cause a PHP application to crash.

5.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:N

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 199 products, the same list as for CVE-2014-0207

Threats

Impact Moderate

CVE-2014-3670

A buffer overflow flaw was found in the Exif extension. A specially crafted JPEG or TIFF file could cause a PHP application using the exif_thumbnail() function to crash or, possibly, execute arbitrary code with the privileges of the user running that PHP application.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 199 products, the same list as for CVE-2014-0207

Threats

Impact Important

CVE-2014-3710

An out-of-bounds read flaw was found in the way the File Information (fileinfo) extension parsed Executable and Linkable Format (ELF) files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted ELF file.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-125 - Out-of-bounds Read

Affected products

Fixed 199 products, the same list as for CVE-2014-0207

Threats

Impact Moderate

CVE-2014-4049

A heap-based buffer overflow flaw was found in the way PHP parsed DNS TXT records. A malicious DNS server or a man-in-the-middle attacker could possibly use this flaw to execute arbitrary code as the PHP interpreter if a PHP application used the dns_get_record() function to perform a DNS query.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 199 products, the same list as for CVE-2014-0207

Threats

Impact Moderate

CVE-2014-4670

A use-after-free flaw was found in the way PHP handled certain Standard PHP Library (SPL) Iterators. A malicious script author could possibly use this flaw to disclose certain portions of server memory.

2.1 ()


                
                  AV:L/AC:L/Au:N/C:N/I:N/A:P

CWE-416 - Use After Free

Affected products

Fixed 199 products, the same list as for CVE-2014-0207

Threats

Impact Low

CVE-2014-4698

A use-after-free flaw was found in the way PHP handled certain ArrayIterators. A malicious script author could possibly use this flaw to disclose certain portions of server memory.

2.1 ()


                
                  AV:L/AC:L/Au:N/C:N/I:N/A:P

CWE-416 - Use After Free

Affected products

Fixed 199 products, the same list as for CVE-2014-0207

Threats

Impact Low

CVE-2014-4721

A type confusion issue was found in PHP's phpinfo() function. A malicious script author could possibly use this flaw to disclose certain portions of server memory.

2.6 ()


                
                  AV:N/AC:H/Au:N/C:P/I:N/A:N

CWE-201 - Insertion of Sensitive Information Into Sent Data

Affected products

Fixed 199 products, the same list as for CVE-2014-0207

Threats

Impact Low

CVE-2014-5120

It was found that PHP's gd extension did not properly handle file names with a null character. A remote attacker could possibly use this flaw to make a PHP application access unexpected files and bypass intended file system access restrictions.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-626 - Null Byte Interaction Error (Poison Null Byte)

