Red Hat Security Advisory

RHSA-2014:1824

php security update

Released 2014-11-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) php-5.1.6-45.el5_11, php-5.1.6-45.el5_11.i386, php-5.1.6-45.el5_11.ia64 +47
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) php-5.1.6-45.el5_11, php-5.1.6-45.el5_11.i386, php-bcmath-5.1.6-45.el5_11 +35

Fixes 3 records

TI-2014-02987 CVE-2014-3669 · GHSA-h4mf-xgwj-q6f7

Integer overflow in the object_custom function in ext/standard/var_unserializer.c in PHP…

MEDIUM 56

Integer overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to cause a denial of service (application crash)…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.28862 Published 2014-10-29 Fixed CWE-189

TI-2014-02988 CVE-2014-3670 · GHSA-r6jr-5phj-2qqh

The exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34…

MEDIUM 50

The exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 operates on floating-point arrays incorrectly, which allows remote attackers to cause a d…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.22633 Published 2014-10-29 Fixed CWE-119

TI-2014-07085 CVE-2014-8626 · GHSA-mfxw-8c28-qhqc

Stack-based buffer overflow in the date_from_ISO8601 function in…

MEDIUM 42

Stack-based buffer overflow in the date_from_ISO8601 function in ext/xmlrpc/libxmlrpc/xmlrpc.c in PHP before 5.2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary co…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05781 Published 2014-11-23 Fixed CWE-119