Lucene search
Arch LinuxASA-201503-25HistoryMar 28, 2015 - 12:00 a.m.
php: integer overflow
2015-03-2800:00:00
Arch Linux
lists.archlinux.org
21
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.954 High
EPSS
Percentile
99.2%
An integer overflow flaw, leading to a heap-based buffer overflow, was found in
the way libzip, which is embedded in PHP, processed certain ZIP archives. If an
attacker were able to supply a specially crafted ZIP archive to an application
using libzip, it could cause the application to crash or, possibly, execute
arbitrary code.
Related
fedora
fedora
[SECURITY] Fedora 21 Update: libzip-0.11.2-5.fc21
2015-04-21 19:28:27
[SECURITY] Fedora 22 Update: php-5.6.7-2.fc22
2015-03-26 22:08:56
[SECURITY] Fedora 22 Update: libzip-0.11.2-5.fc22
2015-04-17 02:29:38
nessus
nessus
Fedora 20 : php-5.5.23-1.fc20 (2015-4216)
2015-04-03 00:00:00
SUSE SLED12 / SLES12 Security Update : libzip (SUSE-SU-2015:0668-1)
2015-05-20 00:00:00
FreeBSD : libzip -- integer overflow (264749ae-d565-11e4-b545-00269ee29e57)
2015-03-30 00:00:00
openvas
openvas
Fedora Update for mingw-libzip FEDORA-2015-4565
2015-04-06 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:0668-1)
2021-04-19 00:00:00
Fedora Update for libzip FEDORA-2015-4699
2015-04-22 00:00:00
checkpoint_advisories
checkpoint_advisories
PHP Group PHP ZIP Integer Overflow (CVE-2015-2331)
2015-04-14 00:00:00
cve
cve
CVE-2015-2331
2015-03-30 10:59:00
debiancve
debiancve
CVE-2015-2331
2015-03-30 10:59:00
ubuntucve
ubuntucve
CVE-2015-2331
2015-03-30 00:00:00
hackerone
hackerone
prion
prion
Integer overflow
2015-03-30 10:59:00
freebsd
freebsd
libzip -- integer overflow
2015-03-18 00:00:00
Several vulnerabilities found in PHP
2015-03-19 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3198-1] php5 security update
2015-03-21 00:00:00
PHP multiple security vulnerabilities
2015-03-21 00:00:00
debian
debian
[SECURITY] [DSA 3198-2] php5 regression update
2015-03-28 18:47:31
[SECURITY] [DSA 3198-1] php5 security update
2015-03-20 17:31:08
[SECURITY] [DSA 3198-2] php5 regression update
2015-03-28 18:47:31
f5
f5
K16714 : PHP vulnerabilities CVE-2015-2301 and CVE-2015-2331
2015-06-08 00:00:00
SOL16714 - PHP vulnerabilities CVE-2015-2301 and CVE-2015-2331
2015-06-08 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1907
2021-07-02 17:26:08
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45
osv
osv
php5 - regression update
2015-03-20 00:00:00
php5 - security update
2015-03-20 00:00:00
php5 - security update
2015-04-29 00:00:00
mageia
mageia
Updated php and libzip packages fix security vulnerabilities
2015-04-04 14:13:35
amazon
amazon
Important: php56
2015-04-15 21:50:00
Important: php55
2015-04-15 21:49:00
Important: php54
2015-04-15 21:49:00
kaspersky
kaspersky
KLA10515 Multiple vulnerabilities in PHP and extensions
2015-03-30 00:00:00
KLA10514 Multiple vulnerabilities in PHP and plugins
2015-03-30 00:00:00
slackware
slackware
[slackware-security] php
2015-04-22 01:22:40
cloudlinux
cloudlinux
Fix of 227 CVE
2020-10-15 12:00:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.954 High
EPSS
Percentile
99.2%
Related for ASA-201503-25