Affected products

Fixed 199 products, the same list as for CVE-2014-0207

Threats

Impact Moderate

References

108 references

URL	Category
https://access.redhat.com/errata/RHSA-2014:1766	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1076676	external
https://bugzilla.redhat.com/show_bug.cgi?id=1091842	external
https://bugzilla.redhat.com/show_bug.cgi?id=1098155	external
https://bugzilla.redhat.com/show_bug.cgi?id=1098193	external
https://bugzilla.redhat.com/show_bug.cgi?id=1098222	external
https://bugzilla.redhat.com/show_bug.cgi?id=1104858	external
https://bugzilla.redhat.com/show_bug.cgi?id=1104863	external
https://bugzilla.redhat.com/show_bug.cgi?id=1104869	external
https://bugzilla.redhat.com/show_bug.cgi?id=1107544	external
https://bugzilla.redhat.com/show_bug.cgi?id=1108447	external
https://bugzilla.redhat.com/show_bug.cgi?id=1112154	external
https://bugzilla.redhat.com/show_bug.cgi?id=1116662	external
https://bugzilla.redhat.com/show_bug.cgi?id=1120259	external
https://bugzilla.redhat.com/show_bug.cgi?id=1120266	external
https://bugzilla.redhat.com/show_bug.cgi?id=1128587	external
https://bugzilla.redhat.com/show_bug.cgi?id=1132589	external
https://bugzilla.redhat.com/show_bug.cgi?id=1132793	external
https://bugzilla.redhat.com/show_bug.cgi?id=1154500	external
https://bugzilla.redhat.com/show_bug.cgi?id=1154502	external
https://bugzilla.redhat.com/show_bug.cgi?id=1154503	external
https://bugzilla.redhat.com/show_bug.cgi?id=1155071	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2014-0207	self
https://bugzilla.redhat.com/show_bug.cgi?id=1091842	external
https://www.cve.org/CVERecord?id=CVE-2014-0207	external
https://nvd.nist.gov/vuln/detail/CVE-2014-0207	external
https://access.redhat.com/security/cve/CVE-2014-0237	self
https://bugzilla.redhat.com/show_bug.cgi?id=1098193	external
https://www.cve.org/CVERecord?id=CVE-2014-0237	external
https://nvd.nist.gov/vuln/detail/CVE-2014-0237	external
https://access.redhat.com/security/cve/CVE-2014-0238	self
https://bugzilla.redhat.com/show_bug.cgi?id=1098155	external
https://www.cve.org/CVERecord?id=CVE-2014-0238	external
https://nvd.nist.gov/vuln/detail/CVE-2014-0238	external
https://access.redhat.com/security/cve/CVE-2014-2497	self
https://bugzilla.redhat.com/show_bug.cgi?id=1076676	external
https://www.cve.org/CVERecord?id=CVE-2014-2497	external
https://nvd.nist.gov/vuln/detail/CVE-2014-2497	external
https://access.redhat.com/security/cve/CVE-2014-3478	self
https://bugzilla.redhat.com/show_bug.cgi?id=1104863	external
https://www.cve.org/CVERecord?id=CVE-2014-3478	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3478	external
https://access.redhat.com/security/cve/CVE-2014-3479	self
https://bugzilla.redhat.com/show_bug.cgi?id=1104869	external
https://www.cve.org/CVERecord?id=CVE-2014-3479	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3479	external
https://access.redhat.com/security/cve/CVE-2014-3480	self
https://bugzilla.redhat.com/show_bug.cgi?id=1104858	external
https://www.cve.org/CVERecord?id=CVE-2014-3480	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3480	external
https://access.redhat.com/security/cve/CVE-2014-3487	self
https://bugzilla.redhat.com/show_bug.cgi?id=1107544	external
https://www.cve.org/CVERecord?id=CVE-2014-3487	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3487	external
https://access.redhat.com/security/cve/CVE-2014-3515	self
https://bugzilla.redhat.com/show_bug.cgi?id=1112154	external
https://www.cve.org/CVERecord?id=CVE-2014-3515	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3515	external
https://access.redhat.com/security/cve/CVE-2014-3538	self
https://bugzilla.redhat.com/show_bug.cgi?id=1098222	external
https://www.cve.org/CVERecord?id=CVE-2014-3538	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3538	external
https://access.redhat.com/security/cve/CVE-2014-3587	self
https://bugzilla.redhat.com/show_bug.cgi?id=1128587	external
https://www.cve.org/CVERecord?id=CVE-2014-3587	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3587	external
https://access.redhat.com/security/cve/CVE-2014-3597	self
https://bugzilla.redhat.com/show_bug.cgi?id=1132589	external
https://www.cve.org/CVERecord?id=CVE-2014-3597	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3597	external
https://access.redhat.com/security/cve/CVE-2014-3668	self
https://bugzilla.redhat.com/show_bug.cgi?id=1154503	external
https://www.cve.org/CVERecord?id=CVE-2014-3668	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3668	external
https://access.redhat.com/security/cve/CVE-2014-3669	self
https://bugzilla.redhat.com/show_bug.cgi?id=1154500	external
https://www.cve.org/CVERecord?id=CVE-2014-3669	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3669	external
https://access.redhat.com/security/cve/CVE-2014-3670	self
https://bugzilla.redhat.com/show_bug.cgi?id=1154502	external
https://www.cve.org/CVERecord?id=CVE-2014-3670	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3670	external
https://access.redhat.com/security/cve/CVE-2014-3710	self
https://bugzilla.redhat.com/show_bug.cgi?id=1155071	external
https://www.cve.org/CVERecord?id=CVE-2014-3710	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3710	external
https://access.redhat.com/security/cve/CVE-2014-4049	self
https://bugzilla.redhat.com/show_bug.cgi?id=1108447	external
https://www.cve.org/CVERecord?id=CVE-2014-4049	external
https://nvd.nist.gov/vuln/detail/CVE-2014-4049	external
https://access.redhat.com/security/cve/CVE-2014-4670	self
https://bugzilla.redhat.com/show_bug.cgi?id=1120266	external
https://www.cve.org/CVERecord?id=CVE-2014-4670	external
https://nvd.nist.gov/vuln/detail/CVE-2014-4670	external
https://access.redhat.com/security/cve/CVE-2014-4698	self
https://bugzilla.redhat.com/show_bug.cgi?id=1120259	external
https://www.cve.org/CVERecord?id=CVE-2014-4698	external
https://nvd.nist.gov/vuln/detail/CVE-2014-4698	external
https://access.redhat.com/security/cve/CVE-2014-4721	self
https://bugzilla.redhat.com/show_bug.cgi?id=1116662	external
https://www.cve.org/CVERecord?id=CVE-2014-4721	external
https://nvd.nist.gov/vuln/detail/CVE-2014-4721	external
https://access.redhat.com/security/cve/CVE-2014-5120	self
https://bugzilla.redhat.com/show_bug.cgi?id=1132793	external
https://www.cve.org/CVERecord?id=CVE-2014-5120	external
https://nvd.nist.gov/vuln/detail/CVE-2014-5120	external

Acknowledgments

Red Hat Product Security Francisco Alonso

Red Hat Web Stack Team Jan Kaluža

Red Hat BaseOS QE David Kutálek

JSON

To clipboard

Loading 1.1 MB of JSON…

CVE-2014-0207 (GCVE-0-2014-0207)

Vulnerability from cvelistv5 – Published: 2014-07-09 10:00 – Updated: 2025-12-04 20:29

Summary

The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted CDF file.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-04 20:29 UTC

