Vulnerability-Lookup

RHSA-2014_1013

Vulnerability from csaf_redhat - Published: 2014-08-06 06:05 - Updated: 2024-11-14 16:26

Summary

Red Hat Security Advisory: php security update

Severity

Moderate

Notes

Topic: Updated php packages that fix multiple security issues are now available for Red Hat Enterprise Linux 7. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. PHP's fileinfo module provides functions used to identify a particular file according to the type of data contained by the file. A denial of service flaw was found in the File Information (fileinfo) extension rules for detecting AWK files. A remote attacker could use this flaw to cause a PHP application using fileinfo to consume an excessive amount of CPU. (CVE-2013-7345) Multiple denial of service flaws were found in the way the File Information (fileinfo) extension parsed certain Composite Document Format (CDF) files. A remote attacker could use either of these flaws to crash a PHP application using fileinfo via a specially crafted CDF file. (CVE-2014-0207, CVE-2014-0237, CVE-2014-0238, CVE-2014-3479, CVE-2014-3480, CVE-2014-3487) A heap-based buffer overflow flaw was found in the way PHP parsed DNS TXT records. A malicious DNS server or a man-in-the-middle attacker could possibly use this flaw to execute arbitrary code as the PHP interpreter if a PHP application used the dns_get_record() function to perform a DNS query. (CVE-2014-4049) A type confusion issue was found in PHP's phpinfo() function. A malicious script author could possibly use this flaw to disclose certain portions of server memory. (CVE-2014-4721) A type confusion issue was found in the SPL ArrayObject and SPLObjectStorage classes' unserialize() method. A remote attacker able to submit specially crafted input to a PHP application, which would then unserialize this input using one of the aforementioned methods, could use this flaw to execute arbitrary code with the privileges of the user running that PHP application. (CVE-2014-3515) The CVE-2014-0207, CVE-2014-0237, CVE-2014-0238, CVE-2014-3479, CVE-2014-3480, and CVE-2014-3487 issues were discovered by Francisco Alonso of Red Hat Product Security. All php users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the updated packages, the httpd daemon must be restarted for the update to take effect.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2013-7345

A denial of service flaw was found in the File Information (fileinfo) extension rules for detecting AWK files. A remote attacker could use this flaw to cause a PHP application using fileinfo to consume an excessive amount of CPU.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-407 - Inefficient Algorithmic Complexity

