Red Hat Security AdvisoryRHSA-2013:1063
php security update
Released 2013-07-15 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS (v. 3 ELS) php-4.3.2-56.ent, php-4.3.2-56.ent.i386, php-devel-4.3.2-56.ent.i386 +5
- Red Hat Enterprise Linux AS (v. 4 ELS) php-4.3.9-3.37.el4, php-4.3.9-3.37.el4.i386, php-4.3.9-3.37.el4.ia64 +39
- Red Hat Enterprise Linux ES (v. 3 ELS) php-4.3.2-56.ent, php-4.3.2-56.ent.i386, php-devel-4.3.2-56.ent.i386 +5
- Red Hat Enterprise Linux ES (v. 4 ELS) php-4.3.9-3.37.el4, php-4.3.9-3.37.el4.i386, php-devel-4.3.9-3.37.el4 +25
Fixes 1 record
Priority LOW 38
ext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted doc…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05186 · Published 2013-07-13 · Fixed CWE-787