CWE

n/a
CWE-20 - Improper Input Validation

Assigner

redhat redhat root

References

19 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=1091842	x_refsource_CONFIRM
https://support.apple.com/HT204659	x_refsource_CONFIRM
http://www.securityfocus.com/bid/68243	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2014/dsa-3021	vendor-advisoryx_refsource_DEBIAN
http://marc.info/?l=bugtraq&m=141017844705317&w=2	vendor-advisoryx_refsource_HP
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.debian.org/security/2014/dsa-2974	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/59794	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://mx.gw.com/pipermail/file/2014/001553.html	mailing-listx_refsource_MLIST
https://github.com/file/file/commit/6d209c1c48945…	x_refsource_CONFIRM
https://bugs.php.net/bug.php?id=67326	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://support.apple.com/kb/HT6443	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/59831	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE

Date Public

2014-06-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:05:39.204Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1091842"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "name": "68243",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/68243"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "name": "DSA-3021",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3021"
          },
          {
            "name": "HPSBUX03102",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "DSA-2974",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2974"
          },
          {
            "name": "59794",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59794"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "[file] 20140612 file-5.19 is now available",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/6d209c1c489457397a5763bca4b28e43aac90391"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=67326"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT6443"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "name": "SSRT101681",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "name": "59831",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59831"
          },
          {
            "name": "openSUSE-SU-2014:1236",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2014-0207",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-04T20:29:01.775646Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-20",
                "description": "CWE-20 Improper Input Validation",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-04T20:29:06.728Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted CDF file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-25T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1091842"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "name": "68243",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/68243"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "name": "DSA-3021",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3021"
        },
        {
          "name": "HPSBUX03102",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "DSA-2974",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2974"
        },
        {
          "name": "59794",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59794"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "[file] 20140612 file-5.19 is now available",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/6d209c1c489457397a5763bca4b28e43aac90391"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=67326"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT6443"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "name": "SSRT101681",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "name": "59831",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59831"
        },
        {
          "name": "openSUSE-SU-2014:1236",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-0207",
    "datePublished": "2014-07-09T10:00:00.000Z",
    "dateReserved": "2013-12-03T00:00:00.000Z",
    "dateUpdated": "2025-12-04T20:29:06.728Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2014-0237 (GCVE-0-2014-0237)

Vulnerability from cvelistv5 – Published: 2014-06-01 01:00 – Updated: 2024-08-06 09:05

Summary

The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (performance degradation) by triggering many file_printf calls.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

18 references

URL	Tags
http://secunia.com/advisories/59329	third-party-advisoryx_refsource_SECUNIA
https://github.com/file/file/commit/b8acc83781d5a…	x_refsource_CONFIRM
http://secunia.com/advisories/59418	third-party-advisoryx_refsource_SECUNIA
https://support.apple.com/HT204659	x_refsource_CONFIRM
http://www.securityfocus.com/bid/67759	vdb-entryx_refsource_BID
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2014/dsa-3021	vendor-advisoryx_refsource_DEBIAN
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://secunia.com/advisories/59061	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://secunia.com/advisories/60998	third-party-advisoryx_refsource_SECUNIA
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://support.apple.com/kb/HT6443	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
https://bugs.php.net/bug.php?id=67328	x_refsource_CONFIRM

Date Public

2014-05-29 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:05:39.320Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "59329",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59329"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/b8acc83781d5a24cc5101e525d15efe0482c280d"
          },
          {
            "name": "59418",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59418"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "name": "67759",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/67759"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "name": "DSA-3021",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3021"
          },
          {
            "name": "SUSE-SU-2014:0869",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "59061",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59061"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "60998",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60998"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT6443"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=67328"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-05-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (performance degradation) by triggering many file_printf calls."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-01-05T14:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "59329",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59329"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/b8acc83781d5a24cc5101e525d15efe0482c280d"
        },
        {
          "name": "59418",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59418"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "name": "67759",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/67759"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "name": "DSA-3021",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3021"
        },
        {
          "name": "SUSE-SU-2014:0869",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "59061",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59061"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "60998",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60998"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT6443"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=67328"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2014-0237",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (performance degradation) by triggering many file_printf calls."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "59329",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59329"
            },
            {
              "name": "https://github.com/file/file/commit/b8acc83781d5a24cc5101e525d15efe0482c280d",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/b8acc83781d5a24cc5101e525d15efe0482c280d"
            },
            {
              "name": "59418",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59418"
            },
            {
              "name": "https://support.apple.com/HT204659",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT204659"
            },
            {
              "name": "67759",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/67759"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
            },
            {
              "name": "RHSA-2014:1766",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
            },
            {
              "name": "DSA-3021",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-3021"
            },
            {
              "name": "SUSE-SU-2014:0869",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "59061",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59061"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php"
            },
            {
              "name": "60998",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60998"
            },
            {
              "name": "APPLE-SA-2015-04-08-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
            },
            {
              "name": "http://support.apple.com/kb/HT6443",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT6443"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
            },
            {
              "name": "RHSA-2014:1765",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=67328",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=67328"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-0237",
    "datePublished": "2014-06-01T01:00:00.000Z",
    "dateReserved": "2013-12-03T00:00:00.000Z",
    "dateUpdated": "2024-08-06T09:05:39.320Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-0238 (GCVE-0-2014-0238)