Affected products

Fixed 474 products

Product	Version	Remediation
Unresolved product id: 7Client-optional-7.0.Z:php-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-0:5.4.16-23.el7_0.src	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-bcmath-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-bcmath-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-bcmath-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-cli-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-cli-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-cli-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-common-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-common-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-common-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-dba-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-dba-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-dba-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-debuginfo-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-debuginfo-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-debuginfo-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-devel-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-devel-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-devel-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-embedded-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-embedded-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-embedded-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-enchant-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-enchant-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-enchant-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-fpm-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-fpm-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-fpm-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-gd-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-gd-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-gd-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-intl-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-intl-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-intl-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-ldap-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-ldap-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-ldap-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-mbstring-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-mbstring-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-mbstring-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-mysql-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-mysql-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-mysql-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-mysqlnd-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-mysqlnd-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-mysqlnd-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-odbc-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-odbc-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-odbc-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-pdo-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-pdo-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-pdo-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-pgsql-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-pgsql-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-pgsql-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-process-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-process-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-process-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-pspell-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-pspell-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-pspell-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-recode-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-recode-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-recode-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-snmp-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-snmp-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-snmp-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-soap-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-soap-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-soap-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-xml-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-xml-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-xml-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-xmlrpc-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-xmlrpc-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.0.Z:php-xmlrpc-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-0:5.4.16-23.el7_0.src	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-bcmath-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-bcmath-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-bcmath-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-cli-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-cli-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-cli-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-common-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-common-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-common-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-dba-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-dba-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-dba-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-debuginfo-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-debuginfo-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-debuginfo-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-devel-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-devel-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-devel-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-embedded-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-embedded-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-embedded-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-enchant-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-enchant-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-enchant-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-fpm-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-fpm-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-fpm-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-gd-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-gd-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-gd-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-intl-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-intl-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-intl-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-ldap-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-ldap-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-ldap-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-mbstring-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-mbstring-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-mbstring-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-mysql-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-mysql-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-mysql-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-mysqlnd-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-mysqlnd-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-mysqlnd-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-odbc-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-odbc-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-odbc-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-pdo-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-pdo-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-pdo-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-pgsql-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-pgsql-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-pgsql-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-process-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-process-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-process-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-pspell-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-pspell-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-pspell-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-recode-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-recode-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-recode-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-snmp-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-snmp-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-snmp-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-soap-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-soap-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-soap-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-xml-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-xml-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-xml-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-xmlrpc-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-xmlrpc-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.0.Z:php-xmlrpc-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-0:5.4.16-23.el7_0.src	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-bcmath-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-bcmath-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-bcmath-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-cli-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-cli-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-cli-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-common-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-common-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-common-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-dba-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-dba-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-dba-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-debuginfo-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-debuginfo-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-debuginfo-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-devel-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-devel-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-devel-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-embedded-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-embedded-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-embedded-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-enchant-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-enchant-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-enchant-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-fpm-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-fpm-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-fpm-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-gd-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-gd-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-gd-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-intl-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-intl-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-intl-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-ldap-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-ldap-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-ldap-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-mbstring-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-mbstring-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-mbstring-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-mysql-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-mysql-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-mysql-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-mysqlnd-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-mysqlnd-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-mysqlnd-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-odbc-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-odbc-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-odbc-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-pdo-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-pdo-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-pdo-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-pgsql-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-pgsql-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-pgsql-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-process-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-process-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-process-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-pspell-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-pspell-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-pspell-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-recode-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-recode-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-recode-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-snmp-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-snmp-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-snmp-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-soap-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-soap-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-soap-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-xml-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-xml-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-xml-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-xmlrpc-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-xmlrpc-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.0.Z:php-xmlrpc-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-0:5.4.16-23.el7_0.src	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-bcmath-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-bcmath-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-bcmath-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-cli-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-cli-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-cli-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-common-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-common-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-common-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-dba-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-dba-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-dba-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-debuginfo-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-debuginfo-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-debuginfo-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-devel-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-devel-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-devel-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-embedded-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-embedded-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-embedded-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-enchant-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-enchant-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-enchant-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-fpm-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-fpm-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-fpm-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-gd-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-gd-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-gd-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-intl-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-intl-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-intl-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-ldap-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-ldap-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-ldap-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-mbstring-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-mbstring-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-mbstring-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-mysql-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-mysql-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-mysql-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-mysqlnd-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-mysqlnd-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-mysqlnd-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-odbc-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-odbc-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-odbc-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-pdo-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-pdo-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-pdo-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-pgsql-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-pgsql-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-pgsql-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-process-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-process-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-process-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-pspell-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-pspell-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-pspell-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-recode-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-recode-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-recode-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-snmp-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-snmp-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-snmp-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-soap-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-soap-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-soap-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-xml-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-xml-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-xml-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-xmlrpc-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-xmlrpc-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.0.Z:php-xmlrpc-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-0:5.4.16-23.el7_0.src	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-bcmath-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-bcmath-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-bcmath-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-cli-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-cli-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-cli-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-common-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-common-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-common-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-dba-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-dba-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-dba-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-debuginfo-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-debuginfo-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-debuginfo-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-devel-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-devel-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-devel-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-embedded-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-embedded-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-embedded-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-enchant-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-enchant-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-enchant-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-fpm-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-fpm-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-fpm-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-gd-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-gd-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-gd-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-intl-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-intl-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-intl-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-ldap-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-ldap-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-ldap-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-mbstring-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-mbstring-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-mbstring-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-mysql-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-mysql-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-mysql-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-mysqlnd-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-mysqlnd-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-mysqlnd-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-odbc-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-odbc-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-odbc-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-pdo-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-pdo-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-pdo-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-pgsql-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-pgsql-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-pgsql-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-process-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-process-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-process-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-pspell-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-pspell-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-pspell-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-recode-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-recode-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-recode-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-snmp-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-snmp-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-snmp-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-soap-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-soap-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-soap-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-xml-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-xml-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-xml-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-xmlrpc-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-xmlrpc-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.0.Z:php-xmlrpc-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-0:5.4.16-23.el7_0.src	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-bcmath-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-bcmath-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-bcmath-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-cli-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-cli-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-cli-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-common-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-common-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-common-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-dba-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-dba-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-dba-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-debuginfo-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-debuginfo-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-debuginfo-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-devel-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-devel-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-devel-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-embedded-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-embedded-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-embedded-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-enchant-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-enchant-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-enchant-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-fpm-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-fpm-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-fpm-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-gd-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-gd-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-gd-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-intl-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-intl-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-intl-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-ldap-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-ldap-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-ldap-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-mbstring-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-mbstring-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-mbstring-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-mysql-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-mysql-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-mysql-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-mysqlnd-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-mysqlnd-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-mysqlnd-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-odbc-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-odbc-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-odbc-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-pdo-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-pdo-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-pdo-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-pgsql-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-pgsql-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-pgsql-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-process-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-process-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-process-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-pspell-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-pspell-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-pspell-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-recode-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-recode-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-recode-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-snmp-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-snmp-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-snmp-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-soap-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-soap-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-soap-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-xml-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-xml-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-xml-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-xmlrpc-0:5.4.16-23.el7_0.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-xmlrpc-0:5.4.16-23.el7_0.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.0.Z:php-xmlrpc-0:5.4.16-23.el7_0.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2014-0207

A denial of service flaw was found in the way the File Information (fileinfo) extension parsed certain Composite Document Format (CDF) files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted CDF file.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

Fixed 474 products, the same list as for CVE-2013-7345

Threats

Impact Moderate

CVE-2014-0237

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-407 - Inefficient Algorithmic Complexity

Affected products

Fixed 474 products, the same list as for CVE-2013-7345

Threats

Impact Moderate

CVE-2014-0238

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 474 products, the same list as for CVE-2013-7345

Threats

Impact Moderate

CVE-2014-3479

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

Fixed 474 products, the same list as for CVE-2013-7345

Threats

Impact Moderate

CVE-2014-3480

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

Fixed 474 products, the same list as for CVE-2013-7345

Threats

Impact Moderate

CVE-2014-3487

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

Fixed 474 products, the same list as for CVE-2013-7345

Threats

Impact Moderate

CVE-2014-3515

A type confusion issue was found in the SPL ArrayObject and SPLObjectStorage classes' unserialize() method. A remote attacker able to submit specially crafted input to a PHP application, which would then unserialize this input using one of the aforementioned methods, could use this flaw to execute arbitrary code with the privileges of the user running that PHP application.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 474 products, the same list as for CVE-2013-7345

Threats

Impact Low

CVE-2014-4049

A heap-based buffer overflow flaw was found in the way PHP parsed DNS TXT records. A malicious DNS server or a man-in-the-middle attacker could possibly use this flaw to execute arbitrary code as the PHP interpreter if a PHP application used the dns_get_record() function to perform a DNS query.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 474 products, the same list as for CVE-2013-7345

Threats

Impact Moderate

CVE-2014-4721

A type confusion issue was found in PHP's phpinfo() function. A malicious script author could possibly use this flaw to disclose certain portions of server memory.

