Vulnerability-Lookup

RHSA-2015_1218

Vulnerability from csaf_redhat - Published: 2015-07-09 17:01 - Updated: 2024-11-22 09:05

Summary

Red Hat Security Advisory: php security update

Severity

Moderate

Notes

Topic: Updated php packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. A flaw was found in the way PHP parsed multipart HTTP POST requests. A specially crafted request could cause PHP to use an excessive amount of CPU time. (CVE-2015-4024) An uninitialized pointer use flaw was found in PHP's Exif extension. A specially crafted JPEG or TIFF file could cause a PHP application using the exif_read_data() function to crash or, possibly, execute arbitrary code with the privileges of the user running that PHP application. (CVE-2015-0232) An integer overflow flaw leading to a heap-based buffer overflow was found in the way PHP's FTP extension parsed file listing FTP server responses. A malicious FTP server could use this flaw to cause a PHP application to crash or, possibly, execute arbitrary code. (CVE-2015-4022) Multiple flaws were discovered in the way PHP performed object unserialization. Specially crafted input processed by the unserialize() function could cause a PHP application to crash or, possibly, execute arbitrary code. (CVE-2015-0273, CVE-2015-2787, CVE-2015-4147, CVE-2015-4148, CVE-2015-4599, CVE-2015-4600, CVE-2015-4601, CVE-2015-4602, CVE-2015-4603) It was found that certain PHP functions did not properly handle file names containing a NULL character. A remote attacker could possibly use this flaw to make a PHP script access unexpected files and bypass intended file system access restrictions. (CVE-2015-4026, CVE-2015-3411, CVE-2015-3412, CVE-2015-4598) Multiple flaws were found in the way the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened. (CVE-2015-2301, CVE-2015-2783, CVE-2015-3307, CVE-2015-3329, CVE-2015-4021) A heap buffer overflow flaw was found in the enchant_broker_request_dict() function of PHP's enchant extension. An attacker able to make a PHP application enchant dictionaries could possibly cause it to crash. (CVE-2014-9705) A buffer over-read flaw was found in the GD library used by the PHP gd extension. A specially crafted GIF file could cause a PHP application using the imagecreatefromgif() function to crash. (CVE-2014-9709) A double free flaw was found in zend_ts_hash_graceful_destroy() function in the PHP ZTS module. This flaw could possibly cause a PHP application to crash. (CVE-2014-9425) All php users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the updated packages, the httpd daemon must be restarted for the update to take effect.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2014-9425

A double free flaw was found in zend_ts_hash_graceful_destroy() function in the PHP ZTS module. This flaw could possibly cause a PHP application to crash.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-416 - Use After Free

Affected products

Fixed 791 products

Product	Version	Remediation
Unresolved product id: 6Client-optional-6.6.z:php-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-0:5.3.3-46.el6_6.src	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-bcmath-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-bcmath-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-bcmath-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-bcmath-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-cli-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-cli-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-cli-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-cli-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-common-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-common-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-common-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-common-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-dba-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-dba-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-dba-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-dba-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-devel-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-devel-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-devel-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-devel-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-embedded-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-embedded-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-embedded-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-embedded-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-enchant-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-enchant-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-enchant-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-enchant-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-fpm-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-fpm-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-fpm-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-fpm-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-gd-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-gd-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-gd-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-gd-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-imap-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-imap-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-imap-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-imap-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-intl-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-intl-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-intl-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-intl-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-ldap-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-ldap-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-ldap-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-ldap-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-mbstring-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-mbstring-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-mbstring-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-mbstring-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-mysql-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-mysql-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-mysql-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-mysql-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-odbc-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-odbc-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-odbc-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-odbc-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-pdo-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-pdo-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-pdo-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-pdo-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-pgsql-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-pgsql-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-pgsql-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-pgsql-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-process-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-process-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-process-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-process-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-pspell-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-pspell-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-pspell-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-pspell-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-recode-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-recode-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-recode-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-recode-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-snmp-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-snmp-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-snmp-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-snmp-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-soap-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-soap-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-soap-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-soap-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-tidy-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-tidy-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-tidy-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-tidy-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-xml-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-xml-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-xml-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-xml-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-zts-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-zts-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-zts-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:php-zts-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-0:5.3.3-46.el6_6.src	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-bcmath-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-bcmath-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-bcmath-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-bcmath-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-cli-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-cli-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-cli-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-cli-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-common-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-common-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-common-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-common-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-dba-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-dba-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-dba-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-dba-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-devel-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-devel-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-devel-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-devel-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-embedded-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-embedded-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-embedded-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-embedded-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-enchant-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-enchant-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-enchant-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-enchant-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-fpm-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-fpm-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-fpm-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-fpm-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-gd-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-gd-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-gd-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-gd-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-imap-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-imap-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-imap-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-imap-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-intl-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-intl-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-intl-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-intl-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-ldap-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-ldap-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-ldap-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-ldap-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-mbstring-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-mbstring-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-mbstring-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-mbstring-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-mysql-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-mysql-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-mysql-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-mysql-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-odbc-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-odbc-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-odbc-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-odbc-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-pdo-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-pdo-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-pdo-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-pdo-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-pgsql-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-pgsql-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-pgsql-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-pgsql-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-process-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-process-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-process-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-process-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-pspell-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-pspell-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-pspell-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-pspell-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-recode-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-recode-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-recode-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-recode-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-snmp-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-snmp-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-snmp-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-snmp-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-soap-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-soap-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-soap-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-soap-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-tidy-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-tidy-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-tidy-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-tidy-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-xml-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-xml-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-xml-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-xml-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-zts-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-zts-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-zts-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:php-zts-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-0:5.3.3-46.el6_6.src	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-bcmath-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-bcmath-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-bcmath-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-bcmath-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-cli-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-cli-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-cli-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-cli-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-common-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-common-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-common-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-common-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-dba-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-dba-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-dba-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-dba-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-devel-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-devel-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-devel-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-devel-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-embedded-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-embedded-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-embedded-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-embedded-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-enchant-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-enchant-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-enchant-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-enchant-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-fpm-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-fpm-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-fpm-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-fpm-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-gd-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-gd-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-gd-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-gd-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-imap-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-imap-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-imap-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-imap-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-intl-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-intl-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-intl-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-intl-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-ldap-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-ldap-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-ldap-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-ldap-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-mbstring-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-mbstring-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-mbstring-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-mbstring-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-mysql-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-mysql-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-mysql-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-mysql-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-odbc-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-odbc-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-odbc-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-odbc-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-pdo-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-pdo-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-pdo-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-pdo-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-pgsql-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-pgsql-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-pgsql-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-pgsql-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-process-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-process-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-process-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-process-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-pspell-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-pspell-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-pspell-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-pspell-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-recode-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-recode-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-recode-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-recode-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-snmp-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-snmp-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-snmp-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-snmp-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-soap-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-soap-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-soap-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-soap-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-tidy-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-tidy-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-tidy-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-tidy-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-xml-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-xml-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-xml-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-xml-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-zts-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-zts-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-zts-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:php-zts-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-0:5.3.3-46.el6_6.src	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-bcmath-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-bcmath-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-bcmath-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-bcmath-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-cli-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-cli-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-cli-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-cli-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-common-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-common-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-common-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-common-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-dba-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-dba-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-dba-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-dba-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-devel-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-devel-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-devel-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-devel-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-embedded-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-embedded-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-embedded-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-embedded-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-enchant-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-enchant-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-enchant-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-enchant-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-fpm-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-fpm-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-fpm-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-fpm-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-gd-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-gd-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-gd-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-gd-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-imap-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-imap-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-imap-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-imap-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-intl-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-intl-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-intl-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-intl-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-ldap-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-ldap-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-ldap-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-ldap-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-mbstring-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-mbstring-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-mbstring-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-mbstring-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-mysql-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-mysql-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-mysql-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-mysql-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-odbc-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-odbc-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-odbc-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-odbc-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-pdo-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-pdo-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-pdo-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-pdo-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-pgsql-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-pgsql-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-pgsql-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-pgsql-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-process-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-process-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-process-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-process-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-pspell-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-pspell-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-pspell-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-pspell-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-recode-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-recode-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-recode-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-recode-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-snmp-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-snmp-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-snmp-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-snmp-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-soap-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-soap-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-soap-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-soap-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-tidy-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-tidy-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-tidy-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-tidy-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-xml-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-xml-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-xml-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-xml-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-zts-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-zts-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-zts-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:php-zts-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-0:5.3.3-46.el6_6.src	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-bcmath-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-bcmath-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-bcmath-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-bcmath-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-cli-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-cli-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-cli-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-cli-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-common-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-common-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-common-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-common-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-dba-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-dba-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-dba-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-dba-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-devel-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-devel-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-devel-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-devel-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-embedded-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-embedded-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-embedded-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-embedded-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-enchant-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-enchant-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-enchant-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-enchant-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-fpm-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-fpm-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-fpm-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-fpm-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-gd-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-gd-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-gd-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-gd-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-imap-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-imap-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-imap-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-imap-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-intl-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-intl-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-intl-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-intl-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-ldap-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-ldap-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-ldap-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-ldap-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-mbstring-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-mbstring-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-mbstring-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-mbstring-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-mysql-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-mysql-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-mysql-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-mysql-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-odbc-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-odbc-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-odbc-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-odbc-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-pdo-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-pdo-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-pdo-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-pdo-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-pgsql-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-pgsql-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-pgsql-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-pgsql-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-process-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-process-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-process-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-process-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-pspell-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-pspell-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-pspell-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-pspell-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-recode-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-recode-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-recode-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-recode-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-snmp-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-snmp-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-snmp-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-snmp-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-soap-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-soap-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-soap-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-soap-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-tidy-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-tidy-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-tidy-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-tidy-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-xml-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-xml-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-xml-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-xml-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-zts-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-zts-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-zts-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:php-zts-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-0:5.3.3-46.el6_6.src	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-bcmath-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-bcmath-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-bcmath-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-bcmath-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-cli-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-cli-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-cli-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-cli-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-common-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-common-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-common-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-common-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-dba-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-dba-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-dba-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-dba-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-devel-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-devel-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-devel-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-devel-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-embedded-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-embedded-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-embedded-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-embedded-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-enchant-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-enchant-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-enchant-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-enchant-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-fpm-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-fpm-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-fpm-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-fpm-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-gd-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-gd-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-gd-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-gd-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-imap-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-imap-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-imap-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-imap-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-intl-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-intl-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-intl-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-intl-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-ldap-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-ldap-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-ldap-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-ldap-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-mbstring-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-mbstring-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-mbstring-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-mbstring-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-mysql-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-mysql-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-mysql-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-mysql-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-odbc-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-odbc-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-odbc-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-odbc-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-pdo-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-pdo-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-pdo-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-pdo-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-pgsql-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-pgsql-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-pgsql-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-pgsql-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-process-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-process-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-process-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-process-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-pspell-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-pspell-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-pspell-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-pspell-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-recode-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-recode-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-recode-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-recode-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-snmp-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-snmp-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-snmp-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-snmp-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-soap-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-soap-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-soap-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-soap-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-tidy-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-tidy-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-tidy-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-tidy-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-xml-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-xml-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-xml-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-xml-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-zts-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-zts-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-zts-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:php-zts-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-0:5.3.3-46.el6_6.src	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-bcmath-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-bcmath-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-bcmath-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-bcmath-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-cli-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-cli-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-cli-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-cli-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-common-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-common-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-common-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-common-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-dba-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-dba-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-dba-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-dba-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-debuginfo-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-devel-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-devel-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-devel-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-devel-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-embedded-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-embedded-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-embedded-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-embedded-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-enchant-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-enchant-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-enchant-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-enchant-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-fpm-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-fpm-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-fpm-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-fpm-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-gd-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-gd-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-gd-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-gd-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-imap-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-imap-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-imap-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-imap-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-intl-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-intl-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-intl-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-intl-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-ldap-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-ldap-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-ldap-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-ldap-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-mbstring-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-mbstring-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-mbstring-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-mbstring-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-mysql-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-mysql-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-mysql-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-mysql-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-odbc-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-odbc-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-odbc-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-odbc-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-pdo-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-pdo-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-pdo-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-pdo-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-pgsql-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-pgsql-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-pgsql-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-pgsql-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-process-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-process-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-process-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-process-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-pspell-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-pspell-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-pspell-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-pspell-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-recode-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-recode-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-recode-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-recode-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-snmp-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-snmp-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-snmp-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-snmp-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-soap-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-soap-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-soap-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-soap-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-tidy-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-tidy-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-tidy-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-tidy-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-xml-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-xml-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-xml-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-xml-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-xmlrpc-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-zts-0:5.3.3-46.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-zts-0:5.3.3-46.el6_6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-zts-0:5.3.3-46.el6_6.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:php-zts-0:5.3.3-46.el6_6.x86_64	—	Vendor Fix fix

