Vulnerability-Lookup

RHSA-2015_1066

Vulnerability from csaf_redhat - Published: 2015-06-04 08:02 - Updated: 2024-11-14 18:08

Summary

Red Hat Security Advisory: php54 security and bug fix update

Severity

Important

Notes

Topic: Updated php54 collection packages that fix multiple security issues and several bugs are now available as part of Red Hat Software Collections 2. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. [Updated 5 June 2015] This advisory has been updated to list previously unlisted security issues corrected in this update, including CVE-2015-3330 that has been rated as having Important security impact. Consequently, the overall impact of this advisory has been changed to Important. No changes have been made to the packages.

Details: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php54 packages provide a recent stable release of PHP with the PEAR 1.9.4, APC 3.1.15, and memcache 3.0.8 PECL extensions, and a number of additional utilities. The php54 packages have been upgraded to upstream version 5.4.40, which provides a number of bug fixes over the version shipped in Red Hat Software Collections 1. (BZ#1168193) The following security issues were fixed in the php54-php component: A flaw was found in the way the PHP module for the Apache httpd web server handled pipelined requests. A remote attacker could use this flaw to trigger the execution of a PHP script in a deinitialized interpreter, causing it to crash or, possibly, execute arbitrary code. (CVE-2015-3330) An uninitialized pointer use flaw was found in PHP's Exif extension. A specially crafted JPEG or TIFF file could cause a PHP application using the exif_read_data() function to crash or, possibly, execute arbitrary code with the privileges of the user running that PHP application. (CVE-2015-0232) Multiple flaws were discovered in the way PHP performed object unserialization. Specially crafted input processed by the unserialize() function could cause a PHP application to crash or, possibly, execute arbitrary code. (CVE-2014-8142, CVE-2015-0231, CVE-2015-0273, CVE-2015-2787, CVE-2015-4147, CVE-2015-4148) Multiple flaws were found in the way the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened. (CVE-2015-2783, CVE-2015-3307, CVE-2015-3329) A heap buffer overflow flaw was found in the enchant_broker_request_dict() function of PHP's enchant extension. An attacker able to make a PHP application enchant dictionaries could possibly cause it to crash. (CVE-2014-9705) A heap buffer overflow flaw was found in PHP's regular expression extension. An attacker able to make PHP process a specially crafted regular expression pattern could cause it to crash and possibly execute arbitrary code. (CVE-2015-2305) A buffer over-read flaw was found in the GD library used by the PHP gd extension. A specially crafted GIF file could cause a PHP application using the imagecreatefromgif() function to crash. (CVE-2014-9709) A use-after-free flaw was found in PHP's phar (PHP Archive) extension. An attacker able to trigger certain error condition in phar archive processing could possibly use this flaw to disclose certain portions of server memory. (CVE-2015-2301) An ouf-of-bounds read flaw was found in the way the File Information (fileinfo) extension processed certain Pascal strings. A remote attacker could cause a PHP application to crash if it used fileinfo to identify the type of the attacker-supplied file. (CVE-2014-9652) It was found that PHP move_uploaded_file() function did not properly handle file names with a NULL character. A remote attacker could possibly use this flaw to make a PHP script access unexpected files and bypass intended file system access restrictions. (CVE-2015-2348) A flaw was found in the way PHP handled malformed source files when running in CGI mode. A specially crafted PHP file could cause PHP CGI to crash. (CVE-2014-9427) The following security issue was fixed in the php54-php-pecl-zendopcache component: A use-after-free flaw was found in PHP's OPcache extension. This flaw could possibly lead to a disclosure of a portion of the server memory. (CVE-2015-1351) All php54 users are advised to upgrade to these updated packages, which correct these issues. After installing the updated packages, the httpd service must be restarted for the update to take effect.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2014-8142

A flaws was discovered in the way PHP performed object unserialization. Specially crafted input processed by the unserialize() function could cause a PHP application to crash or, possibly, execute arbitrary code.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

CWE-416 - Use After Free

Affected products

Fixed 200 products

Product	Version	Remediation
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-0:2.0-1.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-0:2.0-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-0:5.4.40-1.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-bcmath-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-cli-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-common-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-dba-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-debuginfo-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-devel-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-enchant-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-fpm-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-gd-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-imap-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-intl-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-ldap-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-mbstring-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-mysqlnd-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-odbc-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-pdo-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-pecl-zendopcache-0:7.0.4-3.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-pecl-zendopcache-0:7.0.4-3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-pecl-zendopcache-debuginfo-0:7.0.4-3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-pgsql-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-process-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-pspell-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-recode-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-snmp-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-soap-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-tidy-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-xml-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-php-xmlrpc-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-runtime-0:2.0-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.5.Z:php54-scldevel-0:2.0-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-0:2.0-1.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-0:2.0-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-0:5.4.40-1.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-bcmath-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-cli-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-common-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-dba-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-debuginfo-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-devel-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-enchant-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-fpm-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-gd-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-imap-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-intl-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-ldap-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-mbstring-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-mysqlnd-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-odbc-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-pdo-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-pecl-zendopcache-0:7.0.4-3.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-pecl-zendopcache-0:7.0.4-3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-pecl-zendopcache-debuginfo-0:7.0.4-3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-pgsql-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-process-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-pspell-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-recode-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-snmp-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-soap-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-tidy-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-xml-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-php-xmlrpc-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-runtime-0:2.0-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0-6.6.Z:php54-scldevel-0:2.0-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-0:2.0-1.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-0:2.0-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-0:5.4.40-1.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-bcmath-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-cli-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-common-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-dba-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-debuginfo-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-devel-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-enchant-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-fpm-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-gd-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-imap-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-intl-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-ldap-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-mbstring-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-mysqlnd-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-odbc-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-pdo-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-pecl-zendopcache-0:7.0.4-3.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-pecl-zendopcache-0:7.0.4-3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-pecl-zendopcache-debuginfo-0:7.0.4-3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-pgsql-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-process-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-pspell-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-recode-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-snmp-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-soap-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-tidy-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-xml-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-php-xmlrpc-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-runtime-0:2.0-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-2.0:php54-scldevel-0:2.0-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-0:2.0-1.el6.src	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-0:2.0-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-0:5.4.40-1.el6.src	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-bcmath-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-cli-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-common-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-dba-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-debuginfo-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-devel-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-enchant-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-fpm-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-gd-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-imap-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-intl-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-ldap-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-mbstring-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-mysqlnd-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-odbc-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-pdo-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-pecl-zendopcache-0:7.0.4-3.el6.src	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-pecl-zendopcache-0:7.0.4-3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-pecl-zendopcache-debuginfo-0:7.0.4-3.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-pgsql-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-process-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-pspell-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-recode-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-snmp-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-soap-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-tidy-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-xml-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-php-xmlrpc-0:5.4.40-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-runtime-0:2.0-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-2.0:php54-scldevel-0:2.0-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-0:2.0-1.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-0:2.0-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-0:5.4.40-1.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-bcmath-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-cli-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-common-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-dba-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-debuginfo-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-devel-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-enchant-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-fpm-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-gd-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-intl-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-ldap-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-mbstring-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-mysqlnd-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-odbc-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-pdo-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-pecl-zendopcache-0:7.0.4-3.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-pecl-zendopcache-0:7.0.4-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-pecl-zendopcache-debuginfo-0:7.0.4-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-pgsql-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-process-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-pspell-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-recode-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-snmp-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-soap-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-xml-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-php-xmlrpc-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-runtime-0:2.0-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-2.0:php54-scldevel-0:2.0-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-0:2.0-1.el7.src	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-0:2.0-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-0:5.4.40-1.el7.src	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-bcmath-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-cli-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-common-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-dba-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-debuginfo-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-devel-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-enchant-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-fpm-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-gd-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-intl-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-ldap-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-mbstring-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-mysqlnd-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-odbc-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-pdo-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-pecl-zendopcache-0:7.0.4-3.el7.src	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-pecl-zendopcache-0:7.0.4-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-pecl-zendopcache-debuginfo-0:7.0.4-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-pgsql-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-process-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-pspell-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-recode-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-snmp-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-soap-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-xml-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-php-xmlrpc-0:5.4.40-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-runtime-0:2.0-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-2.0:php54-scldevel-0:2.0-1.el7.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2014-9427

A flaw was found in the way PHP handled malformed source files when running in CGI mode. A specially crafted PHP file could cause PHP CGI to crash.

2.1 ()


                
                  AV:L/AC:L/Au:N/C:N/I:N/A:P

CWE-125 - Out-of-bounds Read

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Low

CVE-2014-9652

An ouf-of-bounds read flaw was found in the way the file utility processed certain Pascal strings. A remote attacker could cause an application using the file utility (for example, PHP using the fileinfo module) to crash if it was used to identify the type of the attacker-supplied file.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Low

CVE-2014-9705

A heap buffer overflow flaw was found in the enchant_broker_request_dict() function of PHP's enchant extension. A specially crafted tag input could possibly cause a PHP application to crash.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Moderate

CVE-2014-9709

A buffer over-read flaw was found in the GD library. A specially crafted GIF file could cause an application using the gdImageCreateFromGif() function to crash.

