Red Hat Security AdvisoryRHSA-2007:0154
php security update
Released 2007-04-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 php-4.1.2-2.17, php-4.1.2-2.17.i386, php-4.1.2-2.17.ia64 +14
- Red Hat Enterprise Linux ES version 2.1 php-4.1.2-2.17, php-4.1.2-2.17.i386, php-devel-4.1.2-2.17.i386 +6
- Red Hat Enterprise Linux WS version 2.1 php-4.1.2-2.17, php-4.1.2-2.17.i386, php-devel-4.1.2-2.17.i386 +6
- Red Hat Linux Advanced Workstation 2.1 php-4.1.2-2.17, php-4.1.2-2.17.ia64, php-devel-4.1.2-2.17.ia64 +6
Fixes 3 records
Priority MEDIUM 58
Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL reference counter.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.40895 · Published 2007-03-06 · Fixed
Priority MEDIUM 51
The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.1883 · Published 2007-03-06 · Fixed CWE-674
Priority MEDIUM 41
Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbitrary code by overwriting variables pointing to (1) the GLOBALS array or (2) the session data in _SES…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.07734 · Published 2007-03-27 · Fixed
THREATIST.IORead the docs