Threats

Impact Low

CVE-2014-9705

A heap buffer overflow flaw was found in the enchant_broker_request_dict() function of PHP's enchant extension. A specially crafted tag input could possibly cause a PHP application to crash.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 791 products, the same list as for CVE-2014-9425

Threats

Impact Moderate

CVE-2014-9709

A buffer over-read flaw was found in the GD library. A specially crafted GIF file could cause an application using the gdImageCreateFromGif() function to crash.

4.0 ()


                
                  AV:N/AC:H/Au:N/C:P/I:N/A:P

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 791 products, the same list as for CVE-2014-9425

Threats

Impact Low

CVE-2015-0232

An uninitialized pointer use flaw was found in PHP's Exif extension. A specially crafted JPEG or TIFF file could cause a PHP application using the exif_read_data() function to crash or, possibly, execute arbitrary code with the privileges of the user running that PHP application.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

CWE-822 - Untrusted Pointer Dereference

Affected products

Fixed 791 products, the same list as for CVE-2014-9425

Threats

Impact Moderate

CVE-2015-0273

A use-after-free flaw was found in the unserialize() function of PHP's DateTimeZone implementation. A malicious script author could possibly use this flaw to disclose certain portions of server memory.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

CWE-416 - Use After Free

Affected products

Fixed 791 products, the same list as for CVE-2014-9425

Threats

Impact Moderate

CVE-2015-2301

A use-after-free flaw was found in PHP's phar (PHP Archive) paths implementation. A malicious script author could possibly use this flaw to disclose certain portions of server memory.

2.6 ()


                
                  AV:N/AC:H/Au:N/C:P/I:N/A:N

CWE-416 - Use After Free

Affected products

Fixed 791 products, the same list as for CVE-2014-9425

Threats

Impact Low

CVE-2015-2783

A buffer over-read flaw was found in PHP's phar (PHP Archive) paths implementation. A malicious script author could possibly use this flaw to disclose certain portions of server memory.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Fixed 791 products, the same list as for CVE-2014-9425

Threats

Impact Low

CVE-2015-2787

A flaws was discovered in the way PHP performed object unserialization. Specially crafted input processed by the unserialize() function could cause a PHP application to crash or, possibly, execute arbitrary code.

4.0 ()


                
                  AV:N/AC:H/Au:N/C:P/I:N/A:P

CWE-416 - Use After Free

Affected products

Fixed 791 products, the same list as for CVE-2014-9425

Threats

Impact Moderate

CVE-2015-3307

An invalid free flaw was found in the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected products

Fixed 791 products, the same list as for CVE-2014-9425

Threats

Impact Moderate

CVE-2015-3329

A buffer overflow flaw was found in the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

CWE-121 - Stack-based Buffer Overflow

Affected products

Fixed 791 products, the same list as for CVE-2014-9425

Threats

Impact Moderate

CVE-2015-3411

It was found that certain PHP functions did not properly handle file names containing a NULL character. A remote attacker could possibly use this flaw to make a PHP script access unexpected files and bypass intended file system access restrictions.

4.0 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:N

CWE-626 - Null Byte Interaction Error (Poison Null Byte)

Affected products

Fixed 791 products, the same list as for CVE-2014-9425

Threats

Impact Moderate

CVE-2015-3412

4.0 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:N

CWE-626 - Null Byte Interaction Error (Poison Null Byte)

Affected products

Fixed 791 products, the same list as for CVE-2014-9425

Threats

Impact Moderate

CVE-2015-4021

An integer underflow flaw leading to out-of-bounds memory access was found in the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

CWE-787 - Out-of-bounds Write

Affected products

Fixed 791 products, the same list as for CVE-2014-9425

Threats

Impact Moderate

CVE-2015-4022

An integer overflow flaw leading to a heap-based buffer overflow was found in the way PHP's FTP extension parsed file listing FTP server responses. A malicious FTP server could use this flaw to cause a PHP application to crash or, possibly, execute arbitrary code.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 791 products, the same list as for CVE-2014-9425

Threats

Impact Moderate

CVE-2015-4024

A flaw was found in the way PHP parsed multipart HTTP POST requests. A specially crafted request could cause PHP to use an excessive amount of CPU time.