4.0 ()


                
                  AV:N/AC:H/Au:N/C:P/I:N/A:P

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Low

CVE-2015-0231

A use-after-free flaw was found in the way PHP's unserialize() function processed data. If a remote attacker was able to pass crafted input to PHP's unserialize() function, they could cause the PHP interpreter to crash or, possibly, execute arbitrary code.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

CWE-416 - Use After Free

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Moderate

CVE-2015-0232

An uninitialized pointer use flaw was found in PHP's Exif extension. A specially crafted JPEG or TIFF file could cause a PHP application using the exif_read_data() function to crash or, possibly, execute arbitrary code with the privileges of the user running that PHP application.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

CWE-822 - Untrusted Pointer Dereference

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Moderate

CVE-2015-0273

A use-after-free flaw was found in the unserialize() function of PHP's DateTimeZone implementation. A malicious script author could possibly use this flaw to disclose certain portions of server memory.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

CWE-416 - Use After Free

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Moderate

CVE-2015-1351

A use-after-free flaw was found in PHP's OPcache extension. This flaw could possibly lead to a disclosure of a portion of the server memory.

2.6 ()


                
                  AV:N/AC:H/Au:N/C:P/I:N/A:N

CWE-416 - Use After Free

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Low

CVE-2015-2301

A use-after-free flaw was found in PHP's phar (PHP Archive) paths implementation. A malicious script author could possibly use this flaw to disclose certain portions of server memory.

2.6 ()


                
                  AV:N/AC:H/Au:N/C:P/I:N/A:N

CWE-416 - Use After Free

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Low

CVE-2015-2305

A heap buffer overflow flaw was found in the regcomp() function of Henry Spencer's regular expression library. An attacker able to make an application process a specially crafted regular expression pattern with the regcomp() function could cause that application to crash and possibly execute arbitrary code.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Moderate

CVE-2015-2348

It was found that PHP move_uploaded_file() function did not properly handle file names with a NULL character. A remote attacker could possibly use this flaw to make a PHP script access unexpected files and bypass intended file system access restrictions.

4.0 ()


                
                  AV:N/AC:H/Au:N/C:P/I:N/A:P

CWE-626 - Null Byte Interaction Error (Poison Null Byte)

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Moderate

CVE-2015-2783

A buffer over-read flaw was found in PHP's phar (PHP Archive) paths implementation. A malicious script author could possibly use this flaw to disclose certain portions of server memory.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Low

CVE-2015-2787

4.0 ()


                
                  AV:N/AC:H/Au:N/C:P/I:N/A:P

CWE-416 - Use After Free

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Moderate

CVE-2015-3307

An invalid free flaw was found in the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Moderate

CVE-2015-3329

A buffer overflow flaw was found in the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

CWE-121 - Stack-based Buffer Overflow

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Moderate

CVE-2015-3330

A flaw was found in the way the PHP module for the Apache httpd web server handled pipelined requests. A remote attacker could use this flaw to trigger the execution of a PHP script in a deinitialized interpreter, causing it to crash or, possibly, execute arbitrary code.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-665 - Improper Initialization

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Important

CVE-2015-3411

It was found that certain PHP functions did not properly handle file names containing a NULL character. A remote attacker could possibly use this flaw to make a PHP script access unexpected files and bypass intended file system access restrictions.

4.0 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:N

CWE-626 - Null Byte Interaction Error (Poison Null Byte)

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Moderate

CVE-2015-3412

4.0 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:N

CWE-626 - Null Byte Interaction Error (Poison Null Byte)

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Moderate

CVE-2015-4147

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Moderate

CVE-2015-4148

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Low

CVE-2015-4599

Multiple flaws were discovered in the way PHP's Soap extension performed object unserialization. Specially crafted input processed by the unserialize() function could cause a PHP application to disclose portion of its memory or crash.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Moderate

CVE-2015-4600

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Moderate

CVE-2015-4601

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Moderate

CVE-2015-4602

A flaw was discovered in the way PHP performed object unserialization. Specially crafted input processed by the unserialize() function could cause a PHP application to crash or, possibly, execute arbitrary code.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Moderate

CVE-2015-4603

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Moderate

CVE-2015-4604

The mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly maintain a certain pointer relationship, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string that is mishandled by a "Python script text executable" rule.

5.0 ()


                
                  AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Moderate

CVE-2015-4605

The mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly restrict a certain offset value, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string that is mishandled by a "Python script text executable" rule.

5.0 ()


                
                  AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Moderate

CVE-2015-8935

The header() PHP function allowed header stings containing line break followed by a space or tab, as allowed by RFC 2616. Certain browsers handled the continuation line as new header, making it possible to conduct a HTTP response splitting attack against such browsers. The header() function was updated to follow RFC 7230 and not allow any line breaks.

3.1 (Low)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

CWE-113 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')