2.6 ()


                
                  AV:N/AC:H/Au:N/C:P/I:N/A:N

CWE-201 - Insertion of Sensitive Information Into Sent Data

Affected products

Fixed 474 products, the same list as for CVE-2013-7345

Threats

Impact Low

References

53 references

URL	Category
https://access.redhat.com/errata/RHSA-2014:1013	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1079846	external
https://bugzilla.redhat.com/show_bug.cgi?id=1091842	external
https://bugzilla.redhat.com/show_bug.cgi?id=1098155	external
https://bugzilla.redhat.com/show_bug.cgi?id=1098193	external
https://bugzilla.redhat.com/show_bug.cgi?id=1104858	external
https://bugzilla.redhat.com/show_bug.cgi?id=1104869	external
https://bugzilla.redhat.com/show_bug.cgi?id=1107544	external
https://bugzilla.redhat.com/show_bug.cgi?id=1108447	external
https://bugzilla.redhat.com/show_bug.cgi?id=1112154	external
https://bugzilla.redhat.com/show_bug.cgi?id=1116662	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2013-7345	self
https://bugzilla.redhat.com/show_bug.cgi?id=1079846	external
https://www.cve.org/CVERecord?id=CVE-2013-7345	external
https://nvd.nist.gov/vuln/detail/CVE-2013-7345	external
https://access.redhat.com/security/cve/CVE-2014-0207	self
https://bugzilla.redhat.com/show_bug.cgi?id=1091842	external
https://www.cve.org/CVERecord?id=CVE-2014-0207	external
https://nvd.nist.gov/vuln/detail/CVE-2014-0207	external
https://access.redhat.com/security/cve/CVE-2014-0237	self
https://bugzilla.redhat.com/show_bug.cgi?id=1098193	external
https://www.cve.org/CVERecord?id=CVE-2014-0237	external
https://nvd.nist.gov/vuln/detail/CVE-2014-0237	external
https://access.redhat.com/security/cve/CVE-2014-0238	self
https://bugzilla.redhat.com/show_bug.cgi?id=1098155	external
https://www.cve.org/CVERecord?id=CVE-2014-0238	external
https://nvd.nist.gov/vuln/detail/CVE-2014-0238	external
https://access.redhat.com/security/cve/CVE-2014-3479	self
https://bugzilla.redhat.com/show_bug.cgi?id=1104869	external
https://www.cve.org/CVERecord?id=CVE-2014-3479	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3479	external
https://access.redhat.com/security/cve/CVE-2014-3480	self
https://bugzilla.redhat.com/show_bug.cgi?id=1104858	external
https://www.cve.org/CVERecord?id=CVE-2014-3480	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3480	external
https://access.redhat.com/security/cve/CVE-2014-3487	self
https://bugzilla.redhat.com/show_bug.cgi?id=1107544	external
https://www.cve.org/CVERecord?id=CVE-2014-3487	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3487	external
https://access.redhat.com/security/cve/CVE-2014-3515	self
https://bugzilla.redhat.com/show_bug.cgi?id=1112154	external
https://www.cve.org/CVERecord?id=CVE-2014-3515	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3515	external
https://access.redhat.com/security/cve/CVE-2014-4049	self
https://bugzilla.redhat.com/show_bug.cgi?id=1108447	external
https://www.cve.org/CVERecord?id=CVE-2014-4049	external
https://nvd.nist.gov/vuln/detail/CVE-2014-4049	external
https://access.redhat.com/security/cve/CVE-2014-4721	self
https://bugzilla.redhat.com/show_bug.cgi?id=1116662	external
https://www.cve.org/CVERecord?id=CVE-2014-4721	external
https://nvd.nist.gov/vuln/detail/CVE-2014-4721	external

Acknowledgments

Red Hat Product Security Francisco Alonso

JSON

To clipboard

Loading 1.2 MB of JSON…

CVE-2013-7345 (GCVE-0-2013-7345)

Vulnerability from cvelistv5 – Published: 2014-03-23 15:00 – Updated: 2024-08-06 18:01

Summary

The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted ASCII file that triggers a large amount of backtracking, as demonstrated via a file with many newline characters.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

6 references

URL	Tags
https://github.com/file/file/commit/ef2329cf71acb…	x_refsource_CONFIRM
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug…	x_refsource_CONFIRM
http://bugs.gw.com/view.php?id=164	x_refsource_CONFIRM
http://support.apple.com/kb/HT6443	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2014/dsa-2873	vendor-advisoryx_refsource_DEBIAN

Date Public

2013-03-26 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T18:01:20.506Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/ef2329cf71acb59204dd981e2c6cce6c81fe467c"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=703993"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.gw.com/view.php?id=164"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT6443"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "name": "DSA-2873",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2873"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-03-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted ASCII file that triggers a large amount of backtracking, as demonstrated via a file with many newline characters."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2014-11-13T13:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/ef2329cf71acb59204dd981e2c6cce6c81fe467c"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=703993"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.gw.com/view.php?id=164"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT6443"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "name": "DSA-2873",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2873"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2013-7345",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted ASCII file that triggers a large amount of backtracking, as demonstrated via a file with many newline characters."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/file/file/commit/ef2329cf71acb59204dd981e2c6cce6c81fe467c",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/ef2329cf71acb59204dd981e2c6cce6c81fe467c"
            },
            {
              "name": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=703993",
              "refsource": "CONFIRM",
              "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=703993"
            },
            {
              "name": "http://bugs.gw.com/view.php?id=164",
              "refsource": "CONFIRM",
              "url": "http://bugs.gw.com/view.php?id=164"
            },
            {
              "name": "http://support.apple.com/kb/HT6443",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT6443"
            },
            {
              "name": "RHSA-2014:1765",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
            },
            {
              "name": "DSA-2873",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2873"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2013-7345",
    "datePublished": "2014-03-23T15:00:00.000Z",
    "dateReserved": "2014-03-23T00:00:00.000Z",
    "dateUpdated": "2024-08-06T18:01:20.506Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-0207 (GCVE-0-2014-0207)

Vulnerability from cvelistv5 – Published: 2014-07-09 10:00 – Updated: 2025-12-04 20:29

