Lucene search
DebianDEBIAN:DLA-94-1:92D05HistoryNov 25, 2014 - 9:53 p.m.
[SECURITY] [DLA 94-1] php5 security update
2014-11-2521:53:34
lists.debian.org
31
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.044 Low
EPSS
Percentile
92.3%
Package : php5
Version : 5.3.3-7+squeeze23
CVE ID : CVE-2014-3668 CVE-2014-3669 CVE-2014-3670 CVE-2014-3710
CVE-2014-3668
Fix bug #68027 - fix date parsing in XMLRPC lib
CVE-2014-3669
Fix bug #68044: Integer overflow in unserialize() (32-bits only)
CVE-2014-3670
Fix bug #68113 (Heap corruption in exif_thumbnail())
CVE-2014-3710
Fix bug #68283: fileinfo: out-of-bounds read in elf note headers
Additional bugfix
Fix null byte handling in LDAP bindings in ldap-fix.patch
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 7 | ia64 | php5-interbase | < 5.4.35-0+deb7u1 | php5-interbase_5.4.35-0+deb7u1_ia64.deb |
| Debian | 7 | amd64 | php5-interbase | < 5.4.35-0+deb7u1 | php5-interbase_5.4.35-0+deb7u1_amd64.deb |
| Debian | 6 | i386 | php5-mysql | < 5.3.3-7+squeeze23 | php5-mysql_5.3.3-7+squeeze23_i386.deb |
| Debian | 7 | s390x | php5-odbc | < 5.4.35-0+deb7u1 | php5-odbc_5.4.35-0+deb7u1_s390x.deb |
| Debian | 6 | i386 | libapache2-mod-php5 | < 5.3.3-7+squeeze23 | libapache2-mod-php5_5.3.3-7+squeeze23_i386.deb |
| Debian | 7 | i386 | php5-gmp | < 5.4.35-0+deb7u1 | php5-gmp_5.4.35-0+deb7u1_i386.deb |
| Debian | 7 | armel | libmagic-dev | < 5.11-2+deb7u6 | libmagic-dev_5.11-2+deb7u6_armel.deb |
| Debian | 7 | kfreebsd-amd64 | libapache2-mod-php5filter | < 5.4.35-0+deb7u1 | libapache2-mod-php5filter_5.4.35-0+deb7u1_kfreebsd-amd64.deb |
| Debian | 7 | ia64 | libmagic-dev | < 5.11-2+deb7u6 | libmagic-dev_5.11-2+deb7u6_ia64.deb |
| Debian | 7 | sparc | php5-gmp | < 5.4.35-0+deb7u1 | php5-gmp_5.4.35-0+deb7u1_sparc.deb |
Related
nessus
nessus
RHEL 6 / 7 : php (RHSA-2014:1767)
2014-10-31 00:00:00
Scientific Linux Security Update : php53 on SL5.x i386/x86_64 (20141030)
2014-11-04 00:00:00
redhat
redhat
(RHSA-2014:1768) Important: php53 security update
2014-10-30 00:00:00
(RHSA-2014:1767) Important: php security update
2014-10-30 00:00:00
(RHSA-2015:0021) Important: php security update
2015-01-08 00:00:00
oraclelinux
oraclelinux
php security update
2014-10-30 00:00:00
php53 security update
2014-10-30 00:00:00
php security update
2014-11-06 00:00:00
centos
centos
php53 security update
2014-10-31 14:37:09
php security update
2014-10-31 13:14:51
php security update
2014-11-06 18:30:07
openvas
openvas
RedHat Update for php RHSA-2014:1767-01
2014-10-31 00:00:00
Oracle: Security Advisory (ELSA-2014-1767)
2015-10-06 00:00:00
CentOS Update for php CESA-2014:1767 centos6
2014-11-01 00:00:00
securityvulns
securityvulns
[USN-2391-1] php5 vulnerabilities
2014-11-03 00:00:00
PHP memory corruption
2014-11-03 00:00:00
[ MDVSA-2014:202 ] php
2014-10-27 00:00:00
ubuntu
ubuntu
php5 vulnerabilities
2014-10-30 00:00:00
file vulnerabilities
2015-02-04 00:00:00
osv
osv
php5 - security update
2014-11-25 00:00:00
php5 - security update
2014-11-04 00:00:00
file - security update
2014-11-11 00:00:00
threatpost
threatpost
PHP Patches Buffer Overflow Vulnerabilities
2014-10-22 13:33:23
gentoo
gentoo
PHP: Multiple vulnerabilities
2014-11-09 00:00:00
file: Multiple vulnerabilities
2017-01-17 00:00:00
PHP: Multiple vulnerabilities
2015-03-08 00:00:00
ibm
ibm
f5
f5
K15866 : Multiple PHP vulnerabilities CVE-2014-3668, CVE-2014-3669, and CVE-2014-3670
2014-11-26 00:00:00
SOL15866 - Multiple PHP vulnerabilities CVE-2014-3668, CVE-2014-3669, and CVE-2014-3670
2014-11-26 00:00:00
K15898 : PHP vulnerability CVE-2014-3710
2014-12-08 00:00:00
amazon
amazon
Important: php55
2014-10-28 17:10:00
Important: php54
2014-10-28 17:09:00
Medium: file
2014-11-22 14:34:00
slackware
slackware
[slackware-security] php
2014-11-04 01:25:39
[slackware-security] php
2014-12-23 05:38:55
debian
debian
[SECURITY] [DSA 3064-1] php5 security update
2014-11-04 16:08:18
[SECURITY] [DSA 3064-1] php5 security update
2014-11-04 16:08:18
[SECURITY] [DSA 3074-1] php5 security update
2014-11-18 21:10:45
mageia
mageia
Updated php packages fix security vulnerabilities
2014-10-28 14:33:36
Updated [package] package fix CVE-2014-3710
2014-10-31 18:53:38
Updated php packages fix security vulnerability
2014-11-12 12:56:47
veracode
veracode
Memory Corruption And Code Execution
2019-05-02 05:13:12
Denial Of Service (DoS)
2019-01-15 09:02:38
Denial Of Service (DoS)
2019-05-02 05:04:21
prion
prion
Buffer overflow
2014-10-29 10:55:00
Memory corruption
2014-10-29 10:55:00
Out-of-bounds
2014-11-05 11:55:00
hackerone
hackerone
ubuntucve
ubuntucve
cve
cve
fedora
fedora
[SECURITY] Fedora 21 Update: php-5.6.2-1.fc21
2014-11-01 16:41:03
[SECURITY] Fedora 21 Update: file-5.19-7.fc21
2014-11-10 06:44:48
[SECURITY] Fedora 20 Update: php-5.5.18-1.fc20
2014-10-23 06:23:25
debiancve
debiancve
CVE-2014-3710
2014-11-05 11:55:00
checkpoint_advisories
checkpoint_advisories
PHP exif Extension exif_ifd_make_value Thumbnail Heap Buffer Overflow (CVE-2014-3670)
2014-12-02 00:00:00
PHP Core unserialize Function Integer Overflow (CVE-2014-3669)
2014-11-25 00:00:00
archlinux
archlinux
file: denial of service through out-of-bounds read
2014-11-12 00:00:00
php: denial of service
2014-11-13 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:28.file
2014-12-10 00:00:00
freebsd
freebsd
file -- multiple vulnerabilities
2014-12-16 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.044 Low
EPSS
Percentile
92.3%
Related for DEBIAN:DLA-94-1:92D05