Affected products

Fixed 200 products, the same list as for CVE-2014-8142

Threats

Impact Moderate

References

136 references

URL	Category
https://access.redhat.com/errata/RHSA-2015:1066	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1055927	external
https://bugzilla.redhat.com/show_bug.cgi?id=1175718	external
https://bugzilla.redhat.com/show_bug.cgi?id=1178736	external
https://bugzilla.redhat.com/show_bug.cgi?id=1185397	external
https://bugzilla.redhat.com/show_bug.cgi?id=1185472	external
https://bugzilla.redhat.com/show_bug.cgi?id=1185900	external
https://bugzilla.redhat.com/show_bug.cgi?id=1188599	external
https://bugzilla.redhat.com/show_bug.cgi?id=1188639	external
https://bugzilla.redhat.com/show_bug.cgi?id=1191049	external
https://bugzilla.redhat.com/show_bug.cgi?id=1194730	external
https://bugzilla.redhat.com/show_bug.cgi?id=1194737	external
https://bugzilla.redhat.com/show_bug.cgi?id=1194747	external
https://bugzilla.redhat.com/show_bug.cgi?id=1204868	external
https://bugzilla.redhat.com/show_bug.cgi?id=1207676	external
https://bugzilla.redhat.com/show_bug.cgi?id=1207682	external
https://bugzilla.redhat.com/show_bug.cgi?id=1213394	external
https://bugzilla.redhat.com/show_bug.cgi?id=1213446	external
https://bugzilla.redhat.com/show_bug.cgi?id=1213449	external
https://bugzilla.redhat.com/show_bug.cgi?id=1223441	external
https://bugzilla.redhat.com/show_bug.cgi?id=1226916	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2014-8142	self
https://bugzilla.redhat.com/show_bug.cgi?id=1175718	external
https://www.cve.org/CVERecord?id=CVE-2014-8142	external
https://nvd.nist.gov/vuln/detail/CVE-2014-8142	external
https://access.redhat.com/security/cve/CVE-2014-9427	self
https://bugzilla.redhat.com/show_bug.cgi?id=1178736	external
https://www.cve.org/CVERecord?id=CVE-2014-9427	external
https://nvd.nist.gov/vuln/detail/CVE-2014-9427	external
https://access.redhat.com/security/cve/CVE-2014-9652	self
https://bugzilla.redhat.com/show_bug.cgi?id=1188599	external
https://www.cve.org/CVERecord?id=CVE-2014-9652	external
https://nvd.nist.gov/vuln/detail/CVE-2014-9652	external
https://access.redhat.com/security/cve/CVE-2014-9705	self
https://bugzilla.redhat.com/show_bug.cgi?id=1194737	external
https://www.cve.org/CVERecord?id=CVE-2014-9705	external
https://nvd.nist.gov/vuln/detail/CVE-2014-9705	external
https://access.redhat.com/security/cve/CVE-2014-9709	self
https://bugzilla.redhat.com/show_bug.cgi?id=1188639	external
https://www.cve.org/CVERecord?id=CVE-2014-9709	external
https://nvd.nist.gov/vuln/detail/CVE-2014-9709	external
https://access.redhat.com/security/cve/CVE-2015-0231	self
https://bugzilla.redhat.com/show_bug.cgi?id=1185397	external
https://www.cve.org/CVERecord?id=CVE-2015-0231	external
https://nvd.nist.gov/vuln/detail/CVE-2015-0231	external
https://access.redhat.com/security/cve/CVE-2015-0232	self
https://bugzilla.redhat.com/show_bug.cgi?id=1185472	external
https://www.cve.org/CVERecord?id=CVE-2015-0232	external
https://nvd.nist.gov/vuln/detail/CVE-2015-0232	external
https://access.redhat.com/security/cve/CVE-2015-0273	self
https://bugzilla.redhat.com/show_bug.cgi?id=1194730	external
https://www.cve.org/CVERecord?id=CVE-2015-0273	external
https://nvd.nist.gov/vuln/detail/CVE-2015-0273	external
https://access.redhat.com/security/cve/CVE-2015-1351	self
https://bugzilla.redhat.com/show_bug.cgi?id=1185900	external
https://www.cve.org/CVERecord?id=CVE-2015-1351	external
https://nvd.nist.gov/vuln/detail/CVE-2015-1351	external
https://access.redhat.com/security/cve/CVE-2015-2301	self
https://bugzilla.redhat.com/show_bug.cgi?id=1194747	external
https://www.cve.org/CVERecord?id=CVE-2015-2301	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2301	external
https://access.redhat.com/security/cve/CVE-2015-2305	self
https://bugzilla.redhat.com/show_bug.cgi?id=1191049	external
https://www.cve.org/CVERecord?id=CVE-2015-2305	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2305	external
https://access.redhat.com/security/cve/CVE-2015-2348	self
https://bugzilla.redhat.com/show_bug.cgi?id=1207682	external
https://www.cve.org/CVERecord?id=CVE-2015-2348	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2348	external
https://access.redhat.com/security/cve/CVE-2015-2783	self
https://bugzilla.redhat.com/show_bug.cgi?id=1213446	external
https://www.cve.org/CVERecord?id=CVE-2015-2783	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2783	external
https://access.redhat.com/security/cve/CVE-2015-2787	self
https://bugzilla.redhat.com/show_bug.cgi?id=1207676	external
https://www.cve.org/CVERecord?id=CVE-2015-2787	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2787	external
https://access.redhat.com/security/cve/CVE-2015-3307	self
https://bugzilla.redhat.com/show_bug.cgi?id=1223441	external
https://www.cve.org/CVERecord?id=CVE-2015-3307	external
https://nvd.nist.gov/vuln/detail/CVE-2015-3307	external
https://access.redhat.com/security/cve/CVE-2015-3329	self
https://bugzilla.redhat.com/show_bug.cgi?id=1213449	external
https://www.cve.org/CVERecord?id=CVE-2015-3329	external
https://nvd.nist.gov/vuln/detail/CVE-2015-3329	external
https://access.redhat.com/security/cve/CVE-2015-3330	self
https://bugzilla.redhat.com/show_bug.cgi?id=1213394	external
https://www.cve.org/CVERecord?id=CVE-2015-3330	external
https://nvd.nist.gov/vuln/detail/CVE-2015-3330	external
https://access.redhat.com/security/cve/CVE-2015-3411	self
https://bugzilla.redhat.com/show_bug.cgi?id=1213407	external
https://www.cve.org/CVERecord?id=CVE-2015-3411	external
https://nvd.nist.gov/vuln/detail/CVE-2015-3411	external
https://access.redhat.com/security/cve/CVE-2015-3412	self
https://bugzilla.redhat.com/show_bug.cgi?id=1232823	external
https://www.cve.org/CVERecord?id=CVE-2015-3412	external
https://nvd.nist.gov/vuln/detail/CVE-2015-3412	external
https://access.redhat.com/security/cve/CVE-2015-4147	self
https://bugzilla.redhat.com/show_bug.cgi?id=1204868	external
https://www.cve.org/CVERecord?id=CVE-2015-4147	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4147	external
https://access.redhat.com/security/cve/CVE-2015-4148	self
https://bugzilla.redhat.com/show_bug.cgi?id=1226916	external
https://www.cve.org/CVERecord?id=CVE-2015-4148	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4148	external
https://access.redhat.com/security/cve/CVE-2015-4599	self
https://bugzilla.redhat.com/show_bug.cgi?id=1222538	external
https://www.cve.org/CVERecord?id=CVE-2015-4599	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4599	external
https://access.redhat.com/security/cve/CVE-2015-4600	self
https://www.cve.org/CVERecord?id=CVE-2015-4600	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4600	external
https://access.redhat.com/security/cve/CVE-2015-4601	self
https://www.cve.org/CVERecord?id=CVE-2015-4601	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4601	external
https://access.redhat.com/security/cve/CVE-2015-4602	self
https://bugzilla.redhat.com/show_bug.cgi?id=1232923	external
https://www.cve.org/CVERecord?id=CVE-2015-4602	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4602	external
https://access.redhat.com/security/cve/CVE-2015-4603	self
https://bugzilla.redhat.com/show_bug.cgi?id=1232918	external
https://www.cve.org/CVERecord?id=CVE-2015-4603	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4603	external
https://access.redhat.com/security/cve/CVE-2015-4604	self
https://bugzilla.redhat.com/show_bug.cgi?id=1213442	external
https://www.cve.org/CVERecord?id=CVE-2015-4604	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4604	external
https://access.redhat.com/security/cve/CVE-2015-4605	self
https://www.cve.org/CVERecord?id=CVE-2015-4605	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4605	external
https://access.redhat.com/security/cve/CVE-2015-8935	self
https://bugzilla.redhat.com/show_bug.cgi?id=1348927	external
https://www.cve.org/CVERecord?id=CVE-2015-8935	external
https://nvd.nist.gov/vuln/detail/CVE-2015-8935	external

JSON

To clipboard

Loading 1.4 MB of JSON…

CVE-2014-8142 (GCVE-0-2014-8142)

Vulnerability from cvelistv5 – Published: 2014-12-20 11:00 – Updated: 2024-08-06 13:10

Summary

Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys within the serialized properties of an object, a different vulnerability than CVE-2004-1019.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

17 references

URL	Tags
http://www.securityfocus.com/bid/71791	vdb-entryx_refsource_BID
https://bugzilla.redhat.com/show_bug.cgi?id=1175718	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=144050155601375&w=2	vendor-advisoryx_refsource_HP
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://marc.info/?l=bugtraq&m=143748090628601&w=2	vendor-advisoryx_refsource_HP
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=…	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=143403519711434&w=2	vendor-advisoryx_refsource_HP
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2015-0…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2014/dsa-3117	vendor-advisoryx_refsource_DEBIAN
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
https://bugs.php.net/bug.php?id=68594	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1053.html	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201503-03	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1066.html	vendor-advisoryx_refsource_REDHAT

Date Public

2014-12-18 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:10:51.133Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "71791",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/71791"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1175718"
          },
          {
            "name": "HPSBMU03409",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
          },
          {
            "name": "SUSE-SU-2015:0365",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html"
          },
          {
            "name": "HPSBMU03380",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=630f9c33c23639de85c3fd306b209b538b73b4c9"
          },
          {
            "name": "SSRT102066",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "name": "openSUSE-SU-2015:0325",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html"
          },
          {
            "name": "DSA-3117",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3117"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=68594"
          },
          {
            "name": "RHSA-2015:1053",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
          },
          {
            "name": "GLSA-201503-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201503-03"
          },
          {
            "name": "HPSBUX03337",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
          },
          {
            "name": "RHSA-2015:1066",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-12-18T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys within the serialized properties of an object, a different vulnerability than CVE-2004-1019."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-29T18:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "71791",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/71791"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1175718"
        },
        {
          "name": "HPSBMU03409",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
        },
        {
          "name": "SUSE-SU-2015:0365",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html"
        },
        {
          "name": "HPSBMU03380",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=630f9c33c23639de85c3fd306b209b538b73b4c9"
        },
        {
          "name": "SSRT102066",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "name": "openSUSE-SU-2015:0325",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html"
        },
        {
          "name": "DSA-3117",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3117"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=68594"
        },
        {
          "name": "RHSA-2015:1053",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
        },
        {
          "name": "GLSA-201503-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201503-03"
        },
        {
          "name": "HPSBUX03337",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
        },
        {
          "name": "RHSA-2015:1066",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2014-8142",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys within the serialized properties of an object, a different vulnerability than CVE-2004-1019."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "71791",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/71791"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1175718",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1175718"
            },
            {
              "name": "HPSBMU03409",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
            },
            {
              "name": "SUSE-SU-2015:0365",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html"
            },
            {
              "name": "HPSBMU03380",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "http://git.php.net/?p=php-src.git;a=commit;h=630f9c33c23639de85c3fd306b209b538b73b4c9",
              "refsource": "CONFIRM",
              "url": "http://git.php.net/?p=php-src.git;a=commit;h=630f9c33c23639de85c3fd306b209b538b73b4c9"
            },
            {
              "name": "SSRT102066",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "openSUSE-SU-2015:0325",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html"
            },
            {
              "name": "DSA-3117",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-3117"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=68594",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=68594"
            },
            {
              "name": "RHSA-2015:1053",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
            },
            {
              "name": "GLSA-201503-03",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201503-03"
            },
            {
              "name": "HPSBUX03337",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
            },
            {
              "name": "RHSA-2015:1066",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-8142",
    "datePublished": "2014-12-20T11:00:00.000Z",
    "dateReserved": "2014-10-10T00:00:00.000Z",
    "dateUpdated": "2024-08-06T13:10:51.133Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-9427 (GCVE-0-2014-9427)

Vulnerability from cvelistv5 – Published: 2015-01-03 02:00 – Updated: 2024-08-06 13:47

Summary

sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider the mapping's length during processing of an invalid file that begins with a # character and lacks a newline character, which causes an out-of-bounds read and might (1) allow remote attackers to obtain sensitive information from php-cgi process memory by leveraging the ability to upload a .php file or (2) trigger unexpected code execution if a valid PHP script is present in memory locations adjacent to the mapping.

Severity

No CVSS data available.

