Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debianDebianDEBIAN:DLA-0018-1:14E7A
HistoryJul 23, 2014 - 7:10 p.m.

[DLA-0018-1] php5 security update

2014-07-2319:10:58
lists.debian.org
11

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.007 Low

EPSS

Percentile

80.5%

JSON

Package : php5
Version : 5.3.3-7+squeeze20
CVE ID : CVE-2014-3515 CVE-2014-0207 CVE-2014-3480 CVE-2014-4721

[CVE-2014-3515]: fix unserialize() SPL ArrayObject / SPLObjectStorage
Type Confusion
[CVE-2014-0207]: fileinfo: cdf_read_short_sector insufficient
boundary check
[CVE-2014-3480]: fileinfo: cdf_count_chain insufficient boundary check
[CVE-2014-4721]: The phpinfo implementation in ext/standard/info.c in
PHP before 5.4.30 and 5.5.x before 5.5.14 does not
ensure use of the string data type for the PHP_AUTH_PW,
PHP_AUTH_TYPE, PHP_AUTH_USER, and PHP_SELF variables,
which might allow context-dependent attackers to obtain
sensitive information from process memory by using the
integer data type with crafted values, related to a
"type confusion" vulnerability, as demonstrated by
reading a private SSL key in an Apache HTTP Server
web-hosting environment with mod_ssl and a
PHP 5.3.x mod_php.

OSVersionArchitecturePackageVersionFilename
Debian7ia64php5-ldap< 5.4.4-14+deb7u12php5-ldap_5.4.4-14+deb7u12_ia64.deb
Debian7powerpcphp5-cli< 5.4.4-14+deb7u12php5-cli_5.4.4-14+deb7u12_powerpc.deb
Debian7sparcphp5-dbg< 5.4.4-14+deb7u12php5-dbg_5.4.4-14+deb7u12_sparc.deb
Debian7kfreebsd-i386php5-pgsql< 5.4.4-14+deb7u12php5-pgsql_5.4.4-14+deb7u12_kfreebsd-i386.deb
Debian7kfreebsd-i386php5-recode< 5.4.4-14+deb7u12php5-recode_5.4.4-14+deb7u12_kfreebsd-i386.deb
Debian6i386php5-pspell< 5.3.3-7+squeeze21php5-pspell_5.3.3-7+squeeze21_i386.deb
Debian6i386php5-ldap< 5.3.3-7+squeeze21php5-ldap_5.3.3-7+squeeze21_i386.deb
Debian7armhfphp5-fpm< 5.4.4-14+deb7u12php5-fpm_5.4.4-14+deb7u12_armhf.deb
Debian6amd64php5-intl< 5.3.3-7+squeeze21php5-intl_5.3.3-7+squeeze21_amd64.deb
Debian7powerpclibapache2-mod-php5< 5.4.4-14+deb7u12libapache2-mod-php5_5.4.4-14+deb7u12_powerpc.deb
Rows per page:
1-10 of 4481