Vulnerability from cvelistv5 – Published: 2014-06-01 01:00 – Updated: 2024-08-06 09:05

Summary

The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite loop or out-of-bounds memory access) via a vector that (1) has zero length or (2) is too long.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

18 references

URL	Tags
http://secunia.com/advisories/59329	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/59418	third-party-advisoryx_refsource_SECUNIA
https://support.apple.com/HT204659	x_refsource_CONFIRM
https://bugs.php.net/bug.php?id=67327	x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
https://github.com/file/file/commit/f97486ef5dc3e…	x_refsource_CONFIRM
http://www.debian.org/security/2014/dsa-3021	vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/67765	vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://secunia.com/advisories/59061	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://secunia.com/advisories/60998	third-party-advisoryx_refsource_SECUNIA
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://support.apple.com/kb/HT6443	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT

Date Public

2014-05-29 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:05:39.452Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "59329",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59329"
          },
          {
            "name": "59418",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59418"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=67327"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/f97486ef5dc3e8735440edc4fc8808c63e1a3ef0"
          },
          {
            "name": "DSA-3021",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3021"
          },
          {
            "name": "67765",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/67765"
          },
          {
            "name": "SUSE-SU-2014:0869",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "59061",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59061"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "60998",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60998"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT6443"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-05-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite loop or out-of-bounds memory access) via a vector that (1) has zero length or (2) is too long."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-01-05T14:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "59329",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59329"
        },
        {
          "name": "59418",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59418"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=67327"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/f97486ef5dc3e8735440edc4fc8808c63e1a3ef0"
        },
        {
          "name": "DSA-3021",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3021"
        },
        {
          "name": "67765",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/67765"
        },
        {
          "name": "SUSE-SU-2014:0869",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "59061",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59061"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "60998",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60998"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT6443"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2014-0238",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite loop or out-of-bounds memory access) via a vector that (1) has zero length or (2) is too long."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "59329",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59329"
            },
            {
              "name": "59418",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59418"
            },
            {
              "name": "https://support.apple.com/HT204659",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT204659"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=67327",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=67327"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
            },
            {
              "name": "RHSA-2014:1766",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
            },
            {
              "name": "https://github.com/file/file/commit/f97486ef5dc3e8735440edc4fc8808c63e1a3ef0",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/f97486ef5dc3e8735440edc4fc8808c63e1a3ef0"
            },
            {
              "name": "DSA-3021",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-3021"
            },
            {
              "name": "67765",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/67765"
            },
            {
              "name": "SUSE-SU-2014:0869",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "59061",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59061"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php"
            },
            {
              "name": "60998",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60998"
            },
            {
              "name": "APPLE-SA-2015-04-08-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
            },
            {
              "name": "http://support.apple.com/kb/HT6443",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT6443"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
            },
            {
              "name": "RHSA-2014:1765",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-0238",
    "datePublished": "2014-06-01T01:00:00.000Z",
    "dateReserved": "2013-12-03T00:00:00.000Z",
    "dateUpdated": "2024-08-06T09:05:39.452Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-2497 (GCVE-0-2014-2497)

Vulnerability from cvelistv5 – Published: 2014-03-21 14:00 – Updated: 2024-08-06 10:14

Summary

The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

21 references

URL	Tags
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/59418	third-party-advisoryx_refsource_SECUNIA
https://support.apple.com/HT204659	x_refsource_CONFIRM
http://secunia.com/advisories/59496	third-party-advisoryx_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/59652	third-party-advisoryx_refsource_SECUNIA
https://bugzilla.redhat.com/show_bug.cgi?id=1076676	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2015/dsa-3215	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/59061	third-party-advisoryx_refsource_SECUNIA
https://security.gentoo.org/glsa/201607-04	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2014-1326.html	vendor-advisoryx_refsource_REDHAT
http://advisories.mageia.org/MGASA-2014-0288.html	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.securityfocus.com/bid/66233	vdb-entryx_refsource_BID
http://www.ubuntu.com/usn/USN-2987-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2014-1327.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
https://bugs.php.net/bug.php?id=66901	x_refsource_CONFIRM