CWE

Assigner

debian mitre root

References

18 references

URL	Tags
https://bugs.php.net/bug.php?id=68618	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://marc.info/?l=bugtraq&m=144050155601375&w=2	vendor-advisoryx_refsource_HP
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://openwall.com/lists/oss-security/2015/01/03/4	mailing-listx_refsource_MLIST
http://marc.info/?l=bugtraq&m=143748090628601&w=2	vendor-advisoryx_refsource_HP
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://openwall.com/lists/oss-security/2014/12/31/6	mailing-listx_refsource_MLIST
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2015-0…	vendor-advisoryx_refsource_SUSE
http://www.securityfocus.com/bid/71833	vdb-entryx_refsource_BID
https://support.apple.com/HT205267	x_refsource_CONFIRM
http://openwall.com/lists/oss-security/2015/01/01/1	mailing-listx_refsource_MLIST
http://rhn.redhat.com/errata/RHSA-2015-1053.html	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201503-03	vendor-advisoryx_refsource_GENTOO
http://advisories.mageia.org/MGASA-2015-0040.html	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1066.html	vendor-advisoryx_refsource_REDHAT

Date Public

2014-12-31 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:47:41.005Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=68618"
          },
          {
            "name": "MDVSA-2015:032",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:032"
          },
          {
            "name": "HPSBMU03409",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
          },
          {
            "name": "SUSE-SU-2015:0365",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html"
          },
          {
            "name": "APPLE-SA-2015-09-30-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
          },
          {
            "name": "[oss-security] 20150103 Re: CVE Request: PHP: out of bounds read crashes php-cgi",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2015/01/03/4"
          },
          {
            "name": "HPSBMU03380",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "[oss-security] 20141231 Re: CVE Request: PHP: out of bounds read crashes php-cgi",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2014/12/31/6"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f9ad3086693fce680fbe246e4a45aa92edd2ac35"
          },
          {
            "name": "openSUSE-SU-2015:0325",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html"
          },
          {
            "name": "71833",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/71833"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT205267"
          },
          {
            "name": "[oss-security] 20141231 Re: CVE Request: PHP: out of bounds read crashes php-cgi",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2015/01/01/1"
          },
          {
            "name": "RHSA-2015:1053",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
          },
          {
            "name": "GLSA-201503-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201503-03"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
          },
          {
            "name": "RHSA-2015:1066",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-12-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider the mapping\u0027s length during processing of an invalid file that begins with a # character and lacks a newline character, which causes an out-of-bounds read and might (1) allow remote attackers to obtain sensitive information from php-cgi process memory by leveraging the ability to upload a .php file or (2) trigger unexpected code execution if a valid PHP script is present in memory locations adjacent to the mapping."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-29T18:57:01.000Z",
        "orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
        "shortName": "debian"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=68618"
        },
        {
          "name": "MDVSA-2015:032",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:032"
        },
        {
          "name": "HPSBMU03409",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
        },
        {
          "name": "SUSE-SU-2015:0365",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html"
        },
        {
          "name": "APPLE-SA-2015-09-30-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
        },
        {
          "name": "[oss-security] 20150103 Re: CVE Request: PHP: out of bounds read crashes php-cgi",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2015/01/03/4"
        },
        {
          "name": "HPSBMU03380",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "[oss-security] 20141231 Re: CVE Request: PHP: out of bounds read crashes php-cgi",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2014/12/31/6"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f9ad3086693fce680fbe246e4a45aa92edd2ac35"
        },
        {
          "name": "openSUSE-SU-2015:0325",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html"
        },
        {
          "name": "71833",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/71833"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT205267"
        },
        {
          "name": "[oss-security] 20141231 Re: CVE Request: PHP: out of bounds read crashes php-cgi",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2015/01/01/1"
        },
        {
          "name": "RHSA-2015:1053",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
        },
        {
          "name": "GLSA-201503-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201503-03"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
        },
        {
          "name": "RHSA-2015:1066",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@debian.org",
          "ID": "CVE-2014-9427",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider the mapping\u0027s length during processing of an invalid file that begins with a # character and lacks a newline character, which causes an out-of-bounds read and might (1) allow remote attackers to obtain sensitive information from php-cgi process memory by leveraging the ability to upload a .php file or (2) trigger unexpected code execution if a valid PHP script is present in memory locations adjacent to the mapping."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.php.net/bug.php?id=68618",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=68618"
            },
            {
              "name": "MDVSA-2015:032",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:032"
            },
            {
              "name": "HPSBMU03409",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
            },
            {
              "name": "SUSE-SU-2015:0365",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html"
            },
            {
              "name": "APPLE-SA-2015-09-30-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
            },
            {
              "name": "[oss-security] 20150103 Re: CVE Request: PHP: out of bounds read crashes php-cgi",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2015/01/03/4"
            },
            {
              "name": "HPSBMU03380",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "[oss-security] 20141231 Re: CVE Request: PHP: out of bounds read crashes php-cgi",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2014/12/31/6"
            },
            {
              "name": "http://git.php.net/?p=php-src.git;a=commit;h=f9ad3086693fce680fbe246e4a45aa92edd2ac35",
              "refsource": "CONFIRM",
              "url": "http://git.php.net/?p=php-src.git;a=commit;h=f9ad3086693fce680fbe246e4a45aa92edd2ac35"
            },
            {
              "name": "openSUSE-SU-2015:0325",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html"
            },
            {
              "name": "71833",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/71833"
            },
            {
              "name": "https://support.apple.com/HT205267",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT205267"
            },
            {
              "name": "[oss-security] 20141231 Re: CVE Request: PHP: out of bounds read crashes php-cgi",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2015/01/01/1"
            },
            {
              "name": "RHSA-2015:1053",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
            },
            {
              "name": "GLSA-201503-03",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201503-03"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2015-0040.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
            },
            {
              "name": "RHSA-2015:1066",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
    "assignerShortName": "debian",
    "cveId": "CVE-2014-9427",
    "datePublished": "2015-01-03T02:00:00.000Z",
    "dateReserved": "2014-12-31T00:00:00.000Z",
    "dateUpdated": "2024-08-06T13:47:41.005Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-9652 (GCVE-0-2014-9652)

Vulnerability from cvelistv5 – Published: 2015-03-30 10:00 – Updated: 2024-08-06 13:47

Summary

The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not properly handle a certain string-length field during a copy of a truncated version of a Pascal string, which might allow remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted file.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

21 references

URL	Tags
http://marc.info/?l=bugtraq&m=144050155601375&w=2	vendor-advisoryx_refsource_HP
http://www.securityfocus.com/bid/72505	vdb-entryx_refsource_BID
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://marc.info/?l=bugtraq&m=143748090628601&w=2	vendor-advisoryx_refsource_HP
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://github.com/file/file/commit/59e63838913ee…	x_refsource_CONFIRM
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
https://support.apple.com/HT205267	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://bugs.php.net/patch-display.php?bug=68735&…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
http://bugs.gw.com/view.php?id=398	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201701-42	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1053.html	vendor-advisoryx_refsource_REDHAT
http://openwall.com/lists/oss-security/2015/02/05/12	mailing-listx_refsource_MLIST
http://rhn.redhat.com/errata/RHSA-2015-1066.html	vendor-advisoryx_refsource_REDHAT
https://bugs.php.net/bug.php?id=68735	x_refsource_CONFIRM

Date Public

2015-02-05 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:47:41.726Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "HPSBMU03409",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
          },
          {
            "name": "72505",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/72505"
          },
          {
            "name": "APPLE-SA-2015-09-30-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
          },
          {
            "name": "HPSBMU03380",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
          },
          {
            "name": "openSUSE-SU-2015:0440",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00004.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/59e63838913eee47f5c120a6c53d4565af638158"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT205267"
          },
          {
            "name": "SUSE-SU-2015:0436",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/patch-display.php?bug=68735\u0026patch=bug68735.patch\u0026revision=1420309079"
          },
          {
            "name": "SUSE-SU-2015:0424",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00002.html"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.gw.com/view.php?id=398"
          },
          {
            "name": "GLSA-201701-42",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-42"
          },
          {
            "name": "RHSA-2015:1053",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
          },
          {
            "name": "[oss-security] 20150205 Re: CVE Request: PHP/file: out-of-bounds memory access in softmagic",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2015/02/05/12"
          },
          {
            "name": "RHSA-2015:1066",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=68735"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-02-05T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not properly handle a certain string-length field during a copy of a truncated version of a Pascal string, which might allow remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "HPSBMU03409",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
        },
        {
          "name": "72505",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/72505"
        },
        {
          "name": "APPLE-SA-2015-09-30-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
        },
        {
          "name": "HPSBMU03380",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
        },
        {
          "name": "openSUSE-SU-2015:0440",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00004.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/59e63838913eee47f5c120a6c53d4565af638158"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT205267"
        },
        {
          "name": "SUSE-SU-2015:0436",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/patch-display.php?bug=68735\u0026patch=bug68735.patch\u0026revision=1420309079"
        },
        {
          "name": "SUSE-SU-2015:0424",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00002.html"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.gw.com/view.php?id=398"
        },
        {
          "name": "GLSA-201701-42",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-42"
        },
        {
          "name": "RHSA-2015:1053",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
        },
        {
          "name": "[oss-security] 20150205 Re: CVE Request: PHP/file: out-of-bounds memory access in softmagic",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2015/02/05/12"
        },
        {
          "name": "RHSA-2015:1066",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=68735"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-9652",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not properly handle a certain string-length field during a copy of a truncated version of a Pascal string, which might allow remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "HPSBMU03409",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
            },
            {
              "name": "72505",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/72505"
            },
            {
              "name": "APPLE-SA-2015-09-30-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
            },
            {
              "name": "HPSBMU03380",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
            },
            {
              "name": "openSUSE-SU-2015:0440",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00004.html"
            },
            {
              "name": "https://github.com/file/file/commit/59e63838913eee47f5c120a6c53d4565af638158",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/59e63838913eee47f5c120a6c53d4565af638158"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "https://support.apple.com/HT205267",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT205267"
            },
            {
              "name": "SUSE-SU-2015:0436",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html"
            },
            {
              "name": "https://bugs.php.net/patch-display.php?bug=68735\u0026patch=bug68735.patch\u0026revision=1420309079",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/patch-display.php?bug=68735\u0026patch=bug68735.patch\u0026revision=1420309079"
            },
            {
              "name": "SUSE-SU-2015:0424",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00002.html"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "http://bugs.gw.com/view.php?id=398",
              "refsource": "CONFIRM",
              "url": "http://bugs.gw.com/view.php?id=398"
            },
            {
              "name": "GLSA-201701-42",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-42"
            },
            {
              "name": "RHSA-2015:1053",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
            },
            {
              "name": "[oss-security] 20150205 Re: CVE Request: PHP/file: out-of-bounds memory access in softmagic",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2015/02/05/12"
            },
            {
              "name": "RHSA-2015:1066",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=68735",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=68735"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-9652",
    "datePublished": "2015-03-30T10:00:00.000Z",
    "dateReserved": "2015-02-05T00:00:00.000Z",
    "dateUpdated": "2024-08-06T13:47:41.726Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-9705 (GCVE-0-2014-9705)