5.0 ()


                
                  AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-407 - Inefficient Algorithmic Complexity

Affected products

Fixed 791 products, the same list as for CVE-2014-9425

Threats

Impact Moderate

CVE-2015-4026

4.0 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:N

CWE-626 - Null Byte Interaction Error (Poison Null Byte)

Affected products

Fixed 791 products, the same list as for CVE-2014-9425

Threats

Impact Low

CVE-2015-4147

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 791 products, the same list as for CVE-2014-9425

Threats

Impact Moderate

CVE-2015-4148

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 791 products, the same list as for CVE-2014-9425

Threats

Impact Low

CVE-2015-4598

4.0 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:N

CWE-626 - Null Byte Interaction Error (Poison Null Byte)

Affected products

Fixed 791 products, the same list as for CVE-2014-9425

Threats

Impact Moderate

CVE-2015-4599

Multiple flaws were discovered in the way PHP's Soap extension performed object unserialization. Specially crafted input processed by the unserialize() function could cause a PHP application to disclose portion of its memory or crash.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 791 products, the same list as for CVE-2014-9425

Threats

Impact Moderate

CVE-2015-4600

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 791 products, the same list as for CVE-2014-9425

Threats

Impact Moderate

CVE-2015-4601

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 791 products, the same list as for CVE-2014-9425

Threats

Impact Moderate

CVE-2015-4602

A flaw was discovered in the way PHP performed object unserialization. Specially crafted input processed by the unserialize() function could cause a PHP application to crash or, possibly, execute arbitrary code.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 791 products, the same list as for CVE-2014-9425

Threats

Impact Moderate

CVE-2015-4603

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 791 products, the same list as for CVE-2014-9425

Threats

Impact Moderate

CVE-2015-4643

Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-4022.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 791 products, the same list as for CVE-2014-9425

Threats

Impact Moderate

References

123 references

URL	Category
https://access.redhat.com/errata/RHSA-2015:1218	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1177734	external
https://bugzilla.redhat.com/show_bug.cgi?id=1185472	external
https://bugzilla.redhat.com/show_bug.cgi?id=1188639	external
https://bugzilla.redhat.com/show_bug.cgi?id=1194730	external
https://bugzilla.redhat.com/show_bug.cgi?id=1194737	external
https://bugzilla.redhat.com/show_bug.cgi?id=1194747	external
https://bugzilla.redhat.com/show_bug.cgi?id=1204868	external
https://bugzilla.redhat.com/show_bug.cgi?id=1207676	external
https://bugzilla.redhat.com/show_bug.cgi?id=1213407	external
https://bugzilla.redhat.com/show_bug.cgi?id=1213446	external
https://bugzilla.redhat.com/show_bug.cgi?id=1213449	external
https://bugzilla.redhat.com/show_bug.cgi?id=1222485	external
https://bugzilla.redhat.com/show_bug.cgi?id=1222538	external
https://bugzilla.redhat.com/show_bug.cgi?id=1223412	external
https://bugzilla.redhat.com/show_bug.cgi?id=1223422	external
https://bugzilla.redhat.com/show_bug.cgi?id=1223425	external
https://bugzilla.redhat.com/show_bug.cgi?id=1223441	external
https://bugzilla.redhat.com/show_bug.cgi?id=1226916	external
https://bugzilla.redhat.com/show_bug.cgi?id=1232823	external
https://bugzilla.redhat.com/show_bug.cgi?id=1232897	external
https://bugzilla.redhat.com/show_bug.cgi?id=1232918	external
https://bugzilla.redhat.com/show_bug.cgi?id=1232923	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2014-9425	self
https://bugzilla.redhat.com/show_bug.cgi?id=1177734	external
https://www.cve.org/CVERecord?id=CVE-2014-9425	external
https://nvd.nist.gov/vuln/detail/CVE-2014-9425	external
https://access.redhat.com/security/cve/CVE-2014-9705	self
https://bugzilla.redhat.com/show_bug.cgi?id=1194737	external
https://www.cve.org/CVERecord?id=CVE-2014-9705	external
https://nvd.nist.gov/vuln/detail/CVE-2014-9705	external
https://access.redhat.com/security/cve/CVE-2014-9709	self
https://bugzilla.redhat.com/show_bug.cgi?id=1188639	external
https://www.cve.org/CVERecord?id=CVE-2014-9709	external
https://nvd.nist.gov/vuln/detail/CVE-2014-9709	external
https://access.redhat.com/security/cve/CVE-2015-0232	self
https://bugzilla.redhat.com/show_bug.cgi?id=1185472	external
https://www.cve.org/CVERecord?id=CVE-2015-0232	external
https://nvd.nist.gov/vuln/detail/CVE-2015-0232	external
https://access.redhat.com/security/cve/CVE-2015-0273	self
https://bugzilla.redhat.com/show_bug.cgi?id=1194730	external
https://www.cve.org/CVERecord?id=CVE-2015-0273	external
https://nvd.nist.gov/vuln/detail/CVE-2015-0273	external
https://access.redhat.com/security/cve/CVE-2015-2301	self
https://bugzilla.redhat.com/show_bug.cgi?id=1194747	external
https://www.cve.org/CVERecord?id=CVE-2015-2301	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2301	external
https://access.redhat.com/security/cve/CVE-2015-2783	self
https://bugzilla.redhat.com/show_bug.cgi?id=1213446	external
https://www.cve.org/CVERecord?id=CVE-2015-2783	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2783	external
https://access.redhat.com/security/cve/CVE-2015-2787	self
https://bugzilla.redhat.com/show_bug.cgi?id=1207676	external
https://www.cve.org/CVERecord?id=CVE-2015-2787	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2787	external
https://access.redhat.com/security/cve/CVE-2015-3307	self
https://bugzilla.redhat.com/show_bug.cgi?id=1223441	external
https://www.cve.org/CVERecord?id=CVE-2015-3307	external
https://nvd.nist.gov/vuln/detail/CVE-2015-3307	external
https://access.redhat.com/security/cve/CVE-2015-3329	self
https://bugzilla.redhat.com/show_bug.cgi?id=1213449	external
https://www.cve.org/CVERecord?id=CVE-2015-3329	external
https://nvd.nist.gov/vuln/detail/CVE-2015-3329	external
https://access.redhat.com/security/cve/CVE-2015-3411	self
https://bugzilla.redhat.com/show_bug.cgi?id=1213407	external
https://www.cve.org/CVERecord?id=CVE-2015-3411	external
https://nvd.nist.gov/vuln/detail/CVE-2015-3411	external
https://access.redhat.com/security/cve/CVE-2015-3412	self
https://bugzilla.redhat.com/show_bug.cgi?id=1232823	external
https://www.cve.org/CVERecord?id=CVE-2015-3412	external
https://nvd.nist.gov/vuln/detail/CVE-2015-3412	external
https://access.redhat.com/security/cve/CVE-2015-4021	self
https://bugzilla.redhat.com/show_bug.cgi?id=1223425	external
https://www.cve.org/CVERecord?id=CVE-2015-4021	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4021	external
https://access.redhat.com/security/cve/CVE-2015-4022	self
https://bugzilla.redhat.com/show_bug.cgi?id=1223412	external
https://www.cve.org/CVERecord?id=CVE-2015-4022	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4022	external
https://access.redhat.com/security/cve/CVE-2015-4024	self
https://bugzilla.redhat.com/show_bug.cgi?id=1222485	external
https://www.cve.org/CVERecord?id=CVE-2015-4024	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4024	external
https://access.redhat.com/security/cve/CVE-2015-4026	self
https://bugzilla.redhat.com/show_bug.cgi?id=1223422	external
https://www.cve.org/CVERecord?id=CVE-2015-4026	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4026	external
https://access.redhat.com/security/cve/CVE-2015-4147	self
https://bugzilla.redhat.com/show_bug.cgi?id=1204868	external
https://www.cve.org/CVERecord?id=CVE-2015-4147	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4147	external
https://access.redhat.com/security/cve/CVE-2015-4148	self
https://bugzilla.redhat.com/show_bug.cgi?id=1226916	external
https://www.cve.org/CVERecord?id=CVE-2015-4148	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4148	external
https://access.redhat.com/security/cve/CVE-2015-4598	self
https://bugzilla.redhat.com/show_bug.cgi?id=1232897	external
https://www.cve.org/CVERecord?id=CVE-2015-4598	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4598	external
https://access.redhat.com/security/cve/CVE-2015-4599	self
https://bugzilla.redhat.com/show_bug.cgi?id=1222538	external
https://www.cve.org/CVERecord?id=CVE-2015-4599	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4599	external
https://access.redhat.com/security/cve/CVE-2015-4600	self
https://www.cve.org/CVERecord?id=CVE-2015-4600	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4600	external
https://access.redhat.com/security/cve/CVE-2015-4601	self
https://www.cve.org/CVERecord?id=CVE-2015-4601	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4601	external
https://access.redhat.com/security/cve/CVE-2015-4602	self
https://bugzilla.redhat.com/show_bug.cgi?id=1232923	external
https://www.cve.org/CVERecord?id=CVE-2015-4602	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4602	external
https://access.redhat.com/security/cve/CVE-2015-4603	self
https://bugzilla.redhat.com/show_bug.cgi?id=1232918	external
https://www.cve.org/CVERecord?id=CVE-2015-4603	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4603	external
https://access.redhat.com/security/cve/CVE-2015-4643	self
https://bugzilla.redhat.com/show_bug.cgi?id=1234938	external
https://www.cve.org/CVERecord?id=CVE-2015-4643	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4643	external

JSON

To clipboard

Loading 4.4 MB of JSON…

CVE-2014-9425 (GCVE-0-2014-9425)

Vulnerability from cvelistv5 – Published: 2014-12-31 02:00 – Updated: 2024-08-06 13:47

Summary

Double free vulnerability in the zend_ts_hash_graceful_destroy function in zend_ts_hash.c in the Zend Engine in PHP through 5.5.20 and 5.6.x through 5.6.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

12 references

URL	Tags
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=…	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/71800	vdb-entryx_refsource_BID
https://support.apple.com/HT205267	x_refsource_CONFIRM
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=…	x_refsource_CONFIRM
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=…	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201503-03	vendor-advisoryx_refsource_GENTOO
http://openwall.com/lists/oss-security/2014/12/29/6	mailing-listx_refsource_MLIST
http://advisories.mageia.org/MGASA-2015-0040.html	x_refsource_CONFIRM
https://bugs.php.net/bug.php?id=68676	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1218.html	vendor-advisoryx_refsource_REDHAT

