Red Hat Security AdvisoryRHSA-2015:1219
php54-php security update
Released 2015-07-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) php54-php-5.4.40-3.el6, php54-php-bcmath-5.4.40-3.el6, php54-php-cli-5.4.40-3.el6 +22
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) php54-php-5.4.40-3.el7, php54-php-bcmath-5.4.40-3.el7, php54-php-cli-5.4.40-3.el7 +20
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.5) php54-php-5.4.40-3.el6, php54-php-bcmath-5.4.40-3.el6, php54-php-cli-5.4.40-3.el6 +22
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6) php54-php-5.4.40-3.el6, php54-php-bcmath-5.4.40-3.el6, php54-php-cli-5.4.40-3.el6 +22
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1) php54-php-5.4.40-3.el7, php54-php-bcmath-5.4.40-3.el7, php54-php-cli-5.4.40-3.el7 +20
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) php54-php-5.4.40-3.el6, php54-php-bcmath-5.4.40-3.el6, php54-php-cli-5.4.40-3.el6 +22
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) php54-php-5.4.40-3.el7, php54-php-bcmath-5.4.40-3.el7, php54-php-cli-5.4.40-3.el7 +20
Fixes 8 records
Priority MEDIUM 58
Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, lea…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.1541 · Published 2016-05-16 · Partial fix CWE-119
Priority MEDIUM 52
Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, lead…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.20075 · Published 2015-06-09 · Partial fix CWE-189
Priority MEDIUM 51
The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character, which might allow remote attackers to bypass intended extension res…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.18829 · Published 2015-06-09 · Partial fix CWE-19
Priority MEDIUM 51
Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service (CPU…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.41787 · Published 2015-06-09 · Partial fix CWE-399
Priority MEDIUM 50
PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character in certain situations, which allows remote attackers to bypass intended extension restrictions and ac…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.16957 · Published 2015-06-09 · Fixed CWE-19
Priority MEDIUM 42
The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that the first character of a filename is different from the \0 character, which allows…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.2048 · Published 2015-06-09 · Partial fix CWE-189
Priority MEDIUM 41
The php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not validate token extraction for table names, which might allow…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.05347 · Published 2016-05-16 · Partial fix
Priority LOW 35
PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an applicatio…
CVSS 3.0MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.03764 · Published 2016-05-16 · Partial fix CWE-20
THREATIST.IORead the docs