Summary

The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted CDF file.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-04 20:29 UTC

CWE

n/a
CWE-20 - Improper Input Validation

Assigner

redhat redhat root

References

19 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=1091842	x_refsource_CONFIRM
https://support.apple.com/HT204659	x_refsource_CONFIRM
http://www.securityfocus.com/bid/68243	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2014/dsa-3021	vendor-advisoryx_refsource_DEBIAN
http://marc.info/?l=bugtraq&m=141017844705317&w=2	vendor-advisoryx_refsource_HP
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.debian.org/security/2014/dsa-2974	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/59794	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://mx.gw.com/pipermail/file/2014/001553.html	mailing-listx_refsource_MLIST
https://github.com/file/file/commit/6d209c1c48945…	x_refsource_CONFIRM
https://bugs.php.net/bug.php?id=67326	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://support.apple.com/kb/HT6443	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/59831	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE

Date Public

2014-06-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:05:39.204Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1091842"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "name": "68243",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/68243"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "name": "DSA-3021",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3021"
          },
          {
            "name": "HPSBUX03102",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "DSA-2974",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2974"
          },
          {
            "name": "59794",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59794"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "[file] 20140612 file-5.19 is now available",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/6d209c1c489457397a5763bca4b28e43aac90391"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=67326"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT6443"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "name": "SSRT101681",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "name": "59831",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59831"
          },
          {
            "name": "openSUSE-SU-2014:1236",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2014-0207",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-04T20:29:01.775646Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-20",
                "description": "CWE-20 Improper Input Validation",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-04T20:29:06.728Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted CDF file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-25T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1091842"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "name": "68243",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/68243"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "name": "DSA-3021",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3021"
        },
        {
          "name": "HPSBUX03102",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "DSA-2974",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2974"
        },
        {
          "name": "59794",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59794"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "[file] 20140612 file-5.19 is now available",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/6d209c1c489457397a5763bca4b28e43aac90391"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=67326"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT6443"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "name": "SSRT101681",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "name": "59831",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59831"
        },
        {
          "name": "openSUSE-SU-2014:1236",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-0207",
    "datePublished": "2014-07-09T10:00:00.000Z",
    "dateReserved": "2013-12-03T00:00:00.000Z",
    "dateUpdated": "2025-12-04T20:29:06.728Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2014-0237 (GCVE-0-2014-0237)

Vulnerability from cvelistv5 – Published: 2014-06-01 01:00 – Updated: 2024-08-06 09:05

Summary

The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (performance degradation) by triggering many file_printf calls.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

18 references

URL	Tags
http://secunia.com/advisories/59329	third-party-advisoryx_refsource_SECUNIA
https://github.com/file/file/commit/b8acc83781d5a…	x_refsource_CONFIRM
http://secunia.com/advisories/59418	third-party-advisoryx_refsource_SECUNIA
https://support.apple.com/HT204659	x_refsource_CONFIRM
http://www.securityfocus.com/bid/67759	vdb-entryx_refsource_BID
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2014/dsa-3021	vendor-advisoryx_refsource_DEBIAN
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://secunia.com/advisories/59061	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://secunia.com/advisories/60998	third-party-advisoryx_refsource_SECUNIA
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://support.apple.com/kb/HT6443	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
https://bugs.php.net/bug.php?id=67328	x_refsource_CONFIRM

Date Public

2014-05-29 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:05:39.320Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "59329",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59329"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/b8acc83781d5a24cc5101e525d15efe0482c280d"
          },
          {
            "name": "59418",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59418"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "name": "67759",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/67759"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "name": "DSA-3021",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3021"
          },
          {
            "name": "SUSE-SU-2014:0869",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "59061",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59061"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "60998",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60998"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT6443"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=67328"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-05-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (performance degradation) by triggering many file_printf calls."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-01-05T14:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "59329",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59329"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/b8acc83781d5a24cc5101e525d15efe0482c280d"
        },
        {
          "name": "59418",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59418"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "name": "67759",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/67759"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "name": "DSA-3021",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3021"
        },
        {
          "name": "SUSE-SU-2014:0869",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "59061",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59061"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "60998",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60998"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT6443"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=67328"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2014-0237",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (performance degradation) by triggering many file_printf calls."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "59329",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59329"
            },
            {
              "name": "https://github.com/file/file/commit/b8acc83781d5a24cc5101e525d15efe0482c280d",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/b8acc83781d5a24cc5101e525d15efe0482c280d"
            },
            {
              "name": "59418",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59418"
            },
            {
              "name": "https://support.apple.com/HT204659",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT204659"
            },
            {
              "name": "67759",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/67759"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
            },
            {
              "name": "RHSA-2014:1766",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
            },
            {
              "name": "DSA-3021",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-3021"
            },
            {
              "name": "SUSE-SU-2014:0869",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "59061",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59061"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php"
            },
            {
              "name": "60998",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60998"
            },
            {
              "name": "APPLE-SA-2015-04-08-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
            },
            {
              "name": "http://support.apple.com/kb/HT6443",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT6443"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
            },
            {
              "name": "RHSA-2014:1765",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=67328",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=67328"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-0237",
    "datePublished": "2014-06-01T01:00:00.000Z",
    "dateReserved": "2013-12-03T00:00:00.000Z",
    "dateUpdated": "2024-08-06T09:05:39.320Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-0238 (GCVE-0-2014-0238)

Vulnerability from cvelistv5 – Published: 2014-06-01 01:00 – Updated: 2024-08-06 09:05

Summary

The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite loop or out-of-bounds memory access) via a vector that (1) has zero length or (2) is too long.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

18 references

URL	Tags
http://secunia.com/advisories/59329	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/59418	third-party-advisoryx_refsource_SECUNIA
https://support.apple.com/HT204659	x_refsource_CONFIRM
https://bugs.php.net/bug.php?id=67327	x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
https://github.com/file/file/commit/f97486ef5dc3e…	x_refsource_CONFIRM
http://www.debian.org/security/2014/dsa-3021	vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/67765	vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://secunia.com/advisories/59061	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://secunia.com/advisories/60998	third-party-advisoryx_refsource_SECUNIA
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://support.apple.com/kb/HT6443	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT

Date Public

2014-05-29 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:05:39.452Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "59329",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59329"
          },
          {
            "name": "59418",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59418"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=67327"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/f97486ef5dc3e8735440edc4fc8808c63e1a3ef0"
          },
          {
            "name": "DSA-3021",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3021"
          },
          {
            "name": "67765",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/67765"
          },
          {
            "name": "SUSE-SU-2014:0869",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "59061",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59061"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "60998",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60998"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT6443"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-05-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite loop or out-of-bounds memory access) via a vector that (1) has zero length or (2) is too long."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-01-05T14:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "59329",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59329"
        },
        {
          "name": "59418",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59418"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=67327"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/f97486ef5dc3e8735440edc4fc8808c63e1a3ef0"
        },
        {
          "name": "DSA-3021",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3021"
        },
        {
          "name": "67765",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/67765"
        },
        {
          "name": "SUSE-SU-2014:0869",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "59061",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59061"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "60998",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60998"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT6443"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2014-0238",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite loop or out-of-bounds memory access) via a vector that (1) has zero length or (2) is too long."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "59329",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59329"
            },
            {
              "name": "59418",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59418"
            },
            {
              "name": "https://support.apple.com/HT204659",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT204659"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=67327",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=67327"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
            },
            {
              "name": "RHSA-2014:1766",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
            },
            {
              "name": "https://github.com/file/file/commit/f97486ef5dc3e8735440edc4fc8808c63e1a3ef0",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/f97486ef5dc3e8735440edc4fc8808c63e1a3ef0"
            },
            {
              "name": "DSA-3021",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-3021"
            },
            {
              "name": "67765",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/67765"
            },
            {
              "name": "SUSE-SU-2014:0869",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "59061",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59061"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php"
            },
            {
              "name": "60998",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60998"
            },
            {
              "name": "APPLE-SA-2015-04-08-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
            },
            {
              "name": "http://support.apple.com/kb/HT6443",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT6443"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
            },
            {
              "name": "RHSA-2014:1765",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-0238",
    "datePublished": "2014-06-01T01:00:00.000Z",
    "dateReserved": "2013-12-03T00:00:00.000Z",
    "dateUpdated": "2024-08-06T09:05:39.452Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3479 (GCVE-0-2014-3479)

Vulnerability from cvelistv5 – Published: 2014-07-09 10:00 – Updated: 2024-08-06 10:43

Summary

The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, relies on incorrect sector-size data, which allows remote attackers to cause a denial of service (application crash) via a crafted stream offset in a CDF file.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

18 references

URL	Tags
https://support.apple.com/HT204659	x_refsource_CONFIRM
https://github.com/file/file/commit/36fadd29849b8…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2014/dsa-3021	vendor-advisoryx_refsource_DEBIAN
http://marc.info/?l=bugtraq&m=141017844705317&w=2	vendor-advisoryx_refsource_HP
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.debian.org/security/2014/dsa-2974	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/59794	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://mx.gw.com/pipermail/file/2014/001553.html	mailing-listx_refsource_MLIST
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://support.apple.com/kb/HT6443	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
https://bugs.php.net/bug.php?id=67411	x_refsource_CONFIRM
http://www.securityfocus.com/bid/68241	vdb-entryx_refsource_BID
http://secunia.com/advisories/59831	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE

Date Public

2014-06-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:43:06.212Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/36fadd29849b8087af9f4586f89dbf74ea45be67"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "name": "DSA-3021",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3021"
          },
          {
            "name": "HPSBUX03102",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "DSA-2974",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2974"
          },
          {
            "name": "59794",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59794"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "[file] 20140612 file-5.19 is now available",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT6443"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=67411"
          },
          {
            "name": "SSRT101681",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "name": "68241",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/68241"
          },
          {
            "name": "59831",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59831"
          },
          {
            "name": "openSUSE-SU-2014:1236",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, relies on incorrect sector-size data, which allows remote attackers to cause a denial of service (application crash) via a crafted stream offset in a CDF file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-25T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/36fadd29849b8087af9f4586f89dbf74ea45be67"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "name": "DSA-3021",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3021"
        },
        {
          "name": "HPSBUX03102",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "DSA-2974",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2974"
        },
        {
          "name": "59794",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59794"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "[file] 20140612 file-5.19 is now available",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT6443"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=67411"
        },
        {
          "name": "SSRT101681",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "name": "68241",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/68241"
        },
        {
          "name": "59831",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59831"
        },
        {
          "name": "openSUSE-SU-2014:1236",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3479",
    "datePublished": "2014-07-09T10:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:43:06.212Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3480 (GCVE-0-2014-3480)

Vulnerability from cvelistv5 – Published: 2014-07-09 10:00 – Updated: 2025-12-04 20:25

Summary

The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate sector-count data, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF file.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-04 20:25 UTC

CWE

n/a
CWE-20 - Improper Input Validation

Assigner

redhat redhat root

References

18 references

URL	Tags
https://support.apple.com/HT204659	x_refsource_CONFIRM
http://www.securityfocus.com/bid/68238	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2014/dsa-3021	vendor-advisoryx_refsource_DEBIAN
http://marc.info/?l=bugtraq&m=141017844705317&w=2	vendor-advisoryx_refsource_HP
https://github.com/file/file/commit/40bade80cbe2a…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.debian.org/security/2014/dsa-2974	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/59794	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://mx.gw.com/pipermail/file/2014/001553.html	mailing-listx_refsource_MLIST
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://support.apple.com/kb/HT6443	x_refsource_CONFIRM
https://bugs.php.net/bug.php?id=67412	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/59831	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE

Date Public

2014-06-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:43:06.355Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "name": "68238",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/68238"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "name": "DSA-3021",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3021"
          },
          {
            "name": "HPSBUX03102",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/40bade80cbe2af1d0b2cd0420cebd5d5905a2382"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "DSA-2974",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2974"
          },
          {
            "name": "59794",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59794"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "[file] 20140612 file-5.19 is now available",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT6443"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=67412"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "name": "SSRT101681",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "name": "59831",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59831"
          },
          {
            "name": "openSUSE-SU-2014:1236",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2014-3480",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-04T20:25:26.430563Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-20",
                "description": "CWE-20 Improper Input Validation",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-04T20:25:29.415Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate sector-count data, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-25T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "name": "68238",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/68238"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "name": "DSA-3021",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3021"
        },
        {
          "name": "HPSBUX03102",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/40bade80cbe2af1d0b2cd0420cebd5d5905a2382"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "DSA-2974",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2974"
        },
        {
          "name": "59794",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59794"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "[file] 20140612 file-5.19 is now available",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT6443"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=67412"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "name": "SSRT101681",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "name": "59831",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59831"
        },
        {
          "name": "openSUSE-SU-2014:1236",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3480",
    "datePublished": "2014-07-09T10:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2025-12-04T20:25:29.415Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2014-3487 (GCVE-0-2014-3487)

Vulnerability from cvelistv5 – Published: 2014-07-09 10:00 – Updated: 2024-08-06 10:43

Summary

The cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate a stream offset, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF file.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

18 references

URL	Tags
https://support.apple.com/HT204659	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2014/dsa-3021	vendor-advisoryx_refsource_DEBIAN
http://marc.info/?l=bugtraq&m=141017844705317&w=2	vendor-advisoryx_refsource_HP
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.debian.org/security/2014/dsa-2974	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/59794	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://mx.gw.com/pipermail/file/2014/001553.html	mailing-listx_refsource_MLIST
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://support.apple.com/kb/HT6443	x_refsource_CONFIRM
https://github.com/file/file/commit/93e063ee374b6…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
https://bugs.php.net/bug.php?id=67413	x_refsource_CONFIRM
http://secunia.com/advisories/59831	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/68120	vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE

Date Public

2014-06-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:43:06.287Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "name": "DSA-3021",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3021"
          },
          {
            "name": "HPSBUX03102",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "DSA-2974",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2974"
          },
          {
            "name": "59794",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59794"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "[file] 20140612 file-5.19 is now available",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT6443"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/93e063ee374b6a75729df9e7201fb511e47e259d"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "name": "SSRT101681",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=67413"
          },
          {
            "name": "59831",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59831"
          },
          {
            "name": "68120",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/68120"
          },
          {
            "name": "openSUSE-SU-2014:1236",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate a stream offset, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-25T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "name": "DSA-3021",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3021"
        },
        {
          "name": "HPSBUX03102",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "DSA-2974",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2974"
        },
        {
          "name": "59794",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59794"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "[file] 20140612 file-5.19 is now available",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT6443"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/93e063ee374b6a75729df9e7201fb511e47e259d"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "name": "SSRT101681",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=67413"
        },
        {
          "name": "59831",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59831"
        },
        {
          "name": "68120",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/68120"
        },
        {
          "name": "openSUSE-SU-2014:1236",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3487",
    "datePublished": "2014-07-09T10:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:43:06.287Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3515 (GCVE-0-2014-3515)

Vulnerability from cvelistv5 – Published: 2014-07-09 10:00 – Updated: 2024-08-06 10:43

Summary

The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which allows remote attackers to execute arbitrary code via a crafted string that triggers use of a Hashtable destructor, related to "type confusion" issues in (1) ArrayObject and (2) SPLObjectStorage.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

15 references

URL	Tags
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=…	x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
https://bugs.php.net/bug.php?id=67492	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=141017844705317&w=2	vendor-advisoryx_refsource_HP
http://www.debian.org/security/2014/dsa-2974	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/59794	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://secunia.com/advisories/60998	third-party-advisoryx_refsource_SECUNIA
http://support.apple.com/kb/HT6443	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/68237	vdb-entryx_refsource_BID
http://secunia.com/advisories/59831	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE

Date Public

2014-06-26 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:43:06.284Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=88223c5245e9b470e1e6362bfd96829562ffe6ab"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=67492"
          },
          {
            "name": "HPSBUX03102",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "name": "DSA-2974",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2974"
          },
          {
            "name": "59794",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59794"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "60998",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60998"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT6443"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "name": "SSRT101681",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "name": "68237",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/68237"
          },
          {
            "name": "59831",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59831"
          },
          {
            "name": "openSUSE-SU-2014:1236",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which allows remote attackers to execute arbitrary code via a crafted string that triggers use of a Hashtable destructor, related to \"type confusion\" issues in (1) ArrayObject and (2) SPLObjectStorage."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-01-04T17:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=88223c5245e9b470e1e6362bfd96829562ffe6ab"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=67492"
        },
        {
          "name": "HPSBUX03102",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "name": "DSA-2974",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2974"
        },
        {
          "name": "59794",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59794"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "60998",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60998"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT6443"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "name": "SSRT101681",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "name": "68237",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/68237"
        },
        {
          "name": "59831",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59831"
        },
        {
          "name": "openSUSE-SU-2014:1236",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2014-3515",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which allows remote attackers to execute arbitrary code via a crafted string that triggers use of a Hashtable destructor, related to \"type confusion\" issues in (1) ArrayObject and (2) SPLObjectStorage."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://git.php.net/?p=php-src.git;a=commit;h=88223c5245e9b470e1e6362bfd96829562ffe6ab",
              "refsource": "CONFIRM",
              "url": "http://git.php.net/?p=php-src.git;a=commit;h=88223c5245e9b470e1e6362bfd96829562ffe6ab"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
            },
            {
              "name": "RHSA-2014:1766",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=67492",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=67492"
            },
            {
              "name": "HPSBUX03102",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
            },
            {
              "name": "DSA-2974",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2974"
            },
            {
              "name": "59794",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59794"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php"
            },
            {
              "name": "60998",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60998"
            },
            {
              "name": "http://support.apple.com/kb/HT6443",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT6443"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
            },
            {
              "name": "RHSA-2014:1765",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
            },
            {
              "name": "SSRT101681",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
            },
            {
              "name": "68237",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/68237"
            },
            {
              "name": "59831",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59831"
            },
            {
              "name": "openSUSE-SU-2014:1236",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3515",
    "datePublished": "2014-07-09T10:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:43:06.284Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-4049 (GCVE-0-2014-4049)