Date Public

2014-12-29 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:47:40.973Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=fbf3a6bc1abcc8a5b5226b0ad9464c37f11ddbd6"
          },
          {
            "name": "APPLE-SA-2015-09-30-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
          },
          {
            "name": "71800",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/71800"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT205267"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=24125f0f26f3787c006e4a51611ba33ee3b841cb"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2bcf69d073190e4f032d883f3416dea1b027a39e"
          },
          {
            "name": "GLSA-201503-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201503-03"
          },
          {
            "name": "[oss-security] 20141229 Re: CVE Request: Double Free in PHP",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2014/12/29/6"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=68676"
          },
          {
            "name": "RHSA-2015:1218",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-12-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Double free vulnerability in the zend_ts_hash_graceful_destroy function in zend_ts_hash.c in the Zend Engine in PHP through 5.5.20 and 5.6.x through 5.6.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=fbf3a6bc1abcc8a5b5226b0ad9464c37f11ddbd6"
        },
        {
          "name": "APPLE-SA-2015-09-30-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
        },
        {
          "name": "71800",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/71800"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT205267"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=24125f0f26f3787c006e4a51611ba33ee3b841cb"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2bcf69d073190e4f032d883f3416dea1b027a39e"
        },
        {
          "name": "GLSA-201503-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201503-03"
        },
        {
          "name": "[oss-security] 20141229 Re: CVE Request: Double Free in PHP",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2014/12/29/6"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=68676"
        },
        {
          "name": "RHSA-2015:1218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-9425",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Double free vulnerability in the zend_ts_hash_graceful_destroy function in zend_ts_hash.c in the Zend Engine in PHP through 5.5.20 and 5.6.x through 5.6.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://git.php.net/?p=php-src.git;a=commit;h=fbf3a6bc1abcc8a5b5226b0ad9464c37f11ddbd6",
              "refsource": "CONFIRM",
              "url": "http://git.php.net/?p=php-src.git;a=commit;h=fbf3a6bc1abcc8a5b5226b0ad9464c37f11ddbd6"
            },
            {
              "name": "APPLE-SA-2015-09-30-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
            },
            {
              "name": "71800",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/71800"
            },
            {
              "name": "https://support.apple.com/HT205267",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT205267"
            },
            {
              "name": "http://git.php.net/?p=php-src.git;a=commit;h=24125f0f26f3787c006e4a51611ba33ee3b841cb",
              "refsource": "CONFIRM",
              "url": "http://git.php.net/?p=php-src.git;a=commit;h=24125f0f26f3787c006e4a51611ba33ee3b841cb"
            },
            {
              "name": "http://git.php.net/?p=php-src.git;a=commit;h=2bcf69d073190e4f032d883f3416dea1b027a39e",
              "refsource": "CONFIRM",
              "url": "http://git.php.net/?p=php-src.git;a=commit;h=2bcf69d073190e4f032d883f3416dea1b027a39e"
            },
            {
              "name": "GLSA-201503-03",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201503-03"
            },
            {
              "name": "[oss-security] 20141229 Re: CVE Request: Double Free in PHP",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2014/12/29/6"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2015-0040.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=68676",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=68676"
            },
            {
              "name": "RHSA-2015:1218",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-9425",
    "datePublished": "2014-12-31T02:00:00.000Z",
    "dateReserved": "2014-12-29T00:00:00.000Z",
    "dateUpdated": "2024-08-06T13:47:40.973Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-9705 (GCVE-0-2014-9705)

Vulnerability from cvelistv5 – Published: 2015-03-30 10:00 – Updated: 2024-08-06 13:55

Summary

Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allows remote attackers to execute arbitrary code via vectors that trigger creation of multiple dictionaries.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

23 references

URL	Tags
http://www.debian.org/security/2015/dsa-3195	vendor-advisoryx_refsource_DEBIAN
http://www.ubuntu.com/usn/USN-2535-1	vendor-advisoryx_refsource_UBUNTU
http://marc.info/?l=bugtraq&m=144050155601375&w=2	vendor-advisoryx_refsource_HP
https://bugs.php.net/bug.php?id=68552	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2015-0…	vendor-advisoryx_refsource_SUSE
https://www.htbridge.com/advisory/HTB23252	x_refsource_MISC
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://marc.info/?l=bugtraq&m=143748090628601&w=2	vendor-advisoryx_refsource_HP
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://svn.php.net/viewvc/pecl/enchant/trunk/ench…	x_refsource_CONFIRM
https://support.apple.com/HT205267	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1053.html	vendor-advisoryx_refsource_REDHAT
http://openwall.com/lists/oss-security/2015/03/15/6	mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/73031	vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1031948	vdb-entryx_refsource_SECTRACK
https://security.gentoo.org/glsa/201606-10	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1066.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1218.html	vendor-advisoryx_refsource_REDHAT

Date Public

2014-12-05 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:55:04.750Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3195",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3195"
          },
          {
            "name": "USN-2535-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2535-1"
          },
          {
            "name": "HPSBMU03409",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=68552"
          },
          {
            "name": "openSUSE-SU-2015:0644",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.htbridge.com/advisory/HTB23252"
          },
          {
            "name": "APPLE-SA-2015-09-30-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
          },
          {
            "name": "HPSBMU03380",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "MDVSA-2015:079",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:079"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "name": "SUSE-SU-2015:0868",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.php.net/viewvc/pecl/enchant/trunk/enchant.c?r1=317600\u0026r2=335803"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT205267"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "name": "RHSA-2015:1053",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
          },
          {
            "name": "[oss-security] 20150315 Re: CVE Request: PHP 5.6.6 changelog",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2015/03/15/6"
          },
          {
            "name": "73031",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/73031"
          },
          {
            "name": "1031948",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031948"
          },
          {
            "name": "GLSA-201606-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201606-10"
          },
          {
            "name": "RHSA-2015:1066",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
          },
          {
            "name": "RHSA-2015:1218",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-12-05T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allows remote attackers to execute arbitrary code via vectors that trigger creation of multiple dictionaries."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-3195",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3195"
        },
        {
          "name": "USN-2535-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2535-1"
        },
        {
          "name": "HPSBMU03409",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=68552"
        },
        {
          "name": "openSUSE-SU-2015:0644",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.htbridge.com/advisory/HTB23252"
        },
        {
          "name": "APPLE-SA-2015-09-30-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
        },
        {
          "name": "HPSBMU03380",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "MDVSA-2015:079",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:079"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "name": "SUSE-SU-2015:0868",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.php.net/viewvc/pecl/enchant/trunk/enchant.c?r1=317600\u0026r2=335803"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT205267"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "name": "RHSA-2015:1053",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
        },
        {
          "name": "[oss-security] 20150315 Re: CVE Request: PHP 5.6.6 changelog",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2015/03/15/6"
        },
        {
          "name": "73031",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/73031"
        },
        {
          "name": "1031948",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031948"
        },
        {
          "name": "GLSA-201606-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201606-10"
        },
        {
          "name": "RHSA-2015:1066",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
        },
        {
          "name": "RHSA-2015:1218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-9705",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allows remote attackers to execute arbitrary code via vectors that trigger creation of multiple dictionaries."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3195",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3195"
            },
            {
              "name": "USN-2535-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2535-1"
            },
            {
              "name": "HPSBMU03409",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=68552",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=68552"
            },
            {
              "name": "openSUSE-SU-2015:0644",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html"
            },
            {
              "name": "https://www.htbridge.com/advisory/HTB23252",
              "refsource": "MISC",
              "url": "https://www.htbridge.com/advisory/HTB23252"
            },
            {
              "name": "APPLE-SA-2015-09-30-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
            },
            {
              "name": "HPSBMU03380",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "MDVSA-2015:079",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:079"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "SUSE-SU-2015:0868",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
            },
            {
              "name": "http://svn.php.net/viewvc/pecl/enchant/trunk/enchant.c?r1=317600\u0026r2=335803",
              "refsource": "CONFIRM",
              "url": "http://svn.php.net/viewvc/pecl/enchant/trunk/enchant.c?r1=317600\u0026r2=335803"
            },
            {
              "name": "https://support.apple.com/HT205267",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT205267"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "RHSA-2015:1053",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
            },
            {
              "name": "[oss-security] 20150315 Re: CVE Request: PHP 5.6.6 changelog",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2015/03/15/6"
            },
            {
              "name": "73031",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/73031"
            },
            {
              "name": "1031948",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1031948"
            },
            {
              "name": "GLSA-201606-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201606-10"
            },
            {
              "name": "RHSA-2015:1066",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
            },
            {
              "name": "RHSA-2015:1218",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-9705",
    "datePublished": "2015-03-30T10:00:00.000Z",
    "dateReserved": "2015-03-15T00:00:00.000Z",
    "dateUpdated": "2024-08-06T13:55:04.750Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-9709 (GCVE-0-2014-9709)

Vulnerability from cvelistv5 – Published: 2015-03-30 10:00 – Updated: 2024-08-06 13:55

