Lucene search
AmazonALAS-2014-451HistoryNov 22, 2014 - 1:58 p.m.
Medium: php55
2014-11-2213:58:00
alas.aws.amazon.com
25
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.9
Confidence
High
EPSS
0.063
Percentile
93.6%
Issue Overview:
An out-of-bounds read flaw was found in the way the File Information (fileinfo) extension parsed Executable and Linkable Format (ELF) files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted ELF file.
Affected Packages:
php55
Issue Correction:
Run yum update php55 to update your system.
New Packages:
i686:
php55-mssql-5.5.19-2.93.amzn1.i686
php55-pgsql-5.5.19-2.93.amzn1.i686
php55-gd-5.5.19-2.93.amzn1.i686
php55-opcache-5.5.19-2.93.amzn1.i686
php55-embedded-5.5.19-2.93.amzn1.i686
php55-debuginfo-5.5.19-2.93.amzn1.i686
php55-gmp-5.5.19-2.93.amzn1.i686
php55-mcrypt-5.5.19-2.93.amzn1.i686
php55-5.5.19-2.93.amzn1.i686
php55-devel-5.5.19-2.93.amzn1.i686
php55-recode-5.5.19-2.93.amzn1.i686
php55-soap-5.5.19-2.93.amzn1.i686
php55-tidy-5.5.19-2.93.amzn1.i686
php55-enchant-5.5.19-2.93.amzn1.i686
php55-bcmath-5.5.19-2.93.amzn1.i686
php55-intl-5.5.19-2.93.amzn1.i686
php55-mysqlnd-5.5.19-2.93.amzn1.i686
php55-pspell-5.5.19-2.93.amzn1.i686
php55-snmp-5.5.19-2.93.amzn1.i686
php55-process-5.5.19-2.93.amzn1.i686
php55-odbc-5.5.19-2.93.amzn1.i686
php55-xml-5.5.19-2.93.amzn1.i686
php55-xmlrpc-5.5.19-2.93.amzn1.i686
php55-pdo-5.5.19-2.93.amzn1.i686
php55-dba-5.5.19-2.93.amzn1.i686
php55-cli-5.5.19-2.93.amzn1.i686
php55-ldap-5.5.19-2.93.amzn1.i686
php55-imap-5.5.19-2.93.amzn1.i686
php55-fpm-5.5.19-2.93.amzn1.i686
php55-common-5.5.19-2.93.amzn1.i686
php55-mbstring-5.5.19-2.93.amzn1.i686
src:
php55-5.5.19-2.93.amzn1.src
x86_64:
php55-snmp-5.5.19-2.93.amzn1.x86_64
php55-5.5.19-2.93.amzn1.x86_64
php55-ldap-5.5.19-2.93.amzn1.x86_64
php55-gmp-5.5.19-2.93.amzn1.x86_64
php55-cli-5.5.19-2.93.amzn1.x86_64
php55-opcache-5.5.19-2.93.amzn1.x86_64
php55-fpm-5.5.19-2.93.amzn1.x86_64
php55-xmlrpc-5.5.19-2.93.amzn1.x86_64
php55-dba-5.5.19-2.93.amzn1.x86_64
php55-xml-5.5.19-2.93.amzn1.x86_64
php55-pdo-5.5.19-2.93.amzn1.x86_64
php55-bcmath-5.5.19-2.93.amzn1.x86_64
php55-gd-5.5.19-2.93.amzn1.x86_64
php55-pspell-5.5.19-2.93.amzn1.x86_64
php55-soap-5.5.19-2.93.amzn1.x86_64
php55-recode-5.5.19-2.93.amzn1.x86_64
php55-imap-5.5.19-2.93.amzn1.x86_64
php55-debuginfo-5.5.19-2.93.amzn1.x86_64
php55-enchant-5.5.19-2.93.amzn1.x86_64
php55-intl-5.5.19-2.93.amzn1.x86_64
php55-mcrypt-5.5.19-2.93.amzn1.x86_64
php55-mssql-5.5.19-2.93.amzn1.x86_64
php55-pgsql-5.5.19-2.93.amzn1.x86_64
php55-devel-5.5.19-2.93.amzn1.x86_64
php55-mbstring-5.5.19-2.93.amzn1.x86_64
php55-tidy-5.5.19-2.93.amzn1.x86_64
php55-mysqlnd-5.5.19-2.93.amzn1.x86_64
php55-process-5.5.19-2.93.amzn1.x86_64
php55-embedded-5.5.19-2.93.amzn1.x86_64
php55-odbc-5.5.19-2.93.amzn1.x86_64
php55-common-5.5.19-2.93.amzn1.x86_64
Additional References
Red Hat: CVE-2014-3710
Mitre: CVE-2014-3710
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Amazon Linux | 1 | i686 | php55-mssql | < 5.5.19-2.93.amzn1 | php55-mssql-5.5.19-2.93.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | php55-pgsql | < 5.5.19-2.93.amzn1 | php55-pgsql-5.5.19-2.93.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | php55-gd | < 5.5.19-2.93.amzn1 | php55-gd-5.5.19-2.93.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | php55-opcache | < 5.5.19-2.93.amzn1 | php55-opcache-5.5.19-2.93.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | php55-embedded | < 5.5.19-2.93.amzn1 | php55-embedded-5.5.19-2.93.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | php55-debuginfo | < 5.5.19-2.93.amzn1 | php55-debuginfo-5.5.19-2.93.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | php55-gmp | < 5.5.19-2.93.amzn1 | php55-gmp-5.5.19-2.93.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | php55-mcrypt | < 5.5.19-2.93.amzn1 | php55-mcrypt-5.5.19-2.93.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | php55 | < 5.5.19-2.93.amzn1 | php55-5.5.19-2.93.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | php55-devel | < 5.5.19-2.93.amzn1 | php55-devel-5.5.19-2.93.amzn1.i686.rpm |
