Red Hat Security Advisory

RHSA-2011:0196

php53 security update

Released 2011-02-03 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5.6.z server) php53-5.3.3-1.el5_6.1, php53-5.3.3-1.el5_6.1.i386, php53-5.3.3-1.el5_6.1.ia64 +47

Fixes 3 records

TI-2010-04368 CVE-2010-4645 · GHSA-89c3-82jr-pppj

strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before…

LOW 39

strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service (infinite loop) via a certain floating-poin…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.15103 Published 2011-01-11 Fixed CWE-189

TI-2010-03911 CVE-2010-4156 · GHSA-9mqx-xjgw-xp5v

The mb_strcut function in Libmbfl 1.1.0, as used in PHP 5.3.x through 5.3.3, allows…

LOW 37

The mb_strcut function in Libmbfl 1.1.0, as used in PHP 5.3.x through 5.3.3, allows context-dependent attackers to obtain potentially sensitive information via a large value of the third parameter (aka the length paramet…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.12786 Published 2010-11-10 Fixed CWE-20

TI-2010-03534 CVE-2010-3710 · GHSA-pwmp-3xxc-6mqj

Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14…

LOW 26

Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTER_VALIDATE_EMAIL mode is used, allows remote attackers to cause a denial of service (memory consum…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03091 Published 2010-10-25 Fixed CWE-399