Red Hat Security AdvisoryRHSA-2014:1012
php53 and php security update
Released 2014-08-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) php53-5.3.3-23.el5_10, php53-5.3.3-23.el5_10.i386, php53-5.3.3-23.el5_10.ia64 +47
- Red Hat Enterprise Linux Desktop Optional (v. 6) php-5.3.3-27.el6_5.1, php-bcmath-5.3.3-27.el6_5.1, php-cli-5.3.3-27.el6_5.1 +24
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) php53-5.3.3-23.el5_10, php53-5.3.3-23.el5_10.i386, php53-bcmath-5.3.3-23.el5_10 +39
- Red Hat Enterprise Linux HPC Node (v. 6) php-5.3.3-27.el6_5.1, php-cli-5.3.3-27.el6_5.1, php-common-5.3.3-27.el6_5.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) php-5.3.3-27.el6_5.1, php-bcmath-5.3.3-27.el6_5.1, php-dba-5.3.3-27.el6_5.1 +22
- Red Hat Enterprise Linux Server (v. 6) php-5.3.3-27.el6_5.1, php-cli-5.3.3-27.el6_5.1, php-common-5.3.3-27.el6_5.1 +9
- Red Hat Enterprise Linux Server Optional (v. 6) php-5.3.3-27.el6_5.1, php-bcmath-5.3.3-27.el6_5.1, php-dba-5.3.3-27.el6_5.1 +13
- Red Hat Enterprise Linux Workstation (v. 6) php-5.3.3-27.el6_5.1, php-cli-5.3.3-27.el6_5.1, php-common-5.3.3-27.el6_5.1 +9
- Red Hat Enterprise Linux Workstation Optional (v. 6) php-5.3.3-27.el6_5.1, php-bcmath-5.3.3-27.el6_5.1, php-dba-5.3.3-27.el6_5.1 +13
Fixes 11 records
Priority MEDIUM 56
The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which allows remote attackers to execute arbitrary…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.30128 · Published 2014-07-09 · Fixed
Priority MEDIUM 42
The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate sector-count data, which allows remote attackers to ca…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.11481 · Published 2014-07-09 · Fixed CWE-20
Priority MEDIUM 42
The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite loop or out-of-bounds memory access) via…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.20805 · Published 2014-06-01 · Fixed CWE-119
Priority MEDIUM 41
The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (performance degradation) by triggering many file_…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.19877 · Published 2014-06-01 · Fixed CWE-399
Priority LOW 36
Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.1091 · Published 2014-06-18 · Fixed CWE-119
Priority LOW 36
The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, relies on incorrect sector-size data, which allows remote attackers to ca…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.14927 · Published 2014-07-09 · Fixed
Priority LOW 36
file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Document File (CDF) file that triggers (1) an out-of-bounds read or (2) an invalid pointer dereference.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.04117 · Published 2012-07-17 · Fixed CWE-125
Priority LOW 31
Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and crash) via a crafted indirect offset value in the magic of a file.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05028 · Published 2014-02-18 · Partial fix CWE-755
Priority LOW 30
The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service (heap-based buffer…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04575 · Published 2013-11-28 · Partial fix CWE-119
Priority LOW 27
softmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial of service (out-of-bounds memory access and crash) via crafted offsets in the softmagic of a PE executable.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04318 · Published 2014-03-14 · Partial fix CWE-119
Priority LOW 22
The phpinfo implementation in ext/standard/info.c in PHP before 5.4.30 and 5.5.x before 5.5.14 does not ensure use of the string data type for the PHP_AUTH_PW, PHP_AUTH_TYPE, PHP_AUTH_USER, and PHP_SELF variables, which…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.05868 · Published 2014-07-06 · Partial fix CWE-200
THREATIST.IORead the docs