Summary

The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

23 references

URL	Tags
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
https://bugzilla.redhat.com/show_bug.cgi?id=1188639	x_refsource_CONFIRM
http://www.securitytracker.com/id/1033703	vdb-entryx_refsource_SECTRACK
http://lists.opensuse.org/opensuse-updates/2015-0…	vendor-advisoryx_refsource_SUSE
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
https://bitbucket.org/libgd/gd-libgd/commits/47eb…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=143403519711434&w=2	vendor-advisoryx_refsource_HP
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://www.debian.org/security/2015/dsa-3215	vendor-advisoryx_refsource_DEBIAN
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://support.apple.com/HT205267	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201607-04	vendor-advisoryx_refsource_GENTOO
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2987-1	vendor-advisoryx_refsource_UBUNTU
http://www.securityfocus.com/bid/73306	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
https://bugs.php.net/bug.php?id=68601	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1053.html	vendor-advisoryx_refsource_REDHAT
http://advisories.mageia.org/MGASA-2015-0040.html	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201606-10	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1066.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1218.html	vendor-advisoryx_refsource_REDHAT

Date Public

2014-12-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:55:04.341Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "MDVSA-2015:153",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:153"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1188639"
          },
          {
            "name": "1033703",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1033703"
          },
          {
            "name": "openSUSE-SU-2015:0644",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html"
          },
          {
            "name": "APPLE-SA-2015-09-30-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bitbucket.org/libgd/gd-libgd/commits/47eb44b2e90ca88a08dca9f9a1aa9041e9587f43"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "SSRT102066",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "name": "DSA-3215",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3215"
          },
          {
            "name": "SUSE-SU-2015:0868",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT205267"
          },
          {
            "name": "GLSA-201607-04",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201607-04"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
          },
          {
            "name": "USN-2987-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2987-1"
          },
          {
            "name": "73306",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/73306"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=68601"
          },
          {
            "name": "RHSA-2015:1053",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
          },
          {
            "name": "HPSBUX03337",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
          },
          {
            "name": "GLSA-201606-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201606-10"
          },
          {
            "name": "RHSA-2015:1066",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
          },
          {
            "name": "RHSA-2015:1218",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-12-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "MDVSA-2015:153",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:153"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1188639"
        },
        {
          "name": "1033703",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1033703"
        },
        {
          "name": "openSUSE-SU-2015:0644",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html"
        },
        {
          "name": "APPLE-SA-2015-09-30-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bitbucket.org/libgd/gd-libgd/commits/47eb44b2e90ca88a08dca9f9a1aa9041e9587f43"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "SSRT102066",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "name": "DSA-3215",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3215"
        },
        {
          "name": "SUSE-SU-2015:0868",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT205267"
        },
        {
          "name": "GLSA-201607-04",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201607-04"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
        },
        {
          "name": "USN-2987-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2987-1"
        },
        {
          "name": "73306",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/73306"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=68601"
        },
        {
          "name": "RHSA-2015:1053",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
        },
        {
          "name": "HPSBUX03337",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
        },
        {
          "name": "GLSA-201606-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201606-10"
        },
        {
          "name": "RHSA-2015:1066",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
        },
        {
          "name": "RHSA-2015:1218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-9709",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "MDVSA-2015:153",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:153"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1188639",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1188639"
            },
            {
              "name": "1033703",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1033703"
            },
            {
              "name": "openSUSE-SU-2015:0644",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html"
            },
            {
              "name": "APPLE-SA-2015-09-30-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
            },
            {
              "name": "https://bitbucket.org/libgd/gd-libgd/commits/47eb44b2e90ca88a08dca9f9a1aa9041e9587f43",
              "refsource": "CONFIRM",
              "url": "https://bitbucket.org/libgd/gd-libgd/commits/47eb44b2e90ca88a08dca9f9a1aa9041e9587f43"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "SSRT102066",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "DSA-3215",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3215"
            },
            {
              "name": "SUSE-SU-2015:0868",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
            },
            {
              "name": "https://support.apple.com/HT205267",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT205267"
            },
            {
              "name": "GLSA-201607-04",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201607-04"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
            },
            {
              "name": "USN-2987-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2987-1"
            },
            {
              "name": "73306",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/73306"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=68601",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=68601"
            },
            {
              "name": "RHSA-2015:1053",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
            },
            {
              "name": "HPSBUX03337",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2015-0040.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
            },
            {
              "name": "GLSA-201606-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201606-10"
            },
            {
              "name": "RHSA-2015:1066",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
            },
            {
              "name": "RHSA-2015:1218",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-9709",
    "datePublished": "2015-03-30T10:00:00.000Z",
    "dateReserved": "2015-03-23T00:00:00.000Z",
    "dateUpdated": "2024-08-06T13:55:04.341Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-0232 (GCVE-0-2015-0232)

Vulnerability from cvelistv5 – Published: 2015-01-27 11:00 – Updated: 2024-08-06 04:03

Summary

The exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free and application crash) via crafted EXIF data in a JPEG image.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

23 references

URL	Tags
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.debian.org/security/2015/dsa-3195	vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/72541	vdb-entryx_refsource_BID
http://marc.info/?l=bugtraq&m=144050155601375&w=2	vendor-advisoryx_refsource_HP
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=…	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://marc.info/?l=bugtraq&m=143748090628601&w=2	vendor-advisoryx_refsource_HP
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
https://bugs.php.net/bug.php?id=68799	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2015-0…	vendor-advisoryx_refsource_SUSE
https://support.apple.com/HT205267	x_refsource_CONFIRM
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=…	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1185472	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1053.html	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201503-03	vendor-advisoryx_refsource_GENTOO
http://advisories.mageia.org/MGASA-2015-0040.html	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1066.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1218.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-01-22 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T04:03:10.640Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "MDVSA-2015:032",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:032"
          },
          {
            "name": "DSA-3195",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3195"
          },
          {
            "name": "72541",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/72541"
          },
          {
            "name": "HPSBMU03409",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
          },
          {
            "name": "SUSE-SU-2015:0365",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2fc178cf448d8e1b95d1314e47eeef610729e0df"
          },
          {
            "name": "APPLE-SA-2015-09-30-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
          },
          {
            "name": "HPSBMU03380",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=21bc7464f454fec18a9ec024c738f195602fee2a"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=68799"
          },
          {
            "name": "openSUSE-SU-2015:0325",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT205267"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=55001de6d8c6ed2aada870a76de1e4b4558737bf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185472"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "name": "RHSA-2015:1053",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
          },
          {
            "name": "GLSA-201503-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201503-03"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
          },
          {
            "name": "RHSA-2015:1066",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
          },
          {
            "name": "RHSA-2015:1218",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-01-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free and application crash) via crafted EXIF data in a JPEG image."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "MDVSA-2015:032",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:032"
        },
        {
          "name": "DSA-3195",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3195"
        },
        {
          "name": "72541",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/72541"
        },
        {
          "name": "HPSBMU03409",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
        },
        {
          "name": "SUSE-SU-2015:0365",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2fc178cf448d8e1b95d1314e47eeef610729e0df"
        },
        {
          "name": "APPLE-SA-2015-09-30-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
        },
        {
          "name": "HPSBMU03380",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=21bc7464f454fec18a9ec024c738f195602fee2a"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=68799"
        },
        {
          "name": "openSUSE-SU-2015:0325",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT205267"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=55001de6d8c6ed2aada870a76de1e4b4558737bf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185472"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "name": "RHSA-2015:1053",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
        },
        {
          "name": "GLSA-201503-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201503-03"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
        },
        {
          "name": "RHSA-2015:1066",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
        },
        {
          "name": "RHSA-2015:1218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2015-0232",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free and application crash) via crafted EXIF data in a JPEG image."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "MDVSA-2015:032",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:032"
            },
            {
              "name": "DSA-3195",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3195"
            },
            {
              "name": "72541",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/72541"
            },
            {
              "name": "HPSBMU03409",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
            },
            {
              "name": "SUSE-SU-2015:0365",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html"
            },
            {
              "name": "http://git.php.net/?p=php-src.git;a=commit;h=2fc178cf448d8e1b95d1314e47eeef610729e0df",
              "refsource": "CONFIRM",
              "url": "http://git.php.net/?p=php-src.git;a=commit;h=2fc178cf448d8e1b95d1314e47eeef610729e0df"
            },
            {
              "name": "APPLE-SA-2015-09-30-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
            },
            {
              "name": "HPSBMU03380",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "http://git.php.net/?p=php-src.git;a=commit;h=21bc7464f454fec18a9ec024c738f195602fee2a",
              "refsource": "CONFIRM",
              "url": "http://git.php.net/?p=php-src.git;a=commit;h=21bc7464f454fec18a9ec024c738f195602fee2a"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=68799",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=68799"
            },
            {
              "name": "openSUSE-SU-2015:0325",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html"
            },
            {
              "name": "https://support.apple.com/HT205267",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT205267"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php"
            },
            {
              "name": "http://git.php.net/?p=php-src.git;a=commit;h=55001de6d8c6ed2aada870a76de1e4b4558737bf",
              "refsource": "CONFIRM",
              "url": "http://git.php.net/?p=php-src.git;a=commit;h=55001de6d8c6ed2aada870a76de1e4b4558737bf"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1185472",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185472"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "RHSA-2015:1053",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
            },
            {
              "name": "GLSA-201503-03",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201503-03"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2015-0040.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
            },
            {
              "name": "RHSA-2015:1066",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
            },
            {
              "name": "RHSA-2015:1218",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-0232",
    "datePublished": "2015-01-27T11:00:00.000Z",
    "dateReserved": "2014-11-18T00:00:00.000Z",
    "dateUpdated": "2024-08-06T04:03:10.640Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-0273 (GCVE-0-2015-0273)