Date Public

2014-03-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:14:26.563Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2014:0868",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00001.html"
          },
          {
            "name": "MDVSA-2015:153",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:153"
          },
          {
            "name": "59418",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59418"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "name": "59496",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59496"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "name": "59652",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59652"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1076676"
          },
          {
            "name": "SUSE-SU-2014:0869",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
          },
          {
            "name": "DSA-3215",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3215"
          },
          {
            "name": "59061",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59061"
          },
          {
            "name": "GLSA-201607-04",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201607-04"
          },
          {
            "name": "RHSA-2014:1326",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1326.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2014-0288.html"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "name": "66233",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/66233"
          },
          {
            "name": "USN-2987-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2987-1"
          },
          {
            "name": "RHSA-2014:1327",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1327.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=66901"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-03-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-01-05T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SUSE-SU-2014:0868",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00001.html"
        },
        {
          "name": "MDVSA-2015:153",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:153"
        },
        {
          "name": "59418",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59418"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "name": "59496",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59496"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "name": "59652",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59652"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1076676"
        },
        {
          "name": "SUSE-SU-2014:0869",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
        },
        {
          "name": "DSA-3215",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3215"
        },
        {
          "name": "59061",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59061"
        },
        {
          "name": "GLSA-201607-04",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201607-04"
        },
        {
          "name": "RHSA-2014:1326",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1326.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2014-0288.html"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "name": "66233",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/66233"
        },
        {
          "name": "USN-2987-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2987-1"
        },
        {
          "name": "RHSA-2014:1327",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1327.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=66901"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-2497",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2014:0868",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00001.html"
            },
            {
              "name": "MDVSA-2015:153",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:153"
            },
            {
              "name": "59418",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59418"
            },
            {
              "name": "https://support.apple.com/HT204659",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT204659"
            },
            {
              "name": "59496",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59496"
            },
            {
              "name": "RHSA-2014:1766",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
            },
            {
              "name": "59652",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59652"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1076676",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1076676"
            },
            {
              "name": "SUSE-SU-2014:0869",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
            },
            {
              "name": "DSA-3215",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3215"
            },
            {
              "name": "59061",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59061"
            },
            {
              "name": "GLSA-201607-04",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201607-04"
            },
            {
              "name": "RHSA-2014:1326",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1326.html"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2014-0288.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2014-0288.html"
            },
            {
              "name": "APPLE-SA-2015-04-08-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
            },
            {
              "name": "66233",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/66233"
            },
            {
              "name": "USN-2987-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2987-1"
            },
            {
              "name": "RHSA-2014:1327",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1327.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
            },
            {
              "name": "RHSA-2014:1765",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=66901",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=66901"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-2497",
    "datePublished": "2014-03-21T14:00:00.000Z",
    "dateReserved": "2014-03-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:14:26.563Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3478 (GCVE-0-2014-3478)

Vulnerability from cvelistv5 – Published: 2014-07-09 10:00 – Updated: 2025-12-04 20:26

Summary

Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (application crash) via a crafted Pascal string in a FILE_PSTRING conversion.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-04 20:26 UTC

CWE

n/a
CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Assigner

redhat redhat root

References

19 references

URL	Tags
https://support.apple.com/HT204659	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2014/dsa-3021	vendor-advisoryx_refsource_DEBIAN
http://marc.info/?l=bugtraq&m=141017844705317&w=2	vendor-advisoryx_refsource_HP
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.debian.org/security/2014/dsa-2974	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/59794	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://mx.gw.com/pipermail/file/2014/001553.html	mailing-listx_refsource_MLIST
https://github.com/file/file/commit/27a14bc7ba285…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/68239	vdb-entryx_refsource_BID
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://support.apple.com/kb/HT6443	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1327.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
https://bugs.php.net/bug.php?id=67410	x_refsource_CONFIRM
http://secunia.com/advisories/59831	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE

Date Public

2014-06-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:43:06.121Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "name": "DSA-3021",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3021"
          },
          {
            "name": "HPSBUX03102",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "DSA-2974",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2974"
          },
          {
            "name": "59794",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59794"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "[file] 20140612 file-5.19 is now available",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/27a14bc7ba285a0a5ebfdb55e54001aa11932b08"
          },
          {
            "name": "68239",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/68239"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT6443"
          },
          {
            "name": "RHSA-2014:1327",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1327.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=67410"
          },
          {
            "name": "SSRT101681",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "name": "59831",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59831"
          },
          {
            "name": "openSUSE-SU-2014:1236",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2014-3478",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-04T20:26:48.397424Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-04T20:26:53.242Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (application crash) via a crafted Pascal string in a FILE_PSTRING conversion."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-25T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "name": "DSA-3021",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3021"
        },
        {
          "name": "HPSBUX03102",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "DSA-2974",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2974"
        },
        {
          "name": "59794",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59794"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "[file] 20140612 file-5.19 is now available",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/27a14bc7ba285a0a5ebfdb55e54001aa11932b08"
        },
        {
          "name": "68239",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/68239"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT6443"
        },
        {
          "name": "RHSA-2014:1327",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1327.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=67410"
        },
        {
          "name": "SSRT101681",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "name": "59831",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59831"
        },
        {
          "name": "openSUSE-SU-2014:1236",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3478",
    "datePublished": "2014-07-09T10:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2025-12-04T20:26:53.242Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2014-3479 (GCVE-0-2014-3479)

Vulnerability from cvelistv5 – Published: 2014-07-09 10:00 – Updated: 2024-08-06 10:43

Summary

The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, relies on incorrect sector-size data, which allows remote attackers to cause a denial of service (application crash) via a crafted stream offset in a CDF file.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