Vulnerability from cvelistv5 – Published: 2015-03-30 10:00 – Updated: 2024-08-06 13:55

Summary

Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allows remote attackers to execute arbitrary code via vectors that trigger creation of multiple dictionaries.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

23 references

URL	Tags
http://www.debian.org/security/2015/dsa-3195	vendor-advisoryx_refsource_DEBIAN
http://www.ubuntu.com/usn/USN-2535-1	vendor-advisoryx_refsource_UBUNTU
http://marc.info/?l=bugtraq&m=144050155601375&w=2	vendor-advisoryx_refsource_HP
https://bugs.php.net/bug.php?id=68552	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2015-0…	vendor-advisoryx_refsource_SUSE
https://www.htbridge.com/advisory/HTB23252	x_refsource_MISC
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://marc.info/?l=bugtraq&m=143748090628601&w=2	vendor-advisoryx_refsource_HP
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://svn.php.net/viewvc/pecl/enchant/trunk/ench…	x_refsource_CONFIRM
https://support.apple.com/HT205267	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1053.html	vendor-advisoryx_refsource_REDHAT
http://openwall.com/lists/oss-security/2015/03/15/6	mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/73031	vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1031948	vdb-entryx_refsource_SECTRACK
https://security.gentoo.org/glsa/201606-10	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1066.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1218.html	vendor-advisoryx_refsource_REDHAT

Date Public

2014-12-05 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:55:04.750Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3195",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3195"
          },
          {
            "name": "USN-2535-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2535-1"
          },
          {
            "name": "HPSBMU03409",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=68552"
          },
          {
            "name": "openSUSE-SU-2015:0644",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.htbridge.com/advisory/HTB23252"
          },
          {
            "name": "APPLE-SA-2015-09-30-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
          },
          {
            "name": "HPSBMU03380",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "MDVSA-2015:079",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:079"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "name": "SUSE-SU-2015:0868",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.php.net/viewvc/pecl/enchant/trunk/enchant.c?r1=317600\u0026r2=335803"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT205267"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "name": "RHSA-2015:1053",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
          },
          {
            "name": "[oss-security] 20150315 Re: CVE Request: PHP 5.6.6 changelog",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2015/03/15/6"
          },
          {
            "name": "73031",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/73031"
          },
          {
            "name": "1031948",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031948"
          },
          {
            "name": "GLSA-201606-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201606-10"
          },
          {
            "name": "RHSA-2015:1066",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
          },
          {
            "name": "RHSA-2015:1218",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-12-05T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allows remote attackers to execute arbitrary code via vectors that trigger creation of multiple dictionaries."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-3195",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3195"
        },
        {
          "name": "USN-2535-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2535-1"
        },
        {
          "name": "HPSBMU03409",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=68552"
        },
        {
          "name": "openSUSE-SU-2015:0644",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.htbridge.com/advisory/HTB23252"
        },
        {
          "name": "APPLE-SA-2015-09-30-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
        },
        {
          "name": "HPSBMU03380",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "MDVSA-2015:079",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:079"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "name": "SUSE-SU-2015:0868",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.php.net/viewvc/pecl/enchant/trunk/enchant.c?r1=317600\u0026r2=335803"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT205267"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "name": "RHSA-2015:1053",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
        },
        {
          "name": "[oss-security] 20150315 Re: CVE Request: PHP 5.6.6 changelog",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2015/03/15/6"
        },
        {
          "name": "73031",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/73031"
        },
        {
          "name": "1031948",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031948"
        },
        {
          "name": "GLSA-201606-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201606-10"
        },
        {
          "name": "RHSA-2015:1066",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
        },
        {
          "name": "RHSA-2015:1218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-9705",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allows remote attackers to execute arbitrary code via vectors that trigger creation of multiple dictionaries."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3195",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3195"
            },
            {
              "name": "USN-2535-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2535-1"
            },
            {
              "name": "HPSBMU03409",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=68552",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=68552"
            },
            {
              "name": "openSUSE-SU-2015:0644",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html"
            },
            {
              "name": "https://www.htbridge.com/advisory/HTB23252",
              "refsource": "MISC",
              "url": "https://www.htbridge.com/advisory/HTB23252"
            },
            {
              "name": "APPLE-SA-2015-09-30-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
            },
            {
              "name": "HPSBMU03380",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "MDVSA-2015:079",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:079"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "SUSE-SU-2015:0868",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
            },
            {
              "name": "http://svn.php.net/viewvc/pecl/enchant/trunk/enchant.c?r1=317600\u0026r2=335803",
              "refsource": "CONFIRM",
              "url": "http://svn.php.net/viewvc/pecl/enchant/trunk/enchant.c?r1=317600\u0026r2=335803"
            },
            {
              "name": "https://support.apple.com/HT205267",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT205267"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "RHSA-2015:1053",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
            },
            {
              "name": "[oss-security] 20150315 Re: CVE Request: PHP 5.6.6 changelog",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2015/03/15/6"
            },
            {
              "name": "73031",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/73031"
            },
            {
              "name": "1031948",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1031948"
            },
            {
              "name": "GLSA-201606-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201606-10"
            },
            {
              "name": "RHSA-2015:1066",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
            },
            {
              "name": "RHSA-2015:1218",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-9705",
    "datePublished": "2015-03-30T10:00:00.000Z",
    "dateReserved": "2015-03-15T00:00:00.000Z",
    "dateUpdated": "2024-08-06T13:55:04.750Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-9709 (GCVE-0-2014-9709)

Vulnerability from cvelistv5 – Published: 2015-03-30 10:00 – Updated: 2024-08-06 13:55

Summary

The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

23 references

URL	Tags
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
https://bugzilla.redhat.com/show_bug.cgi?id=1188639	x_refsource_CONFIRM
http://www.securitytracker.com/id/1033703	vdb-entryx_refsource_SECTRACK
http://lists.opensuse.org/opensuse-updates/2015-0…	vendor-advisoryx_refsource_SUSE
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
https://bitbucket.org/libgd/gd-libgd/commits/47eb…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=143403519711434&w=2	vendor-advisoryx_refsource_HP
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://www.debian.org/security/2015/dsa-3215	vendor-advisoryx_refsource_DEBIAN
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://support.apple.com/HT205267	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201607-04	vendor-advisoryx_refsource_GENTOO
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2987-1	vendor-advisoryx_refsource_UBUNTU
http://www.securityfocus.com/bid/73306	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
https://bugs.php.net/bug.php?id=68601	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1053.html	vendor-advisoryx_refsource_REDHAT
http://advisories.mageia.org/MGASA-2015-0040.html	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201606-10	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1066.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1218.html	vendor-advisoryx_refsource_REDHAT