Vulnerability from cvelistv5 – Published: 2015-03-30 10:00 – Updated: 2024-08-06 04:03

Summary

Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZone data handled by the php_date_timezone_initialize_from_hash function or (b) DateTime data handled by the php_date_initialize_from_hash function.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

28 references

URL	Tags
http://www.debian.org/security/2015/dsa-3195	vendor-advisoryx_refsource_DEBIAN
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
https://support.apple.com/HT205375	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2535-1	vendor-advisoryx_refsource_UBUNTU
http://marc.info/?l=bugtraq&m=144050155601375&w=2	vendor-advisoryx_refsource_HP
https://bugs.php.net/bug.php?id=68942	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://marc.info/?l=bugtraq&m=143748090628601&w=2	vendor-advisoryx_refsource_HP
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://marc.info/?l=bugtraq&m=143403519711434&w=2	vendor-advisoryx_refsource_HP
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1194730	x_refsource_CONFIRM
https://support.apple.com/HT205267	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.securitytracker.com/id/1031945	vdb-entryx_refsource_SECTRACK
http://support.apple.com/kb/HT204942	x_refsource_CONFIRM
http://www.securityfocus.com/bid/72701	vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1053.html	vendor-advisoryx_refsource_REDHAT
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=…	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201606-10	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1066.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1218.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-02-19 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T04:03:10.916Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3195",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3195"
          },
          {
            "name": "APPLE-SA-2015-10-21-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT205375"
          },
          {
            "name": "USN-2535-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2535-1"
          },
          {
            "name": "HPSBMU03409",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=68942"
          },
          {
            "name": "APPLE-SA-2015-09-30-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
          },
          {
            "name": "HPSBMU03380",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "MDVSA-2015:079",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:079"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
          },
          {
            "name": "APPLE-SA-2015-06-30-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html"
          },
          {
            "name": "openSUSE-SU-2015:0440",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00004.html"
          },
          {
            "name": "SSRT102066",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1194730"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT205267"
          },
          {
            "name": "SUSE-SU-2015:0436",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html"
          },
          {
            "name": "1031945",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031945"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT204942"
          },
          {
            "name": "72701",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/72701"
          },
          {
            "name": "SUSE-SU-2015:0424",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00002.html"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "name": "RHSA-2015:1053",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=71335e6ebabc1b12c057d8017fd811892ecdfd24"
          },
          {
            "name": "HPSBUX03337",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
          },
          {
            "name": "GLSA-201606-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201606-10"
          },
          {
            "name": "RHSA-2015:1066",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
          },
          {
            "name": "RHSA-2015:1218",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-02-19T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZone data handled by the php_date_timezone_initialize_from_hash function or (b) DateTime data handled by the php_date_initialize_from_hash function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-3195",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3195"
        },
        {
          "name": "APPLE-SA-2015-10-21-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT205375"
        },
        {
          "name": "USN-2535-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2535-1"
        },
        {
          "name": "HPSBMU03409",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=68942"
        },
        {
          "name": "APPLE-SA-2015-09-30-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
        },
        {
          "name": "HPSBMU03380",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "MDVSA-2015:079",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:079"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
        },
        {
          "name": "APPLE-SA-2015-06-30-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html"
        },
        {
          "name": "openSUSE-SU-2015:0440",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00004.html"
        },
        {
          "name": "SSRT102066",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1194730"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT205267"
        },
        {
          "name": "SUSE-SU-2015:0436",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html"
        },
        {
          "name": "1031945",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031945"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT204942"
        },
        {
          "name": "72701",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/72701"
        },
        {
          "name": "SUSE-SU-2015:0424",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00002.html"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "name": "RHSA-2015:1053",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=71335e6ebabc1b12c057d8017fd811892ecdfd24"
        },
        {
          "name": "HPSBUX03337",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
        },
        {
          "name": "GLSA-201606-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201606-10"
        },
        {
          "name": "RHSA-2015:1066",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
        },
        {
          "name": "RHSA-2015:1218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2015-0273",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZone data handled by the php_date_timezone_initialize_from_hash function or (b) DateTime data handled by the php_date_initialize_from_hash function."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3195",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3195"
            },
            {
              "name": "APPLE-SA-2015-10-21-4",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html"
            },
            {
              "name": "https://support.apple.com/HT205375",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT205375"
            },
            {
              "name": "USN-2535-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2535-1"
            },
            {
              "name": "HPSBMU03409",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=68942",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=68942"
            },
            {
              "name": "APPLE-SA-2015-09-30-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
            },
            {
              "name": "HPSBMU03380",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "MDVSA-2015:079",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:079"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
            },
            {
              "name": "APPLE-SA-2015-06-30-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html"
            },
            {
              "name": "openSUSE-SU-2015:0440",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00004.html"
            },
            {
              "name": "SSRT102066",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1194730",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1194730"
            },
            {
              "name": "https://support.apple.com/HT205267",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT205267"
            },
            {
              "name": "SUSE-SU-2015:0436",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html"
            },
            {
              "name": "1031945",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1031945"
            },
            {
              "name": "http://support.apple.com/kb/HT204942",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT204942"
            },
            {
              "name": "72701",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/72701"
            },
            {
              "name": "SUSE-SU-2015:0424",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00002.html"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "RHSA-2015:1053",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
            },
            {
              "name": "http://git.php.net/?p=php-src.git;a=commit;h=71335e6ebabc1b12c057d8017fd811892ecdfd24",
              "refsource": "CONFIRM",
              "url": "http://git.php.net/?p=php-src.git;a=commit;h=71335e6ebabc1b12c057d8017fd811892ecdfd24"
            },
            {
              "name": "HPSBUX03337",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
            },
            {
              "name": "GLSA-201606-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201606-10"
            },
            {
              "name": "RHSA-2015:1066",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
            },
            {
              "name": "RHSA-2015:1218",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-0273",
    "datePublished": "2015-03-30T10:00:00.000Z",
    "dateReserved": "2014-11-18T00:00:00.000Z",
    "dateUpdated": "2024-08-06T04:03:10.916Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-2301 (GCVE-0-2015-2301)

Vulnerability from cvelistv5 – Published: 2015-03-30 10:00 – Updated: 2024-08-06 05:10

Summary

Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted renaming of a Phar archive to the name of an existing file.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