Vulnerability from cvelistv5 – Published: 2014-06-18 19:00 – Updated: 2024-08-06 11:04

Summary

Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS TXT record, related to the dns_get_record function.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

25 references

URL	Tags
http://secunia.com/advisories/59329	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/59418	third-party-advisoryx_refsource_SECUNIA
https://support.apple.com/HT204659	x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
http://secunia.com/advisories/59496	third-party-advisoryx_refsource_SECUNIA
http://www.securitytracker.com/id/1030435	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/59652	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/68007	vdb-entryx_refsource_BID
http://secunia.com/advisories/59513	third-party-advisoryx_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=141017844705317&w=2	vendor-advisoryx_refsource_HP
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/60998	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/59270	third-party-advisoryx_refsource_SECUNIA
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://support.apple.com/kb/HT6443	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE
https://bugzilla.redhat.com/show_bug.cgi?id=1108447	x_refsource_CONFIRM
http://www.debian.org/security/2014/dsa-2961	vendor-advisoryx_refsource_DEBIAN
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
https://github.com/php/php-src/commit/b34d7849ed9…	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2014/06/13/4	mailing-listx_refsource_MLIST
http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE

Date Public

2014-06-11 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T11:04:28.245Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "59329",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59329"
          },
          {
            "name": "SUSE-SU-2014:0868",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00001.html"
          },
          {
            "name": "59418",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59418"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
          },
          {
            "name": "59496",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59496"
          },
          {
            "name": "1030435",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1030435"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "name": "59652",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59652"
          },
          {
            "name": "68007",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/68007"
          },
          {
            "name": "59513",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59513"
          },
          {
            "name": "HPSBUX03102",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "name": "SUSE-SU-2014:0869",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
          },
          {
            "name": "60998",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60998"
          },
          {
            "name": "59270",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59270"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT6443"
          },
          {
            "name": "openSUSE-SU-2014:0841",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-06/msg00051.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1108447"
          },
          {
            "name": "DSA-2961",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2961"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "name": "SSRT101681",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/php/php-src/commit/b34d7849ed90ced9345f8ea1c59bc8d101c18468"
          },
          {
            "name": "[oss-security] 20140613 Re: CVE request: PHP heap-based buffer overflow in DNS TXT record parsing",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/06/13/4"
          },
          {
            "name": "openSUSE-SU-2014:0942",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-07/msg00032.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-11T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS TXT record, related to the dns_get_record function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-27T18:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "59329",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59329"
        },
        {
          "name": "SUSE-SU-2014:0868",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00001.html"
        },
        {
          "name": "59418",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59418"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
        },
        {
          "name": "59496",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59496"
        },
        {
          "name": "1030435",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1030435"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "name": "59652",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59652"
        },
        {
          "name": "68007",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/68007"
        },
        {
          "name": "59513",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59513"
        },
        {
          "name": "HPSBUX03102",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "name": "SUSE-SU-2014:0869",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
        },
        {
          "name": "60998",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60998"
        },
        {
          "name": "59270",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59270"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT6443"
        },
        {
          "name": "openSUSE-SU-2014:0841",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-06/msg00051.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1108447"
        },
        {
          "name": "DSA-2961",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2961"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "name": "SSRT101681",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/php/php-src/commit/b34d7849ed90ced9345f8ea1c59bc8d101c18468"
        },
        {
          "name": "[oss-security] 20140613 Re: CVE request: PHP heap-based buffer overflow in DNS TXT record parsing",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/06/13/4"
        },
        {
          "name": "openSUSE-SU-2014:0942",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-07/msg00032.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-4049",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS TXT record, related to the dns_get_record function."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "59329",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59329"
            },
            {
              "name": "SUSE-SU-2014:0868",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00001.html"
            },
            {
              "name": "59418",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59418"
            },
            {
              "name": "https://support.apple.com/HT204659",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT204659"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
            },
            {
              "name": "59496",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59496"
            },
            {
              "name": "1030435",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1030435"
            },
            {
              "name": "RHSA-2014:1766",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
            },
            {
              "name": "59652",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59652"
            },
            {
              "name": "68007",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/68007"
            },
            {
              "name": "59513",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59513"
            },
            {
              "name": "HPSBUX03102",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
            },
            {
              "name": "SUSE-SU-2014:0869",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
            },
            {
              "name": "60998",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60998"
            },
            {
              "name": "59270",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59270"
            },
            {
              "name": "APPLE-SA-2015-04-08-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
            },
            {
              "name": "http://support.apple.com/kb/HT6443",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT6443"
            },
            {
              "name": "openSUSE-SU-2014:0841",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-06/msg00051.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1108447",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1108447"
            },
            {
              "name": "DSA-2961",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2961"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
            },
            {
              "name": "RHSA-2014:1765",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
            },
            {
              "name": "SSRT101681",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
            },
            {
              "name": "https://github.com/php/php-src/commit/b34d7849ed90ced9345f8ea1c59bc8d101c18468",
              "refsource": "CONFIRM",
              "url": "https://github.com/php/php-src/commit/b34d7849ed90ced9345f8ea1c59bc8d101c18468"
            },
            {
              "name": "[oss-security] 20140613 Re: CVE request: PHP heap-based buffer overflow in DNS TXT record parsing",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2014/06/13/4"
            },
            {
              "name": "openSUSE-SU-2014:0942",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-07/msg00032.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-4049",
    "datePublished": "2014-06-18T19:00:00.000Z",
    "dateReserved": "2014-06-12T00:00:00.000Z",
    "dateUpdated": "2024-08-06T11:04:28.245Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-4721 (GCVE-0-2014-4721)