18 references

URL	Tags
https://support.apple.com/HT204659	x_refsource_CONFIRM
https://github.com/file/file/commit/36fadd29849b8…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2014/dsa-3021	vendor-advisoryx_refsource_DEBIAN
http://marc.info/?l=bugtraq&m=141017844705317&w=2	vendor-advisoryx_refsource_HP
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.debian.org/security/2014/dsa-2974	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/59794	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://mx.gw.com/pipermail/file/2014/001553.html	mailing-listx_refsource_MLIST
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://support.apple.com/kb/HT6443	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
https://bugs.php.net/bug.php?id=67411	x_refsource_CONFIRM
http://www.securityfocus.com/bid/68241	vdb-entryx_refsource_BID
http://secunia.com/advisories/59831	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE

Date Public

2014-06-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:43:06.212Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/36fadd29849b8087af9f4586f89dbf74ea45be67"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "name": "DSA-3021",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3021"
          },
          {
            "name": "HPSBUX03102",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "DSA-2974",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2974"
          },
          {
            "name": "59794",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59794"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "[file] 20140612 file-5.19 is now available",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT6443"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=67411"
          },
          {
            "name": "SSRT101681",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "name": "68241",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/68241"
          },
          {
            "name": "59831",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59831"
          },
          {
            "name": "openSUSE-SU-2014:1236",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, relies on incorrect sector-size data, which allows remote attackers to cause a denial of service (application crash) via a crafted stream offset in a CDF file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-25T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/36fadd29849b8087af9f4586f89dbf74ea45be67"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "name": "DSA-3021",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3021"
        },
        {
          "name": "HPSBUX03102",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "DSA-2974",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2974"
        },
        {
          "name": "59794",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59794"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "[file] 20140612 file-5.19 is now available",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT6443"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=67411"
        },
        {
          "name": "SSRT101681",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "name": "68241",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/68241"
        },
        {
          "name": "59831",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59831"
        },
        {
          "name": "openSUSE-SU-2014:1236",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3479",
    "datePublished": "2014-07-09T10:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:43:06.212Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3480 (GCVE-0-2014-3480)

Vulnerability from cvelistv5 – Published: 2014-07-09 10:00 – Updated: 2025-12-04 20:25

Summary

The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate sector-count data, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF file.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-04 20:25 UTC

CWE

n/a
CWE-20 - Improper Input Validation

Assigner

redhat redhat root

References

18 references

URL	Tags
https://support.apple.com/HT204659	x_refsource_CONFIRM
http://www.securityfocus.com/bid/68238	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2014/dsa-3021	vendor-advisoryx_refsource_DEBIAN
http://marc.info/?l=bugtraq&m=141017844705317&w=2	vendor-advisoryx_refsource_HP
https://github.com/file/file/commit/40bade80cbe2a…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.debian.org/security/2014/dsa-2974	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/59794	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://mx.gw.com/pipermail/file/2014/001553.html	mailing-listx_refsource_MLIST
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://support.apple.com/kb/HT6443	x_refsource_CONFIRM
https://bugs.php.net/bug.php?id=67412	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/59831	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE

Date Public

2014-06-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:43:06.355Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "name": "68238",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/68238"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "name": "DSA-3021",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3021"
          },
          {
            "name": "HPSBUX03102",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/40bade80cbe2af1d0b2cd0420cebd5d5905a2382"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "DSA-2974",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2974"
          },
          {
            "name": "59794",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59794"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "[file] 20140612 file-5.19 is now available",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT6443"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=67412"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "name": "SSRT101681",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "name": "59831",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59831"
          },
          {
            "name": "openSUSE-SU-2014:1236",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2014-3480",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-04T20:25:26.430563Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-20",
                "description": "CWE-20 Improper Input Validation",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-04T20:25:29.415Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate sector-count data, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-25T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "name": "68238",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/68238"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "name": "DSA-3021",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3021"
        },
        {
          "name": "HPSBUX03102",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/40bade80cbe2af1d0b2cd0420cebd5d5905a2382"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "DSA-2974",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2974"
        },
        {
          "name": "59794",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59794"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "[file] 20140612 file-5.19 is now available",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT6443"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=67412"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "name": "SSRT101681",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "name": "59831",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59831"
        },
        {
          "name": "openSUSE-SU-2014:1236",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3480",
    "datePublished": "2014-07-09T10:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2025-12-04T20:25:29.415Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2014-3487 (GCVE-0-2014-3487)

Vulnerability from cvelistv5 – Published: 2014-07-09 10:00 – Updated: 2024-08-06 10:43

Summary

The cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate a stream offset, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF file.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

18 references

URL	Tags
https://support.apple.com/HT204659	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2014/dsa-3021	vendor-advisoryx_refsource_DEBIAN
http://marc.info/?l=bugtraq&m=141017844705317&w=2	vendor-advisoryx_refsource_HP
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.debian.org/security/2014/dsa-2974	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/59794	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://mx.gw.com/pipermail/file/2014/001553.html	mailing-listx_refsource_MLIST
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://support.apple.com/kb/HT6443	x_refsource_CONFIRM
https://github.com/file/file/commit/93e063ee374b6…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
https://bugs.php.net/bug.php?id=67413	x_refsource_CONFIRM
http://secunia.com/advisories/59831	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/68120	vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE

Date Public

2014-06-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:43:06.287Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "name": "DSA-3021",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3021"
          },
          {
            "name": "HPSBUX03102",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "DSA-2974",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2974"
          },
          {
            "name": "59794",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59794"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "[file] 20140612 file-5.19 is now available",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT6443"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/93e063ee374b6a75729df9e7201fb511e47e259d"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "name": "SSRT101681",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=67413"
          },
          {
            "name": "59831",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59831"
          },
          {
            "name": "68120",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/68120"
          },
          {
            "name": "openSUSE-SU-2014:1236",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate a stream offset, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-25T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "name": "DSA-3021",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3021"
        },
        {
          "name": "HPSBUX03102",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "DSA-2974",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2974"
        },
        {
          "name": "59794",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59794"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "[file] 20140612 file-5.19 is now available",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT6443"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/93e063ee374b6a75729df9e7201fb511e47e259d"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "name": "SSRT101681",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=67413"
        },
        {
          "name": "59831",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59831"
        },
        {
          "name": "68120",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/68120"
        },
        {
          "name": "openSUSE-SU-2014:1236",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3487",
    "datePublished": "2014-07-09T10:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:43:06.287Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3515 (GCVE-0-2014-3515)

Vulnerability from cvelistv5 – Published: 2014-07-09 10:00 – Updated: 2024-08-06 10:43

Summary

The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which allows remote attackers to execute arbitrary code via a crafted string that triggers use of a Hashtable destructor, related to "type confusion" issues in (1) ArrayObject and (2) SPLObjectStorage.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

15 references

URL	Tags
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=…	x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
https://bugs.php.net/bug.php?id=67492	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=141017844705317&w=2	vendor-advisoryx_refsource_HP
http://www.debian.org/security/2014/dsa-2974	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/59794	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://secunia.com/advisories/60998	third-party-advisoryx_refsource_SECUNIA
http://support.apple.com/kb/HT6443	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/68237	vdb-entryx_refsource_BID
http://secunia.com/advisories/59831	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE

Date Public

2014-06-26 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:43:06.284Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=88223c5245e9b470e1e6362bfd96829562ffe6ab"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=67492"
          },
          {
            "name": "HPSBUX03102",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "name": "DSA-2974",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2974"
          },
          {
            "name": "59794",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59794"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "60998",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60998"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT6443"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "name": "SSRT101681",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "name": "68237",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/68237"
          },
          {
            "name": "59831",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59831"
          },
          {
            "name": "openSUSE-SU-2014:1236",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which allows remote attackers to execute arbitrary code via a crafted string that triggers use of a Hashtable destructor, related to \"type confusion\" issues in (1) ArrayObject and (2) SPLObjectStorage."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-01-04T17:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=88223c5245e9b470e1e6362bfd96829562ffe6ab"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=67492"
        },
        {
          "name": "HPSBUX03102",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "name": "DSA-2974",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2974"
        },
        {
          "name": "59794",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59794"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "60998",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60998"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT6443"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "name": "SSRT101681",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "name": "68237",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/68237"
        },
        {
          "name": "59831",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59831"
        },
        {
          "name": "openSUSE-SU-2014:1236",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2014-3515",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which allows remote attackers to execute arbitrary code via a crafted string that triggers use of a Hashtable destructor, related to \"type confusion\" issues in (1) ArrayObject and (2) SPLObjectStorage."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://git.php.net/?p=php-src.git;a=commit;h=88223c5245e9b470e1e6362bfd96829562ffe6ab",
              "refsource": "CONFIRM",
              "url": "http://git.php.net/?p=php-src.git;a=commit;h=88223c5245e9b470e1e6362bfd96829562ffe6ab"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
            },
            {
              "name": "RHSA-2014:1766",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=67492",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=67492"
            },
            {
              "name": "HPSBUX03102",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
            },
            {
              "name": "DSA-2974",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2974"
            },
            {
              "name": "59794",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59794"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php"
            },
            {
              "name": "60998",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60998"
            },
            {
              "name": "http://support.apple.com/kb/HT6443",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT6443"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
            },
            {
              "name": "RHSA-2014:1765",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
            },
            {
              "name": "SSRT101681",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
            },
            {
              "name": "68237",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/68237"
            },
            {
              "name": "59831",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59831"
            },
            {
              "name": "openSUSE-SU-2014:1236",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3515",
    "datePublished": "2014-07-09T10:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:43:06.284Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3538 (GCVE-0-2014-3538)

Vulnerability from cvelistv5 – Published: 2014-07-03 14:00 – Updated: 2024-08-06 10:50

Summary

file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted file that triggers backtracking during processing of an awk rule. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7345.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

22 references

URL	Tags
https://github.com/file/file/commit/74cafd7de9ec9…	x_refsource_CONFIRM
https://github.com/file/file/commit/71a8b6c0d758a…	x_refsource_CONFIRM
https://support.apple.com/HT204659	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2014/dsa-3021	vendor-advisoryx_refsource_DEBIAN
https://bugzilla.redhat.com/show_bug.cgi?id=1098222	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-0760.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/68348	vdb-entryx_refsource_BID
https://github.com/file/file/commit/4a284c89d6ef1…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://openwall.com/lists/oss-security/2014/06/30/7	mailing-listx_refsource_MLIST
http://mx.gw.com/pipermail/file/2014/001553.html	mailing-listx_refsource_MLIST
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.debian.org/security/2014/dsa-3008	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2014-1327.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
https://github.com/file/file/commit/69a5a43b3b71f…	x_refsource_CONFIRM
http://secunia.com/advisories/60696	third-party-advisoryx_refsource_SECUNIA
https://github.com/file/file/commit/758e066df72fb…	x_refsource_CONFIRM