Related

osv 4
openvas 40
nessus 51
debian 5
mageia 3
ubuntu 2
securityvulns 6
redhat 6
oraclelinux 4
centos 4
prion 4
kaspersky 1
f5 4
slackware 1
amazon 4
ubuntucve 4
veracode 7
cve 4
fedora 3
debiancve 2
ibm 4
hackerone 1
checkpoint_advisories 1
freebsd 1
exploitpack 1
packetstorm 1
exploitdb 1
suse 1
rosalinux 1
osv
osv
php5 - security update
2014-07-23 00:00:00
php5 - security update
2014-07-08 00:00:00
file - security update
2014-07-31 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-0018-1)
2023-03-08 00:00:00
Debian Security Advisory DSA 2974-1 (php5 - security update)
2014-07-08 00:00:00
Debian: Security Advisory (DSA-2974-1)
2014-07-07 00:00:00
nessus
nessus
Debian DLA-18-1 : php5 security update
2015-03-26 00:00:00
Debian DSA-2974-1 : php5 - security update
2014-07-09 00:00:00
Mandriva Linux Security Advisory : php (MDVSA-2014:130)
2014-07-10 00:00:00
debian
debian
[SECURITY] [DSA 2974-1] php5 security update
2014-07-08 21:34:45
[SECURITY] [DSA 2974-1] php5 security update
2014-07-08 21:34:45
[DLA 27-1] file security update
2014-07-31 14:47:17
mageia
mageia
Updated php packages fix multiple vulnerabilities
2014-07-09 02:30:04
Updated php packages fix multiple vulnerabilities
2014-07-09 02:29:20
Updated file packages fix security vulnerabilities
2014-07-04 22:26:27
ubuntu
ubuntu
PHP vulnerabilities
2014-07-09 00:00:00
file vulnerabilities
2014-07-15 00:00:00
securityvulns
securityvulns
[USN-2276-1] PHP vulnerabilities
2014-07-14 00:00:00
file / PHP multiple security vulnerabilities
2014-07-14 00:00:00
APPLE-SA-2014-09-17-3 OS X Mavericks 10.9.5 and Security Update 2014-004
2014-09-21 00:00:00
redhat
redhat
(RHSA-2014:1013) Moderate: php security update
2014-08-06 00:00:00
(RHSA-2014:1012) Moderate: php53 and php security update
2014-08-06 00:00:00
(RHSA-2014:1766) Important: php55-php security update
2014-10-30 00:00:00
oraclelinux
oraclelinux
php security update
2014-08-06 00:00:00
php53 and php security update
2014-08-06 00:00:00
file security and bug fix update
2015-11-23 00:00:00
centos
centos
php security update
2014-08-06 14:38:20
php, php53 security update
2014-08-06 14:53:37
file, python security update
2015-11-30 19:28:42
prion
prion
Type confusion
2014-07-06 23:55:00
Command injection
2014-07-09 11:07:00
Design/Logic Flaw
2014-07-09 11:07:00
kaspersky
kaspersky
KLA10289 OSI vulnerability in PHP
2014-07-06 00:00:00
f5
f5
SOL15498 - Multiple PHP vulnerabilities
2014-08-12 00:00:00
K15498 : Multiple PHP vulnerabilities
2014-08-12 00:00:00
K17313 : PHP vulnerability CVE-2014-4721
2015-10-06 00:00:00
slackware
slackware
[slackware-security] php
2014-07-12 03:48:04
amazon
amazon
Medium: php54
2014-07-09 16:24:00
Medium: php55
2014-07-09 16:42:00
Medium: php
2014-08-21 11:15:00
ubuntucve
ubuntucve
CVE-2014-4721
2014-07-06 00:00:00
CVE-2014-3480
2014-07-09 00:00:00
CVE-2014-0207
2014-07-09 00:00:00
veracode
veracode
Information Disclosure
2019-05-02 05:04:21
Denial Of Service (DoS)
2019-05-02 05:04:19
Denial Of Service (DoS)
2019-01-15 09:02:49
cve
cve
CVE-2014-4721
2014-07-06 23:55:00
CVE-2014-3480
2014-07-09 11:07:00
CVE-2014-0207
2014-07-09 11:07:00
fedora
fedora
[SECURITY] Fedora 20 Update: php-5.5.14-1.fc20
2014-06-30 10:25:38
[SECURITY] Fedora 19 Update: php-5.5.14-1.fc19
2014-07-08 00:57:33
[SECURITY] Fedora 20 Update: file-5.19-1.fc20
2014-07-05 14:54:09
debiancve
debiancve
CVE-2014-3480
2014-07-09 11:07:00
CVE-2014-0207
2014-07-09 11:07:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in PHP as used by IBM QRadar Incident Forensics 7.2 MR2. (CVE-2014-3515, CVE-2014-4049, CVE-2014-3981, CVE-2014-0238, CVE-2014-0237, CVE-2014-4721)
2018-06-16 21:19:23
Security Bulletin: Multiple vulnerabilities in php affect IBM Flex System Manager (FSM): (CVE-2014-3597, CVE-2014-4721 and CVE-2014-5459)
2019-01-31 01:45:01
Security Bulletin: Network Intrusion Prevention System is affected by multiple D-BUS and PHP vulnerabilities (CVE-2014-3638, CVE-2014-3639, CVE-2014-3477, CVE-2014-5459, CVE-2014-3597, CVE-2014-4721)
2022-02-23 19:48:26
hackerone
hackerone
Internet Bug Bounty: SPL ArrayObject/SPLObjectStorage Unserialization Type Confusion Vulnerabilities
2014-06-20 00:00:00
checkpoint_advisories
checkpoint_advisories
PHP unserialize Call SPL ArrayObject and SPLObjectStorage Memory Corruption (CVE-2014-3515)
2014-09-21 00:00:00
freebsd
freebsd
PHP multiple vulnerabilities
2014-08-14 00:00:00
exploitpack
exploitpack
Kerio Control Unified Threat Management 9.1.0 build 10879.1.1 build 1324 - Multiple Vulnerabilities
2016-09-22 00:00:00
packetstorm
packetstorm
Kerio Control Unified Threat Management Code Execution / XSS / Memory Corruption
2016-09-22 00:00:00
exploitdb
exploitdb
Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 - Multiple Vulnerabilities
2016-09-22 00:00:00
suse
suse
Security update for php53 (important)
2016-06-21 13:08:17
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.007 Low

EPSS

Percentile

80.5%

JSON
Related for DEBIAN:DLA-0018-1:14E7A
osv4openvas40nessus51debian5mageia3ubuntu2securityvulns6redhat6oraclelinux4centos4prion4kaspersky1f54slackware1amazon4ubuntucve4veracode7cve4fedora3debiancve2ibm4hackerone1checkpoint_advisories1freebsd1exploitpack1packetstorm1exploitdb1suse1rosalinux1