Date Public

2014-12-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:55:04.341Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "MDVSA-2015:153",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:153"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1188639"
          },
          {
            "name": "1033703",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1033703"
          },
          {
            "name": "openSUSE-SU-2015:0644",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html"
          },
          {
            "name": "APPLE-SA-2015-09-30-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bitbucket.org/libgd/gd-libgd/commits/47eb44b2e90ca88a08dca9f9a1aa9041e9587f43"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "SSRT102066",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "name": "DSA-3215",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3215"
          },
          {
            "name": "SUSE-SU-2015:0868",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT205267"
          },
          {
            "name": "GLSA-201607-04",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201607-04"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
          },
          {
            "name": "USN-2987-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2987-1"
          },
          {
            "name": "73306",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/73306"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=68601"
          },
          {
            "name": "RHSA-2015:1053",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
          },
          {
            "name": "HPSBUX03337",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
          },
          {
            "name": "GLSA-201606-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201606-10"
          },
          {
            "name": "RHSA-2015:1066",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
          },
          {
            "name": "RHSA-2015:1218",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-12-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "MDVSA-2015:153",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:153"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1188639"
        },
        {
          "name": "1033703",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1033703"
        },
        {
          "name": "openSUSE-SU-2015:0644",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html"
        },
        {
          "name": "APPLE-SA-2015-09-30-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bitbucket.org/libgd/gd-libgd/commits/47eb44b2e90ca88a08dca9f9a1aa9041e9587f43"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "SSRT102066",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "name": "DSA-3215",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3215"
        },
        {
          "name": "SUSE-SU-2015:0868",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT205267"
        },
        {
          "name": "GLSA-201607-04",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201607-04"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
        },
        {
          "name": "USN-2987-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2987-1"
        },
        {
          "name": "73306",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/73306"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=68601"
        },
        {
          "name": "RHSA-2015:1053",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
        },
        {
          "name": "HPSBUX03337",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
        },
        {
          "name": "GLSA-201606-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201606-10"
        },
        {
          "name": "RHSA-2015:1066",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
        },
        {
          "name": "RHSA-2015:1218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-9709",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "MDVSA-2015:153",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:153"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1188639",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1188639"
            },
            {
              "name": "1033703",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1033703"
            },
            {
              "name": "openSUSE-SU-2015:0644",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html"
            },
            {
              "name": "APPLE-SA-2015-09-30-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
            },
            {
              "name": "https://bitbucket.org/libgd/gd-libgd/commits/47eb44b2e90ca88a08dca9f9a1aa9041e9587f43",
              "refsource": "CONFIRM",
              "url": "https://bitbucket.org/libgd/gd-libgd/commits/47eb44b2e90ca88a08dca9f9a1aa9041e9587f43"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "SSRT102066",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "DSA-3215",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3215"
            },
            {
              "name": "SUSE-SU-2015:0868",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
            },
            {
              "name": "https://support.apple.com/HT205267",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT205267"
            },
            {
              "name": "GLSA-201607-04",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201607-04"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
            },
            {
              "name": "USN-2987-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2987-1"
            },
            {
              "name": "73306",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/73306"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=68601",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=68601"
            },
            {
              "name": "RHSA-2015:1053",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
            },
            {
              "name": "HPSBUX03337",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2015-0040.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
            },
            {
              "name": "GLSA-201606-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201606-10"
            },
            {
              "name": "RHSA-2015:1066",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
            },
            {
              "name": "RHSA-2015:1218",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-9709",
    "datePublished": "2015-03-30T10:00:00.000Z",
    "dateReserved": "2015-03-23T00:00:00.000Z",
    "dateUpdated": "2024-08-06T13:55:04.341Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-0231 (GCVE-0-2015-0231)

Vulnerability from cvelistv5 – Published: 2015-01-27 11:00 – Updated: 2024-08-06 04:03

Summary

Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate numerical keys within the serialized properties of an object. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-8142.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

23 references

URL	Tags
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.debian.org/security/2015/dsa-3195	vendor-advisoryx_refsource_DEBIAN
http://marc.info/?l=bugtraq&m=144050155601375&w=2	vendor-advisoryx_refsource_HP
https://bugzilla.redhat.com/show_bug.cgi?id=1185397	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://marc.info/?l=bugtraq&m=143748090628601&w=2	vendor-advisoryx_refsource_HP
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=143403519711434&w=2	vendor-advisoryx_refsource_HP
http://lists.opensuse.org/opensuse-updates/2015-0…	vendor-advisoryx_refsource_SUSE
https://support.apple.com/HT205267	x_refsource_CONFIRM
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
https://github.com/php/php-src/commit/b585a3aed78…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
https://bugs.php.net/bug.php?id=68710	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1053.html	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201503-03	vendor-advisoryx_refsource_GENTOO
http://advisories.mageia.org/MGASA-2015-0040.html	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201606-10	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1066.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/72539	vdb-entryx_refsource_BID

Date Public

2015-01-22 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T04:03:10.576Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "MDVSA-2015:032",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:032"
          },
          {
            "name": "DSA-3195",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3195"
          },
          {
            "name": "HPSBMU03409",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185397"
          },
          {
            "name": "SUSE-SU-2015:0365",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html"
          },
          {
            "name": "APPLE-SA-2015-09-30-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
          },
          {
            "name": "HPSBMU03380",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "MDVSA-2015:079",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:079"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
          },
          {
            "name": "SSRT102066",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
          },
          {
            "name": "openSUSE-SU-2015:0325",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT205267"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/php/php-src/commit/b585a3aed7880a5fa5c18e2b838fc96f40e075bd"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=68710"
          },
          {
            "name": "RHSA-2015:1053",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
          },
          {
            "name": "GLSA-201503-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201503-03"
          },
          {
            "name": "HPSBUX03337",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
          },
          {
            "name": "GLSA-201606-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201606-10"
          },
          {
            "name": "RHSA-2015:1066",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
          },
          {
            "name": "72539",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/72539"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-01-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate numerical keys within the serialized properties of an object.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-8142."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-29T18:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "MDVSA-2015:032",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:032"
        },
        {
          "name": "DSA-3195",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3195"
        },
        {
          "name": "HPSBMU03409",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185397"
        },
        {
          "name": "SUSE-SU-2015:0365",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html"
        },
        {
          "name": "APPLE-SA-2015-09-30-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
        },
        {
          "name": "HPSBMU03380",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "MDVSA-2015:079",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:079"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
        },
        {
          "name": "SSRT102066",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
        },
        {
          "name": "openSUSE-SU-2015:0325",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT205267"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/php/php-src/commit/b585a3aed7880a5fa5c18e2b838fc96f40e075bd"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=68710"
        },
        {
          "name": "RHSA-2015:1053",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
        },
        {
          "name": "GLSA-201503-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201503-03"
        },
        {
          "name": "HPSBUX03337",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
        },
        {
          "name": "GLSA-201606-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201606-10"
        },
        {
          "name": "RHSA-2015:1066",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
        },
        {
          "name": "72539",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/72539"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2015-0231",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate numerical keys within the serialized properties of an object.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-8142."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "MDVSA-2015:032",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:032"
            },
            {
              "name": "DSA-3195",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3195"
            },
            {
              "name": "HPSBMU03409",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1185397",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185397"
            },
            {
              "name": "SUSE-SU-2015:0365",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html"
            },
            {
              "name": "APPLE-SA-2015-09-30-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
            },
            {
              "name": "HPSBMU03380",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "MDVSA-2015:079",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:079"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
            },
            {
              "name": "SSRT102066",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
            },
            {
              "name": "openSUSE-SU-2015:0325",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html"
            },
            {
              "name": "https://support.apple.com/HT205267",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT205267"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php"
            },
            {
              "name": "https://github.com/php/php-src/commit/b585a3aed7880a5fa5c18e2b838fc96f40e075bd",
              "refsource": "CONFIRM",
              "url": "https://github.com/php/php-src/commit/b585a3aed7880a5fa5c18e2b838fc96f40e075bd"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=68710",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=68710"
            },
            {
              "name": "RHSA-2015:1053",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
            },
            {
              "name": "GLSA-201503-03",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201503-03"
            },
            {
              "name": "HPSBUX03337",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2015-0040.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
            },
            {
              "name": "GLSA-201606-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201606-10"
            },
            {
              "name": "RHSA-2015:1066",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
            },
            {
              "name": "72539",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/72539"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-0231",
    "datePublished": "2015-01-27T11:00:00.000Z",
    "dateReserved": "2014-11-18T00:00:00.000Z",
    "dateUpdated": "2024-08-06T04:03:10.576Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-0232 (GCVE-0-2015-0232)

Vulnerability from cvelistv5 – Published: 2015-01-27 11:00 – Updated: 2024-08-06 04:03

Summary

The exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free and application crash) via crafted EXIF data in a JPEG image.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

