Red Hat Security Advisory

RHSA-2012:0071

php security update

Released 2012-01-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AS version 4 php-4.3.9-3.35, php-4.3.9-3.35.i386, php-4.3.9-3.35.ia64 +47
Red Hat Enterprise Linux Desktop version 4 php-4.3.9-3.35, php-4.3.9-3.35.i386, php-devel-4.3.9-3.35 +25
Red Hat Enterprise Linux ES version 4 php-4.3.9-3.35, php-4.3.9-3.35.i386, php-4.3.9-3.35.ia64 +39
Red Hat Enterprise Linux WS version 4 php-4.3.9-3.35, php-4.3.9-3.35.i386, php-4.3.9-3.35.ia64 +39

Fixes 5 records

TI-2011-04204 CVE-2011-4885 · GHSA-q9pr-6h9m-h8vf

PHP before 5.3.9 computes hash values for form parameters without restricting the ability…

MEDIUM 64

PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending ma…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.8337 Published 2011-12-30 Fixed CWE-20

TI-2011-01924 CVE-2011-2202 · GHSA-6qfq-jp45-c2jc

The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly…

MEDIUM 47

The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks,…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.19736 Published 2011-06-16 Fixed CWE-264

TI-2011-03932 CVE-2011-4566 · GHSA-hp65-4pq5-qqw7

Integer overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in…

LOW 38

Integer overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4.0beta2 on 32-bit platforms allows remote attackers to read the contents of arbitrary memory locations or cause a denial of…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.06558 Published 2011-11-29 Fixed CWE-189

TI-2011-01286 CVE-2011-1466 · GHSA-vfjq-wwcr-264v

Integer overflow in the SdnToJulian function in the Calendar extension in PHP before…

LOW 32

Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a large integer in the first argument to…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05856 Published 2011-03-20 Fixed CWE-189

TI-2011-00616 CVE-2011-0708 · GHSA-cv97-45j6-8wc2

exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an…

LOW 32

exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) via an image with a crafted Image File Direc…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.09826 Published 2011-03-20 Fixed CWE-119