24 references

URL	Tags
http://www.debian.org/security/2015/dsa-3198	vendor-advisoryx_refsource_DEBIAN
http://www.ubuntu.com/usn/USN-2535-1	vendor-advisoryx_refsource_UBUNTU
http://marc.info/?l=bugtraq&m=144050155601375&w=2	vendor-advisoryx_refsource_HP
http://lists.opensuse.org/opensuse-updates/2015-0…	vendor-advisoryx_refsource_SUSE
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.securitytracker.com/id/1031949	vdb-entryx_refsource_SECTRACK
http://marc.info/?l=bugtraq&m=143748090628601&w=2	vendor-advisoryx_refsource_HP
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1194747	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=143403519711434&w=2	vendor-advisoryx_refsource_HP
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://support.apple.com/HT205267	x_refsource_CONFIRM
https://bugs.php.net/bug.php?id=68901	x_refsource_CONFIRM
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/73037	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1053.html	vendor-advisoryx_refsource_REDHAT
http://openwall.com/lists/oss-security/2015/03/15/6	mailing-listx_refsource_MLIST
https://security.gentoo.org/glsa/201606-10	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1066.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1218.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-01-24 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:10:16.232Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3198",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3198"
          },
          {
            "name": "USN-2535-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2535-1"
          },
          {
            "name": "HPSBMU03409",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
          },
          {
            "name": "openSUSE-SU-2015:0644",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html"
          },
          {
            "name": "APPLE-SA-2015-09-30-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
          },
          {
            "name": "1031949",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031949"
          },
          {
            "name": "HPSBMU03380",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "MDVSA-2015:079",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:079"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1194747"
          },
          {
            "name": "SSRT102066",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "name": "SUSE-SU-2015:0868",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT205267"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=68901"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=b2cf3f064b8f5efef89bb084521b61318c71781b"
          },
          {
            "name": "73037",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/73037"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "name": "RHSA-2015:1053",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
          },
          {
            "name": "HPSBUX03337",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
          },
          {
            "name": "[oss-security] 20150315 Re: CVE Request: PHP 5.6.6 changelog",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2015/03/15/6"
          },
          {
            "name": "GLSA-201606-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201606-10"
          },
          {
            "name": "RHSA-2015:1066",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
          },
          {
            "name": "RHSA-2015:1218",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-01-24T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted renaming of a Phar archive to the name of an existing file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-3198",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3198"
        },
        {
          "name": "USN-2535-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2535-1"
        },
        {
          "name": "HPSBMU03409",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
        },
        {
          "name": "openSUSE-SU-2015:0644",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html"
        },
        {
          "name": "APPLE-SA-2015-09-30-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
        },
        {
          "name": "1031949",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031949"
        },
        {
          "name": "HPSBMU03380",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "MDVSA-2015:079",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:079"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1194747"
        },
        {
          "name": "SSRT102066",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "name": "SUSE-SU-2015:0868",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT205267"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=68901"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=b2cf3f064b8f5efef89bb084521b61318c71781b"
        },
        {
          "name": "73037",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/73037"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "name": "RHSA-2015:1053",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
        },
        {
          "name": "HPSBUX03337",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
        },
        {
          "name": "[oss-security] 20150315 Re: CVE Request: PHP 5.6.6 changelog",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2015/03/15/6"
        },
        {
          "name": "GLSA-201606-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201606-10"
        },
        {
          "name": "RHSA-2015:1066",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
        },
        {
          "name": "RHSA-2015:1218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-2301",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted renaming of a Phar archive to the name of an existing file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3198",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3198"
            },
            {
              "name": "USN-2535-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2535-1"
            },
            {
              "name": "HPSBMU03409",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
            },
            {
              "name": "openSUSE-SU-2015:0644",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html"
            },
            {
              "name": "APPLE-SA-2015-09-30-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
            },
            {
              "name": "1031949",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1031949"
            },
            {
              "name": "HPSBMU03380",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "MDVSA-2015:079",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:079"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1194747",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1194747"
            },
            {
              "name": "SSRT102066",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "SUSE-SU-2015:0868",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
            },
            {
              "name": "https://support.apple.com/HT205267",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT205267"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=68901",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=68901"
            },
            {
              "name": "http://git.php.net/?p=php-src.git;a=commit;h=b2cf3f064b8f5efef89bb084521b61318c71781b",
              "refsource": "CONFIRM",
              "url": "http://git.php.net/?p=php-src.git;a=commit;h=b2cf3f064b8f5efef89bb084521b61318c71781b"
            },
            {
              "name": "73037",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/73037"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "RHSA-2015:1053",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
            },
            {
              "name": "HPSBUX03337",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
            },
            {
              "name": "[oss-security] 20150315 Re: CVE Request: PHP 5.6.6 changelog",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2015/03/15/6"
            },
            {
              "name": "GLSA-201606-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201606-10"
            },
            {
              "name": "RHSA-2015:1066",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
            },
            {
              "name": "RHSA-2015:1218",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-2301",
    "datePublished": "2015-03-30T10:00:00.000Z",
    "dateReserved": "2015-03-15T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:10:16.232Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-2783 (GCVE-0-2015-2783)

Vulnerability from cvelistv5 – Published: 2015-06-09 18:00 – Updated: 2024-08-06 05:24

Summary

ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read and application crash) via a crafted length value in conjunction with crafted serialized data in a phar archive, related to the phar_parse_metadata and phar_parse_pharfile functions.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

21 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1187.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1186.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/74239	vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1032146	vdb-entryx_refsource_SECTRACK
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=143403519711434&w=2	vendor-advisoryx_refsource_HP
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://bugs.php.net/bug.php?id=69324	x_refsource_CONFIRM
https://support.apple.com/HT205267	x_refsource_CONFIRM
http://www.debian.org/security/2015/dsa-3280	vendor-advisoryx_refsource_DEBIAN
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.ubuntu.com/usn/USN-2572-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
https://support.apple.com/kb/HT205031	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://security.gentoo.org/glsa/201606-10	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1066.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1218.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-04-16 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:24:38.930Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1187",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
          },
          {
            "name": "RHSA-2015:1186",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
          },
          {
            "name": "74239",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/74239"
          },
          {
            "name": "1032146",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032146"
          },
          {
            "name": "APPLE-SA-2015-09-30-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
          },
          {
            "name": "SSRT102066",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "name": "SUSE-SU-2015:0868",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=69324"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT205267"
          },
          {
            "name": "DSA-3280",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3280"
          },
          {
            "name": "APPLE-SA-2015-08-13-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
          },
          {
            "name": "USN-2572-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2572-1"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT205031"
          },
          {
            "name": "openSUSE-SU-2015:0855",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html"
          },
          {
            "name": "HPSBUX03337",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
          },
          {
            "name": "GLSA-201606-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201606-10"
          },
          {
            "name": "RHSA-2015:1066",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
          },
          {
            "name": "RHSA-2015:1218",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-04-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read and application crash) via a crafted length value in conjunction with crafted serialized data in a phar archive, related to the phar_parse_metadata and phar_parse_pharfile functions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2015:1187",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
        },
        {
          "name": "RHSA-2015:1186",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
        },
        {
          "name": "74239",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/74239"
        },
        {
          "name": "1032146",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032146"
        },
        {
          "name": "APPLE-SA-2015-09-30-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
        },
        {
          "name": "SSRT102066",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "name": "SUSE-SU-2015:0868",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=69324"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT205267"
        },
        {
          "name": "DSA-3280",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3280"
        },
        {
          "name": "APPLE-SA-2015-08-13-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
        },
        {
          "name": "USN-2572-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2572-1"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT205031"
        },
        {
          "name": "openSUSE-SU-2015:0855",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html"
        },
        {
          "name": "HPSBUX03337",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
        },
        {
          "name": "GLSA-201606-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201606-10"
        },
        {
          "name": "RHSA-2015:1066",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
        },
        {
          "name": "RHSA-2015:1218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-2783",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read and application crash) via a crafted length value in conjunction with crafted serialized data in a phar archive, related to the phar_parse_metadata and phar_parse_pharfile functions."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:1187",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
            },
            {
              "name": "RHSA-2015:1186",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
            },
            {
              "name": "74239",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/74239"
            },
            {
              "name": "1032146",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032146"
            },
            {
              "name": "APPLE-SA-2015-09-30-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
            },
            {
              "name": "SSRT102066",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "SUSE-SU-2015:0868",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=69324",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=69324"
            },
            {
              "name": "https://support.apple.com/HT205267",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT205267"
            },
            {
              "name": "DSA-3280",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3280"
            },
            {
              "name": "APPLE-SA-2015-08-13-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
            },
            {
              "name": "USN-2572-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2572-1"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "https://support.apple.com/kb/HT205031",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT205031"
            },
            {
              "name": "openSUSE-SU-2015:0855",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html"
            },
            {
              "name": "HPSBUX03337",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
            },
            {
              "name": "GLSA-201606-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201606-10"
            },
            {
              "name": "RHSA-2015:1066",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
            },
            {
              "name": "RHSA-2015:1218",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-2783",
    "datePublished": "2015-06-09T18:00:00.000Z",
    "dateReserved": "2015-03-29T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:24:38.930Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-2787 (GCVE-0-2015-2787)

Vulnerability from cvelistv5 – Published: 2015-03-30 10:00 – Updated: 2024-08-06 05:24

Summary

Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages use of the unset function within an __wakeup function, a related issue to CVE-2015-0231.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