23 references

URL	Tags
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.debian.org/security/2015/dsa-3195	vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/72541	vdb-entryx_refsource_BID
http://marc.info/?l=bugtraq&m=144050155601375&w=2	vendor-advisoryx_refsource_HP
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=…	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://marc.info/?l=bugtraq&m=143748090628601&w=2	vendor-advisoryx_refsource_HP
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
https://bugs.php.net/bug.php?id=68799	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2015-0…	vendor-advisoryx_refsource_SUSE
https://support.apple.com/HT205267	x_refsource_CONFIRM
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=…	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1185472	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1053.html	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201503-03	vendor-advisoryx_refsource_GENTOO
http://advisories.mageia.org/MGASA-2015-0040.html	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1066.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1218.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-01-22 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T04:03:10.640Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "MDVSA-2015:032",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:032"
          },
          {
            "name": "DSA-3195",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3195"
          },
          {
            "name": "72541",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/72541"
          },
          {
            "name": "HPSBMU03409",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
          },
          {
            "name": "SUSE-SU-2015:0365",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2fc178cf448d8e1b95d1314e47eeef610729e0df"
          },
          {
            "name": "APPLE-SA-2015-09-30-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
          },
          {
            "name": "HPSBMU03380",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=21bc7464f454fec18a9ec024c738f195602fee2a"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=68799"
          },
          {
            "name": "openSUSE-SU-2015:0325",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT205267"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=55001de6d8c6ed2aada870a76de1e4b4558737bf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185472"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "name": "RHSA-2015:1053",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
          },
          {
            "name": "GLSA-201503-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201503-03"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
          },
          {
            "name": "RHSA-2015:1066",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
          },
          {
            "name": "RHSA-2015:1218",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-01-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free and application crash) via crafted EXIF data in a JPEG image."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "MDVSA-2015:032",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:032"
        },
        {
          "name": "DSA-3195",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3195"
        },
        {
          "name": "72541",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/72541"
        },
        {
          "name": "HPSBMU03409",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
        },
        {
          "name": "SUSE-SU-2015:0365",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2fc178cf448d8e1b95d1314e47eeef610729e0df"
        },
        {
          "name": "APPLE-SA-2015-09-30-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
        },
        {
          "name": "HPSBMU03380",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=21bc7464f454fec18a9ec024c738f195602fee2a"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=68799"
        },
        {
          "name": "openSUSE-SU-2015:0325",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT205267"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=55001de6d8c6ed2aada870a76de1e4b4558737bf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185472"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "name": "RHSA-2015:1053",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
        },
        {
          "name": "GLSA-201503-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201503-03"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
        },
        {
          "name": "RHSA-2015:1066",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
        },
        {
          "name": "RHSA-2015:1218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2015-0232",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free and application crash) via crafted EXIF data in a JPEG image."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "MDVSA-2015:032",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:032"
            },
            {
              "name": "DSA-3195",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3195"
            },
            {
              "name": "72541",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/72541"
            },
            {
              "name": "HPSBMU03409",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
            },
            {
              "name": "SUSE-SU-2015:0365",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html"
            },
            {
              "name": "http://git.php.net/?p=php-src.git;a=commit;h=2fc178cf448d8e1b95d1314e47eeef610729e0df",
              "refsource": "CONFIRM",
              "url": "http://git.php.net/?p=php-src.git;a=commit;h=2fc178cf448d8e1b95d1314e47eeef610729e0df"
            },
            {
              "name": "APPLE-SA-2015-09-30-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
            },
            {
              "name": "HPSBMU03380",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "http://git.php.net/?p=php-src.git;a=commit;h=21bc7464f454fec18a9ec024c738f195602fee2a",
              "refsource": "CONFIRM",
              "url": "http://git.php.net/?p=php-src.git;a=commit;h=21bc7464f454fec18a9ec024c738f195602fee2a"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=68799",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=68799"
            },
            {
              "name": "openSUSE-SU-2015:0325",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html"
            },
            {
              "name": "https://support.apple.com/HT205267",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT205267"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php"
            },
            {
              "name": "http://git.php.net/?p=php-src.git;a=commit;h=55001de6d8c6ed2aada870a76de1e4b4558737bf",
              "refsource": "CONFIRM",
              "url": "http://git.php.net/?p=php-src.git;a=commit;h=55001de6d8c6ed2aada870a76de1e4b4558737bf"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1185472",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185472"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "RHSA-2015:1053",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
            },
            {
              "name": "GLSA-201503-03",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201503-03"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2015-0040.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
            },
            {
              "name": "RHSA-2015:1066",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
            },
            {
              "name": "RHSA-2015:1218",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-0232",
    "datePublished": "2015-01-27T11:00:00.000Z",
    "dateReserved": "2014-11-18T00:00:00.000Z",
    "dateUpdated": "2024-08-06T04:03:10.640Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-0273 (GCVE-0-2015-0273)

Vulnerability from cvelistv5 – Published: 2015-03-30 10:00 – Updated: 2024-08-06 04:03

Summary

Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZone data handled by the php_date_timezone_initialize_from_hash function or (b) DateTime data handled by the php_date_initialize_from_hash function.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

28 references

URL	Tags
http://www.debian.org/security/2015/dsa-3195	vendor-advisoryx_refsource_DEBIAN
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
https://support.apple.com/HT205375	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2535-1	vendor-advisoryx_refsource_UBUNTU
http://marc.info/?l=bugtraq&m=144050155601375&w=2	vendor-advisoryx_refsource_HP
https://bugs.php.net/bug.php?id=68942	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://marc.info/?l=bugtraq&m=143748090628601&w=2	vendor-advisoryx_refsource_HP
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://marc.info/?l=bugtraq&m=143403519711434&w=2	vendor-advisoryx_refsource_HP
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1194730	x_refsource_CONFIRM
https://support.apple.com/HT205267	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.securitytracker.com/id/1031945	vdb-entryx_refsource_SECTRACK
http://support.apple.com/kb/HT204942	x_refsource_CONFIRM
http://www.securityfocus.com/bid/72701	vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1053.html	vendor-advisoryx_refsource_REDHAT
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=…	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201606-10	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1066.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1218.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-02-19 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T04:03:10.916Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3195",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3195"
          },
          {
            "name": "APPLE-SA-2015-10-21-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT205375"
          },
          {
            "name": "USN-2535-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2535-1"
          },
          {
            "name": "HPSBMU03409",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=68942"
          },
          {
            "name": "APPLE-SA-2015-09-30-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
          },
          {
            "name": "HPSBMU03380",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "MDVSA-2015:079",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:079"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
          },
          {
            "name": "APPLE-SA-2015-06-30-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html"
          },
          {
            "name": "openSUSE-SU-2015:0440",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00004.html"
          },
          {
            "name": "SSRT102066",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1194730"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT205267"
          },
          {
            "name": "SUSE-SU-2015:0436",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html"
          },
          {
            "name": "1031945",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031945"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT204942"
          },
          {
            "name": "72701",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/72701"
          },
          {
            "name": "SUSE-SU-2015:0424",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00002.html"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "name": "RHSA-2015:1053",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=71335e6ebabc1b12c057d8017fd811892ecdfd24"
          },
          {
            "name": "HPSBUX03337",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
          },
          {
            "name": "GLSA-201606-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201606-10"
          },
          {
            "name": "RHSA-2015:1066",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
          },
          {
            "name": "RHSA-2015:1218",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-02-19T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZone data handled by the php_date_timezone_initialize_from_hash function or (b) DateTime data handled by the php_date_initialize_from_hash function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-3195",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3195"
        },
        {
          "name": "APPLE-SA-2015-10-21-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT205375"
        },
        {
          "name": "USN-2535-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2535-1"
        },
        {
          "name": "HPSBMU03409",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=68942"
        },
        {
          "name": "APPLE-SA-2015-09-30-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
        },
        {
          "name": "HPSBMU03380",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "MDVSA-2015:079",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:079"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
        },
        {
          "name": "APPLE-SA-2015-06-30-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html"
        },
        {
          "name": "openSUSE-SU-2015:0440",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00004.html"
        },
        {
          "name": "SSRT102066",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1194730"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT205267"
        },
        {
          "name": "SUSE-SU-2015:0436",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html"
        },
        {
          "name": "1031945",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031945"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT204942"
        },
        {
          "name": "72701",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/72701"
        },
        {
          "name": "SUSE-SU-2015:0424",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00002.html"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "name": "RHSA-2015:1053",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=71335e6ebabc1b12c057d8017fd811892ecdfd24"
        },
        {
          "name": "HPSBUX03337",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
        },
        {
          "name": "GLSA-201606-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201606-10"
        },
        {
          "name": "RHSA-2015:1066",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
        },
        {
          "name": "RHSA-2015:1218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2015-0273",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZone data handled by the php_date_timezone_initialize_from_hash function or (b) DateTime data handled by the php_date_initialize_from_hash function."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3195",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3195"
            },
            {
              "name": "APPLE-SA-2015-10-21-4",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html"
            },
            {
              "name": "https://support.apple.com/HT205375",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT205375"
            },
            {
              "name": "USN-2535-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2535-1"
            },
            {
              "name": "HPSBMU03409",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=68942",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=68942"
            },
            {
              "name": "APPLE-SA-2015-09-30-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
            },
            {
              "name": "HPSBMU03380",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "MDVSA-2015:079",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:079"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
            },
            {
              "name": "APPLE-SA-2015-06-30-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html"
            },
            {
              "name": "openSUSE-SU-2015:0440",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00004.html"
            },
            {
              "name": "SSRT102066",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1194730",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1194730"
            },
            {
              "name": "https://support.apple.com/HT205267",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT205267"
            },
            {
              "name": "SUSE-SU-2015:0436",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html"
            },
            {
              "name": "1031945",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1031945"
            },
            {
              "name": "http://support.apple.com/kb/HT204942",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT204942"
            },
            {
              "name": "72701",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/72701"
            },
            {
              "name": "SUSE-SU-2015:0424",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00002.html"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "RHSA-2015:1053",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
            },
            {
              "name": "http://git.php.net/?p=php-src.git;a=commit;h=71335e6ebabc1b12c057d8017fd811892ecdfd24",
              "refsource": "CONFIRM",
              "url": "http://git.php.net/?p=php-src.git;a=commit;h=71335e6ebabc1b12c057d8017fd811892ecdfd24"
            },
            {
              "name": "HPSBUX03337",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
            },
            {
              "name": "GLSA-201606-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201606-10"
            },
            {
              "name": "RHSA-2015:1066",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
            },
            {
              "name": "RHSA-2015:1218",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-0273",
    "datePublished": "2015-03-30T10:00:00.000Z",
    "dateReserved": "2014-11-18T00:00:00.000Z",
    "dateUpdated": "2024-08-06T04:03:10.916Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-1351 (GCVE-0-2015-1351)