Date Public

2014-06-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:50:16.893Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/74cafd7de9ec99a14f4480927580e501c8f852c3"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/71a8b6c0d758acb0f73e2e51421a711b5e9d6668"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "name": "DSA-3021",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3021"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1098222"
          },
          {
            "name": "RHSA-2016:0760",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0760.html"
          },
          {
            "name": "68348",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/68348"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/4a284c89d6ef11aca34da65da7d673050a5ea320"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "[oss-security] 20140630 changing CVE ID for RH Bugzilla 1098222 (from CVE-2014-0235)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2014/06/30/7"
          },
          {
            "name": "[file] 20140612 file-5.19 is now available",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "name": "DSA-3008",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3008"
          },
          {
            "name": "RHSA-2014:1327",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1327.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/69a5a43b3b71f53b0577f41264a073f495799610"
          },
          {
            "name": "60696",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60696"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/758e066df72fb1ac08d2eea91ddc3973d259e991"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted file that triggers backtracking during processing of an awk rule.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7345."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/74cafd7de9ec99a14f4480927580e501c8f852c3"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/71a8b6c0d758acb0f73e2e51421a711b5e9d6668"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "name": "DSA-3021",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3021"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1098222"
        },
        {
          "name": "RHSA-2016:0760",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0760.html"
        },
        {
          "name": "68348",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/68348"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/4a284c89d6ef11aca34da65da7d673050a5ea320"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "[oss-security] 20140630 changing CVE ID for RH Bugzilla 1098222 (from CVE-2014-0235)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2014/06/30/7"
        },
        {
          "name": "[file] 20140612 file-5.19 is now available",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "name": "DSA-3008",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3008"
        },
        {
          "name": "RHSA-2014:1327",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1327.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/69a5a43b3b71f53b0577f41264a073f495799610"
        },
        {
          "name": "60696",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60696"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/758e066df72fb1ac08d2eea91ddc3973d259e991"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2014-3538",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted file that triggers backtracking during processing of an awk rule.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7345."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/file/file/commit/74cafd7de9ec99a14f4480927580e501c8f852c3",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/74cafd7de9ec99a14f4480927580e501c8f852c3"
            },
            {
              "name": "https://github.com/file/file/commit/71a8b6c0d758acb0f73e2e51421a711b5e9d6668",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/71a8b6c0d758acb0f73e2e51421a711b5e9d6668"
            },
            {
              "name": "https://support.apple.com/HT204659",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT204659"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "RHSA-2014:1766",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
            },
            {
              "name": "DSA-3021",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-3021"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1098222",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1098222"
            },
            {
              "name": "RHSA-2016:0760",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0760.html"
            },
            {
              "name": "68348",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/68348"
            },
            {
              "name": "https://github.com/file/file/commit/4a284c89d6ef11aca34da65da7d673050a5ea320",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/4a284c89d6ef11aca34da65da7d673050a5ea320"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "[oss-security] 20140630 changing CVE ID for RH Bugzilla 1098222 (from CVE-2014-0235)",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2014/06/30/7"
            },
            {
              "name": "[file] 20140612 file-5.19 is now available",
              "refsource": "MLIST",
              "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
            },
            {
              "name": "APPLE-SA-2015-04-08-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
            },
            {
              "name": "DSA-3008",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-3008"
            },
            {
              "name": "RHSA-2014:1327",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1327.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
            },
            {
              "name": "RHSA-2014:1765",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
            },
            {
              "name": "https://github.com/file/file/commit/69a5a43b3b71f53b0577f41264a073f495799610",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/69a5a43b3b71f53b0577f41264a073f495799610"
            },
            {
              "name": "60696",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60696"
            },
            {
              "name": "https://github.com/file/file/commit/758e066df72fb1ac08d2eea91ddc3973d259e991",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/758e066df72fb1ac08d2eea91ddc3973d259e991"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3538",
    "datePublished": "2014-07-03T14:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:50:16.893Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2014_1766

CVE-2014-0207 (GCVE-0-2014-0207)

CVE-2014-0237 (GCVE-0-2014-0237)

CVE-2014-0238 (GCVE-0-2014-0238)

CVE-2014-2497 (GCVE-0-2014-2497)

CVE-2014-3478 (GCVE-0-2014-3478)

CVE-2014-3479 (GCVE-0-2014-3479)

CVE-2014-3480 (GCVE-0-2014-3480)

CVE-2014-3487 (GCVE-0-2014-3487)

CVE-2014-3515 (GCVE-0-2014-3515)

CVE-2014-3538 (GCVE-0-2014-3538)

Tags

Sightings

Nomenclature