21 references

URL	Tags
https://gist.github.com/smalyshev/eea9eafc7c88a4a6d10d	x_refsource_CONFIRM
http://www.securitytracker.com/id/1032485	vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/73431	vdb-entryx_refsource_BID
http://marc.info/?l=bugtraq&m=144050155601375&w=2	vendor-advisoryx_refsource_HP
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://marc.info/?l=bugtraq&m=143748090628601&w=2	vendor-advisoryx_refsource_HP
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://support.apple.com/HT205267	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.ubuntu.com/usn/USN-2572-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
https://support.apple.com/kb/HT205031	x_refsource_CONFIRM
https://bugs.php.net/bug.php?id=68976	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1053.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2015-0…	vendor-advisoryx_refsource_SUSE
https://security.gentoo.org/glsa/201606-10	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1066.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1218.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-02-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:24:38.837Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://gist.github.com/smalyshev/eea9eafc7c88a4a6d10d"
          },
          {
            "name": "1032485",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032485"
          },
          {
            "name": "73431",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/73431"
          },
          {
            "name": "HPSBMU03409",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
          },
          {
            "name": "APPLE-SA-2015-09-30-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
          },
          {
            "name": "HPSBMU03380",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "name": "SUSE-SU-2015:0868",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT205267"
          },
          {
            "name": "APPLE-SA-2015-08-13-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
          },
          {
            "name": "USN-2572-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2572-1"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT205031"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=68976"
          },
          {
            "name": "RHSA-2015:1053",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
          },
          {
            "name": "openSUSE-SU-2015:0684",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00015.html"
          },
          {
            "name": "GLSA-201606-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201606-10"
          },
          {
            "name": "RHSA-2015:1066",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
          },
          {
            "name": "RHSA-2015:1218",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-02-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages use of the unset function within an __wakeup function, a related issue to CVE-2015-0231."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://gist.github.com/smalyshev/eea9eafc7c88a4a6d10d"
        },
        {
          "name": "1032485",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032485"
        },
        {
          "name": "73431",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/73431"
        },
        {
          "name": "HPSBMU03409",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
        },
        {
          "name": "APPLE-SA-2015-09-30-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
        },
        {
          "name": "HPSBMU03380",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "name": "SUSE-SU-2015:0868",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT205267"
        },
        {
          "name": "APPLE-SA-2015-08-13-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
        },
        {
          "name": "USN-2572-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2572-1"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT205031"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=68976"
        },
        {
          "name": "RHSA-2015:1053",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
        },
        {
          "name": "openSUSE-SU-2015:0684",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00015.html"
        },
        {
          "name": "GLSA-201606-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201606-10"
        },
        {
          "name": "RHSA-2015:1066",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
        },
        {
          "name": "RHSA-2015:1218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-2787",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages use of the unset function within an __wakeup function, a related issue to CVE-2015-0231."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://gist.github.com/smalyshev/eea9eafc7c88a4a6d10d",
              "refsource": "CONFIRM",
              "url": "https://gist.github.com/smalyshev/eea9eafc7c88a4a6d10d"
            },
            {
              "name": "1032485",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032485"
            },
            {
              "name": "73431",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/73431"
            },
            {
              "name": "HPSBMU03409",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
            },
            {
              "name": "APPLE-SA-2015-09-30-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
            },
            {
              "name": "HPSBMU03380",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "SUSE-SU-2015:0868",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
            },
            {
              "name": "https://support.apple.com/HT205267",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT205267"
            },
            {
              "name": "APPLE-SA-2015-08-13-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
            },
            {
              "name": "USN-2572-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2572-1"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "https://support.apple.com/kb/HT205031",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT205031"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=68976",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=68976"
            },
            {
              "name": "RHSA-2015:1053",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"
            },
            {
              "name": "openSUSE-SU-2015:0684",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00015.html"
            },
            {
              "name": "GLSA-201606-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201606-10"
            },
            {
              "name": "RHSA-2015:1066",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
            },
            {
              "name": "RHSA-2015:1218",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-2787",
    "datePublished": "2015-03-30T10:00:00.000Z",
    "dateReserved": "2015-03-29T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:24:38.837Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-3307 (GCVE-0-2015-3307)

Vulnerability from cvelistv5 – Published: 2015-06-09 18:00 – Updated: 2024-08-06 05:39

Summary

The phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (heap metadata corruption) or possibly have unspecified other impact via a crafted tar archive.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

11 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1187.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1186.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/74703	vdb-entryx_refsource_BID
https://bugzilla.redhat.com/show_bug.cgi?id=1223441	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
https://bugs.php.net/bug.php?id=69443	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
https://support.apple.com/kb/HT205031	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1066.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1218.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-04-15 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:39:32.047Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1187",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
          },
          {
            "name": "RHSA-2015:1186",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
          },
          {
            "name": "74703",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/74703"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1223441"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=69443"
          },
          {
            "name": "APPLE-SA-2015-08-13-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT205031"
          },
          {
            "name": "RHSA-2015:1066",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
          },
          {
            "name": "RHSA-2015:1218",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-04-15T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (heap metadata corruption) or possibly have unspecified other impact via a crafted tar archive."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2015:1187",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
        },
        {
          "name": "RHSA-2015:1186",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
        },
        {
          "name": "74703",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/74703"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1223441"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=69443"
        },
        {
          "name": "APPLE-SA-2015-08-13-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT205031"
        },
        {
          "name": "RHSA-2015:1066",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
        },
        {
          "name": "RHSA-2015:1218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-3307",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (heap metadata corruption) or possibly have unspecified other impact via a crafted tar archive."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:1187",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
            },
            {
              "name": "RHSA-2015:1186",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
            },
            {
              "name": "74703",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/74703"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1223441",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1223441"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=69443",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=69443"
            },
            {
              "name": "APPLE-SA-2015-08-13-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "https://support.apple.com/kb/HT205031",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT205031"
            },
            {
              "name": "RHSA-2015:1066",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
            },
            {
              "name": "RHSA-2015:1218",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-3307",
    "datePublished": "2015-06-09T18:00:00.000Z",
    "dateReserved": "2015-04-15T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:39:32.047Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-3329 (GCVE-0-2015-3329)

Vulnerability from cvelistv5 – Published: 2015-06-09 18:00 – Updated: 2024-08-06 05:47

Summary

Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allow remote attackers to execute arbitrary code via a crafted length value in a (1) tar, (2) phar, or (3) ZIP archive.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

21 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1187.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1186.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/74240	vdb-entryx_refsource_BID
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
https://bugs.php.net/bug.php?id=69441	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.securitytracker.com/id/1032145	vdb-entryx_refsource_SECTRACK
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://support.apple.com/HT205267	x_refsource_CONFIRM
http://www.debian.org/security/2015/dsa-3280	vendor-advisoryx_refsource_DEBIAN
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.ubuntu.com/usn/USN-2572-1	vendor-advisoryx_refsource_UBUNTU
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisoryx_refsource_REDHAT
https://support.apple.com/kb/HT205031	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://security.gentoo.org/glsa/201606-10	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1066.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1218.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-04-16 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:47:57.783Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1187",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
          },
          {
            "name": "RHSA-2015:1186",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
          },
          {
            "name": "74240",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/74240"
          },
          {
            "name": "APPLE-SA-2015-09-30-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=69441"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "1032145",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032145"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "name": "SUSE-SU-2015:0868",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT205267"
          },
          {
            "name": "DSA-3280",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3280"
          },
          {
            "name": "APPLE-SA-2015-08-13-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
          },
          {
            "name": "USN-2572-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2572-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f59b67ae50064560d7bfcdb0d6a8ab284179053c"
          },
          {
            "name": "RHSA-2015:1135",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT205031"
          },
          {
            "name": "openSUSE-SU-2015:0855",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html"
          },
          {
            "name": "GLSA-201606-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201606-10"
          },
          {
            "name": "RHSA-2015:1066",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
          },
          {
            "name": "RHSA-2015:1218",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-04-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allow remote attackers to execute arbitrary code via a crafted length value in a (1) tar, (2) phar, or (3) ZIP archive."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2015:1187",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
        },
        {
          "name": "RHSA-2015:1186",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
        },
        {
          "name": "74240",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/74240"
        },
        {
          "name": "APPLE-SA-2015-09-30-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=69441"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "1032145",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032145"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "name": "SUSE-SU-2015:0868",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT205267"
        },
        {
          "name": "DSA-3280",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3280"
        },
        {
          "name": "APPLE-SA-2015-08-13-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
        },
        {
          "name": "USN-2572-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2572-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f59b67ae50064560d7bfcdb0d6a8ab284179053c"
        },
        {
          "name": "RHSA-2015:1135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT205031"
        },
        {
          "name": "openSUSE-SU-2015:0855",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html"
        },
        {
          "name": "GLSA-201606-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201606-10"
        },
        {
          "name": "RHSA-2015:1066",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
        },
        {
          "name": "RHSA-2015:1218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-3329",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allow remote attackers to execute arbitrary code via a crafted length value in a (1) tar, (2) phar, or (3) ZIP archive."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:1187",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1187.html"
            },
            {
              "name": "RHSA-2015:1186",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1186.html"
            },
            {
              "name": "74240",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/74240"
            },
            {
              "name": "APPLE-SA-2015-09-30-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=69441",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=69441"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "1032145",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032145"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "SUSE-SU-2015:0868",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html"
            },
            {
              "name": "https://support.apple.com/HT205267",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT205267"
            },
            {
              "name": "DSA-3280",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3280"
            },
            {
              "name": "APPLE-SA-2015-08-13-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
            },
            {
              "name": "USN-2572-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2572-1"
            },
            {
              "name": "http://git.php.net/?p=php-src.git;a=commit;h=f59b67ae50064560d7bfcdb0d6a8ab284179053c",
              "refsource": "CONFIRM",
              "url": "http://git.php.net/?p=php-src.git;a=commit;h=f59b67ae50064560d7bfcdb0d6a8ab284179053c"
            },
            {
              "name": "RHSA-2015:1135",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1135.html"
            },
            {
              "name": "https://support.apple.com/kb/HT205031",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT205031"
            },
            {
              "name": "openSUSE-SU-2015:0855",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html"
            },
            {
              "name": "GLSA-201606-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201606-10"
            },
            {
              "name": "RHSA-2015:1066",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"
            },
            {
              "name": "RHSA-2015:1218",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1218.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-3329",
    "datePublished": "2015-06-09T18:00:00.000Z",
    "dateReserved": "2015-04-17T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:47:57.783Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2015_1218

CVE-2014-9425 (GCVE-0-2014-9425)

CVE-2014-9705 (GCVE-0-2014-9705)

CVE-2014-9709 (GCVE-0-2014-9709)

CVE-2015-0232 (GCVE-0-2015-0232)

CVE-2015-0273 (GCVE-0-2015-0273)

CVE-2015-2301 (GCVE-0-2015-2301)

CVE-2015-2783 (GCVE-0-2015-2783)

CVE-2015-2787 (GCVE-0-2015-2787)

CVE-2015-3307 (GCVE-0-2015-3307)

CVE-2015-3329 (GCVE-0-2015-3329)

Tags

Sightings

Nomenclature

Related by attack behaviour