Vulnerability from cvelistv5 – Published: 2015-03-30 10:00 – Updated: 2024-08-06 04:40

Summary

Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP through 5.6.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

13 references

URL	Tags
http://www.securityfocus.com/bid/71929	vdb-entryx_refsource_BID
http://openwall.com/lists/oss-security/2015/01/24/9	mailing-listx_refsource_MLIST
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
https://bugs.php.net/bug.php?id=68677	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
https://support.apple.com/HT205267	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1053.html	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201606-10	vendor-advisoryx_refsource_GENTOO
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1066.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-01-24 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T04:40:18.656Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "71929",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/71929"
          },
          {
            "name": "[oss-security] 20150124 Re: CVE Request: PHP",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2015/01/24/9"
          },
          {
            "name": "APPLE-SA-2015-09-30-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=68677"
          },
          {
            "name": "MDVSA-2015:079",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:079"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT205267"
          },
          {
            "name": "RHSA-2015:1053",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
          },
          {
            "name": "GLSA-201606-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201606-10"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=777c39f4042327eac4b63c7ee87dc1c7a09a3115"
          },
          {
            "name": "RHSA-2015:1066",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-01-24T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP through 5.6.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-29T18:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "71929",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/71929"
        },
        {
          "name": "[oss-security] 20150124 Re: CVE Request: PHP",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2015/01/24/9"
        },
        {
          "name": "APPLE-SA-2015-09-30-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=68677"
        },
        {
          "name": "MDVSA-2015:079",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:079"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT205267"
        },
        {
          "name": "RHSA-2015:1053",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
        },
        {
          "name": "GLSA-201606-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201606-10"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=777c39f4042327eac4b63c7ee87dc1c7a09a3115"
        },
        {
          "name": "RHSA-2015:1066",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-1351",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP through 5.6.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "71929",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/71929"
            },
            {
              "name": "[oss-security] 20150124 Re: CVE Request: PHP",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2015/01/24/9"
            },
            {
              "name": "APPLE-SA-2015-09-30-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=68677",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=68677"
            },
            {
              "name": "MDVSA-2015:079",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:079"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
            },
            {
              "name": "https://support.apple.com/HT205267",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT205267"
            },
            {
              "name": "RHSA-2015:1053",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
            },
            {
              "name": "GLSA-201606-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201606-10"
            },
            {
              "name": "http://git.php.net/?p=php-src.git;a=commit;h=777c39f4042327eac4b63c7ee87dc1c7a09a3115",
              "refsource": "CONFIRM",
              "url": "http://git.php.net/?p=php-src.git;a=commit;h=777c39f4042327eac4b63c7ee87dc1c7a09a3115"
            },
            {
              "name": "RHSA-2015:1066",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-1351",
    "datePublished": "2015-03-30T10:00:00.000Z",
    "dateReserved": "2015-01-24T00:00:00.000Z",
    "dateUpdated": "2024-08-06T04:40:18.656Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-2301 (GCVE-0-2015-2301)

Vulnerability from cvelistv5 – Published: 2015-03-30 10:00 – Updated: 2024-08-06 05:10

Summary

Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted renaming of a Phar archive to the name of an existing file.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

24 references

URL	Tags
http://www.debian.org/security/2015/dsa-3198	vendor-advisoryx_refsource_DEBIAN
http://www.ubuntu.com/usn/USN-2535-1	vendor-advisoryx_refsource_UBUNTU
http://marc.info/?l=bugtraq&m=144050155601375&w=2	vendor-advisoryx_refsource_HP
http://lists.opensuse.org/opensuse-updates/2015-0…	vendor-advisoryx_refsource_SUSE
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.securitytracker.com/id/1031949	vdb-entryx_refsource_SECTRACK
http://marc.info/?l=bugtraq&m=143748090628601&w=2	vendor-advisoryx_refsource_HP
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1194747	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=143403519711434&w=2	vendor-advisoryx_refsource_HP
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://support.apple.com/HT205267	x_refsource_CONFIRM
https://bugs.php.net/bug.php?id=68901	x_refsource_CONFIRM
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/73037	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1053.html	vendor-advisoryx_refsource_REDHAT
http://openwall.com/lists/oss-security/2015/03/15/6	mailing-listx_refsource_MLIST
https://security.gentoo.org/glsa/201606-10	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1066.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1218.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-01-24 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:10:16.232Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3198",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3198"
          },
          {
            "name": "USN-2535-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2535-1"
          },
          {
            "name": "HPSBMU03409",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
          },
          {
            "name": "openSUSE-SU-2015:0644",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html"
          },
          {
            "name": "APPLE-SA-2015-09-30-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
          },
          {
            "name": "1031949",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031949"
          },
          {
            "name": "HPSBMU03380",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "MDVSA-2015:079",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:079"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1194747"
          },
          {
            "name": "SSRT102066",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "name": "SUSE-SU-2015:0868",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT205267"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=68901"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=b2cf3f064b8f5efef89bb084521b61318c71781b"
          },
          {
            "name": "73037",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/73037"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "name": "RHSA-2015:1053",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
          },
          {
            "name": "HPSBUX03337",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
          },
          {
            "name": "[oss-security] 20150315 Re: CVE Request: PHP 5.6.6 changelog",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2015/03/15/6"
          },
          {
            "name": "GLSA-201606-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201606-10"
          },
          {
            "name": "RHSA-2015:1066",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
          },
          {
            "name": "RHSA-2015:1218",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-01-24T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted renaming of a Phar archive to the name of an existing file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-3198",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3198"
        },
        {
          "name": "USN-2535-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2535-1"
        },
        {
          "name": "HPSBMU03409",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
        },
        {
          "name": "openSUSE-SU-2015:0644",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html"
        },
        {
          "name": "APPLE-SA-2015-09-30-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
        },
        {
          "name": "1031949",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031949"
        },
        {
          "name": "HPSBMU03380",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "MDVSA-2015:079",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:079"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1194747"
        },
        {
          "name": "SSRT102066",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "name": "SUSE-SU-2015:0868",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT205267"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=68901"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=b2cf3f064b8f5efef89bb084521b61318c71781b"
        },
        {
          "name": "73037",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/73037"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "name": "RHSA-2015:1053",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
        },
        {
          "name": "HPSBUX03337",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
        },
        {
          "name": "[oss-security] 20150315 Re: CVE Request: PHP 5.6.6 changelog",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2015/03/15/6"
        },
        {
          "name": "GLSA-201606-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201606-10"
        },
        {
          "name": "RHSA-2015:1066",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
        },
        {
          "name": "RHSA-2015:1218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-2301",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted renaming of a Phar archive to the name of an existing file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3198",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3198"
            },
            {
              "name": "USN-2535-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2535-1"
            },
            {
              "name": "HPSBMU03409",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
            },
            {
              "name": "openSUSE-SU-2015:0644",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html"
            },
            {
              "name": "APPLE-SA-2015-09-30-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
            },
            {
              "name": "1031949",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1031949"
            },
            {
              "name": "HPSBMU03380",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "MDVSA-2015:079",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:079"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1194747",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1194747"
            },
            {
              "name": "SSRT102066",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "SUSE-SU-2015:0868",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
            },
            {
              "name": "https://support.apple.com/HT205267",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT205267"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=68901",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=68901"
            },
            {
              "name": "http://git.php.net/?p=php-src.git;a=commit;h=b2cf3f064b8f5efef89bb084521b61318c71781b",
              "refsource": "CONFIRM",
              "url": "http://git.php.net/?p=php-src.git;a=commit;h=b2cf3f064b8f5efef89bb084521b61318c71781b"
            },
            {
              "name": "73037",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/73037"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "RHSA-2015:1053",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
            },
            {
              "name": "HPSBUX03337",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
            },
            {
              "name": "[oss-security] 20150315 Re: CVE Request: PHP 5.6.6 changelog",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2015/03/15/6"
            },
            {
              "name": "GLSA-201606-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201606-10"
            },
            {
              "name": "RHSA-2015:1066",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
            },
            {
              "name": "RHSA-2015:1218",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-2301",
    "datePublished": "2015-03-30T10:00:00.000Z",
    "dateReserved": "2015-03-15T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:10:16.232Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2015_1066

CVE-2014-8142 (GCVE-0-2014-8142)

CVE-2014-9427 (GCVE-0-2014-9427)

CVE-2014-9652 (GCVE-0-2014-9652)

CVE-2014-9705 (GCVE-0-2014-9705)

CVE-2014-9709 (GCVE-0-2014-9709)

CVE-2015-0231 (GCVE-0-2015-0231)

CVE-2015-0232 (GCVE-0-2015-0232)

CVE-2015-0273 (GCVE-0-2015-0273)

CVE-2015-1351 (GCVE-0-2015-1351)

CVE-2015-2301 (GCVE-0-2015-2301)

Tags

Sightings

Nomenclature