Related
prion
prion
Out-of-bounds
2014-11-05 11:55:00
ubuntucve
ubuntucve
CVE-2014-3710
2014-10-24 00:00:00
nessus
nessus
Debian DLA-86-1 : file security update
2015-03-26 00:00:00
PHP 5.6.x < 5.6.3 'donote' DoS
2014-11-14 00:00:00
Debian DSA-3074-1 : php5 - security update
2014-11-20 00:00:00
debian
debian
[SECURITY] [DLA 86-1] file security update
2014-11-12 16:17:29
[SECURITY] [DSA 3074-1] php5 security update
2014-11-18 21:10:45
[SECURITY] [DSA 3072-1] file security update
2014-11-12 09:19:45
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2014-450)
2015-09-08 00:00:00
Debian: Security Advisory (DSA-3072-1)
2014-11-10 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:1555-1)
2021-04-19 00:00:00
mageia
mageia
Updated php packages fix security vulnerability
2014-11-12 12:56:47
Updated [package] package fix CVE-2014-3710
2014-10-31 18:53:38
debiancve
debiancve
CVE-2014-3710
2014-11-05 11:55:06
cvelist
cvelist
CVE-2014-3710
2014-11-05 11:00:00
f5
f5
K15898 : PHP vulnerability CVE-2014-3710
2014-12-08 00:00:00
SOL15898 - PHP vulnerability CVE-2014-3710
2014-12-08 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: file-5.19-7.fc21
2014-11-10 06:44:48
[SECURITY] Fedora 20 Update: file-5.19-7.fc20
2014-10-29 11:03:54
amazon
amazon
Medium: php54
2014-11-22 13:58:00
Medium: file
2014-11-22 14:34:00
nvd
nvd
CVE-2014-3710
2014-11-05 11:55:06
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:04:21
Denial Of Service (DoS)
2019-05-02 05:04:17
Denial Of Service (DoS)
2019-05-02 05:04:17
osv
osv
php5 - security update
2014-11-18 00:00:00
file - security update
2014-11-11 00:00:00
php5 - security update
2014-11-25 00:00:00
cve
cve
CVE-2014-3710
2014-11-05 11:55:06
archlinux
archlinux
file: denial of service through out-of-bounds read
2014-11-12 00:00:00
php: denial of service
2014-11-13 00:00:00
securityvulns
securityvulns
[slackware-security] php (SSA:2014-356-02)
2014-12-23 00:00:00
PHP/fileinfo/file DoS
2014-06-14 00:00:00
FreeBSD Security Advisory FreeBSD-SA-14:28.file
2014-12-10 00:00:00
slackware
slackware
[slackware-security] php
2014-12-23 05:38:55
ubuntu
ubuntu
file vulnerabilities
2015-02-04 00:00:00
php5 vulnerabilities
2014-10-30 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:28.file
2014-12-10 00:00:00
freebsd
freebsd
file -- multiple vulnerabilities
2014-12-16 00:00:00
redhat
redhat
(RHSA-2014:1767) Important: php security update
2014-10-30 00:00:00
(RHSA-2014:1768) Important: php53 security update
2014-10-30 00:00:00
(RHSA-2016:0760) Moderate: file security, bug fix, and enhancement update
2016-05-10 06:42:18
centos
centos
php security update
2014-10-31 13:14:51
php53 security update
2014-10-31 14:37:09
file, python security update
2016-05-16 10:13:44
oraclelinux
oraclelinux
php security update
2014-10-30 00:00:00
php53 security update
2014-10-30 00:00:00
file security, bug fix, and enhancement update
2016-05-12 00:00:00
gentoo
gentoo
file: Multiple vulnerabilities
2017-01-17 00:00:00
PHP: Multiple vulnerabilities
2015-03-08 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in file affect IBM Security Network Protection
2018-06-16 21:43:49
Security Bulletin: File vulnerabilities affect IBM SmartClound Entry
2020-07-19 00:49:12
Security Bulletin: Multiple vulnerabilities in file affect PowerKVM
2018-06-18 01:30:43
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.9
Confidence
High
EPSS
0.063
Percentile
93.6%
Related for ALAS-2014-451