Vulnerability from cvelistv5 – Published: 2014-07-06 23:00 – Updated: 2024-08-06 11:27

Summary

The phpinfo implementation in ext/standard/info.c in PHP before 5.4.30 and 5.5.x before 5.5.14 does not ensure use of the string data type for the PHP_AUTH_PW, PHP_AUTH_TYPE, PHP_AUTH_USER, and PHP_SELF variables, which might allow context-dependent attackers to obtain sensitive information from process memory by using the integer data type with crafted values, related to a "type confusion" vulnerability, as demonstrated by reading a private SSL key in an Apache HTTP Server web-hosting environment with mod_ssl and a PHP 5.3.x mod_php.

Severity

No CVSS data available.

CWE

Assigner

debian mitre root

References

14 references

URL	Tags
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
http://secunia.com/advisories/54553	third-party-advisoryx_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2014/dsa-2974	vendor-advisoryx_refsource_DEBIAN
https://www.sektioneins.de/en/blog/14-07-04-phpin…	x_refsource_MISC
http://secunia.com/advisories/59794	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE
https://bugs.php.net/bug.php?id=67498	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
http://twitter.com/mikispag/statuses/485713462258302976	x_refsource_MISC
http://secunia.com/advisories/59831	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE

Date Public

2014-06-26 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T11:27:36.809Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
          },
          {
            "name": "54553",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54553"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "name": "DSA-2974",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2974"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.sektioneins.de/en/blog/14-07-04-phpinfo-infoleak.html"
          },
          {
            "name": "59794",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59794"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "openSUSE-SU-2014:0945",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-07/msg00035.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=67498"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://twitter.com/mikispag/statuses/485713462258302976"
          },
          {
            "name": "59831",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59831"
          },
          {
            "name": "openSUSE-SU-2014:1236",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The phpinfo implementation in ext/standard/info.c in PHP before 5.4.30 and 5.5.x before 5.5.14 does not ensure use of the string data type for the PHP_AUTH_PW, PHP_AUTH_TYPE, PHP_AUTH_USER, and PHP_SELF variables, which might allow context-dependent attackers to obtain sensitive information from process memory by using the integer data type with crafted values, related to a \"type confusion\" vulnerability, as demonstrated by reading a private SSL key in an Apache HTTP Server web-hosting environment with mod_ssl and a PHP 5.3.x mod_php."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-01-04T20:57:01.000Z",
        "orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
        "shortName": "debian"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
        },
        {
          "name": "54553",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54553"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "name": "DSA-2974",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2974"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.sektioneins.de/en/blog/14-07-04-phpinfo-infoleak.html"
        },
        {
          "name": "59794",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59794"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "openSUSE-SU-2014:0945",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-07/msg00035.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=67498"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://twitter.com/mikispag/statuses/485713462258302976"
        },
        {
          "name": "59831",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59831"
        },
        {
          "name": "openSUSE-SU-2014:1236",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@debian.org",
          "ID": "CVE-2014-4721",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The phpinfo implementation in ext/standard/info.c in PHP before 5.4.30 and 5.5.x before 5.5.14 does not ensure use of the string data type for the PHP_AUTH_PW, PHP_AUTH_TYPE, PHP_AUTH_USER, and PHP_SELF variables, which might allow context-dependent attackers to obtain sensitive information from process memory by using the integer data type with crafted values, related to a \"type confusion\" vulnerability, as demonstrated by reading a private SSL key in an Apache HTTP Server web-hosting environment with mod_ssl and a PHP 5.3.x mod_php."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
            },
            {
              "name": "54553",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54553"
            },
            {
              "name": "RHSA-2014:1766",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
            },
            {
              "name": "DSA-2974",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2974"
            },
            {
              "name": "https://www.sektioneins.de/en/blog/14-07-04-phpinfo-infoleak.html",
              "refsource": "MISC",
              "url": "https://www.sektioneins.de/en/blog/14-07-04-phpinfo-infoleak.html"
            },
            {
              "name": "59794",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59794"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php"
            },
            {
              "name": "openSUSE-SU-2014:0945",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-07/msg00035.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=67498",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=67498"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
            },
            {
              "name": "RHSA-2014:1765",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
            },
            {
              "name": "http://twitter.com/mikispag/statuses/485713462258302976",
              "refsource": "MISC",
              "url": "http://twitter.com/mikispag/statuses/485713462258302976"
            },
            {
              "name": "59831",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59831"
            },
            {
              "name": "openSUSE-SU-2014:1236",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
    "assignerShortName": "debian",
    "cveId": "CVE-2014-4721",
    "datePublished": "2014-07-06T23:00:00.000Z",
    "dateReserved": "2014-07-06T00:00:00.000Z",
    "dateUpdated": "2024-08-06T11:27:36.809Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2014_1013

CVE-2013-7345 (GCVE-0-2013-7345)

CVE-2014-0207 (GCVE-0-2014-0207)

CVE-2014-0237 (GCVE-0-2014-0237)

CVE-2014-0238 (GCVE-0-2014-0238)

CVE-2014-3479 (GCVE-0-2014-3479)

CVE-2014-3480 (GCVE-0-2014-3480)

CVE-2014-3487 (GCVE-0-2014-3487)

CVE-2014-3515 (GCVE-0-2014-3515)

CVE-2014-4049 (GCVE-0-2014-4049)

CVE-2014-4721 (GCVE-0-2014-4721)

Tags

Sightings

Nomenclature

Related by attack behaviour