The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate that is not properly handled by the openssl_x509_parse function. (CVE-2013-6420)

Impact

None. No F5 products are vulnerable to this vulnerability.

CPENameOperatorVersion
big-ip afmeq11.3.0
big-ip afmeq11.4.0
big-ip afmeq11.4.1
big-ip afmeq11.5.0
big-ip afmeq11.5.1
big-ip analyticseq11.0.0
big-ip analyticseq11.1.0
big-ip analyticseq11.2.0
big-ip analyticseq11.2.1
big-ip analyticseq11.3.0

Name	Operator	Version
big-ip afm	eq	11.3.0
big-ip afm	eq	11.4.0
big-ip afm	eq	11.4.1
big-ip afm	eq	11.5.0
big-ip afm	eq	11.5.1
big-ip analytics	eq	11.0.0
big-ip analytics	eq	11.1.0
big-ip analytics	eq	11.2.0
big-ip analytics	eq	11.2.1
big-ip analytics	eq	11.3.0

Rows per page:

1-10 of 1721

redhat 6

packetstorm 1

nessus 35

seebug 2

cve 1

veracode 1

openvas 64

checkpoint_advisories 1

fedora 24

zdt 2

amazon 3

securityvulns 8

oraclelinux 2

f5 1

exploitpack 1

prion 1

freebsd 1

slackware 1

hackerone 1

ubuntucve 1

centos 2

exploitdb 1

osv 1

debian 1

mageia 1

ubuntu 1

suse 2

ibm 4

kaspersky 1

gentoo 1

redhat

(RHSA-2013:1826) Critical: php security update

2013-12-12 00:00:00

(RHSA-2013:1815) Critical: php security update

2013-12-11 00:00:00

(RHSA-2013:1813) Critical: php53 and php security update

2013-12-11 00:00:00

packetstorm

PHP openssl_x509_parse() Memory Corruption

2013-12-15 00:00:00

nessus

Fedora 20 : php-5.5.7-1.fc20 (2013-23164)

2013-12-20 00:00:00

Amazon Linux AMI : php54 (ALAS-2013-263)

2013-12-23 00:00:00

Amazon Linux AMI : php55 (ALAS-2013-264)

2013-12-23 00:00:00

seebug

PHP openssl_x509_parse() - Memory Corruption Vulnerability

2014-07-01 00:00:00

PHP OpenSSL Extension 'openssl_x509_parse()'内存破坏漏洞

2013-12-18 00:00:00

cve

CVE-2013-6420

2013-12-17 04:46:00

veracode

Remote Code Execution (RCE)

2019-01-15 08:53:15

openvas

Amazon Linux: Security Advisory (ALAS-2013-263)

2015-09-08 00:00:00

CentOS Update for php53 CESA-2013:1813 centos5

2013-12-17 00:00:00

CentOS Update for php CESA-2013:1813 centos6

2013-12-17 00:00:00

checkpoint_advisories

PHP OpenSSL Extension X.509 Certificate Memory Corruption (CVE-2013-6420)

2013-12-26 00:00:00

fedora

[SECURITY] Fedora 20 Update: php-5.5.7-1.fc20

2013-12-20 02:06:02

[SECURITY] Fedora 20 Update: php-5.5.12-1.fc20

2014-05-06 03:27:27

[SECURITY] Fedora 20 Update: php-5.5.11-1.fc20

2014-04-15 15:57:56

zdt

PHP openssl_x509_parse() Memory Corruption Vulnerability

2013-12-17 00:00:00

PHP openssl_x509_parse() Memory Corruption Vulnerability

2013-12-16 00:00:00

amazon

Critical: php54

2013-12-17 21:29:00

Critical: php

2013-12-17 21:29:00

Critical: php55

2013-12-17 21:29:00

securityvulns

PHP memory corruption

2013-12-30 00:00:00

Advisory 01/2013: PHP openssl_x509_parse() Memory Corruption Vulnerability

2013-12-30 00:00:00

[ MDVSA-2013:298 ] php

2013-12-24 00:00:00

oraclelinux

php53 and php security update

2013-12-10 00:00:00

php security update

2013-12-10 00:00:00

SOL15110 - PHP Vulnerability CVE-2013-6420

2014-03-27 00:00:00

exploitpack

PHP - openssl_x509_parse() Memory Corruption

2013-12-17 00:00:00

prion

Memory corruption

2013-12-17 04:46:00

freebsd

PHP5 -- memory corruption in openssl_x509_parse()

2013-12-13 00:00:00

slackware

php

2014-01-13 22:30:32

hackerone

Internet Bug Bounty: PHP openssl_x509_parse() Memory Corruption Vulnerability

2013-11-30 23:00:00

ubuntucve

CVE-2013-6420

2013-12-11 00:00:00

centos

php, php53 security update

2013-12-11 09:25:38

php security update

2013-12-11 09:34:01

exploitdb

PHP - 'openssl_x509_parse()' Memory Corruption

2013-12-17 00:00:00

osv

php5 - several

2013-12-12 00:00:00

debian

[SECURITY] [DSA 2816-1] php5 security update

2013-12-12 21:18:13

mageia

Updated php packages fix multiple security vulnerabilities

2013-12-20 01:08:56

ubuntu

PHP vulnerabilities

2013-12-12 00:00:00

suse

Security update for PHP5 (important)

2014-07-07 19:04:42

Security update for PHP5 (important)

2014-07-05 02:05:05

ibm

Security Bulletin: Vulnerabilities in PHP affect IBM Chassis Management Module (CMM) (CVE-2013-4248, CVE-2013-6420, CVE-2014-2497, CVE-2014-4049)

2019-01-31 01:55:01

Security Bulletin: Vulnerabilities in php5 affect IBM Flex System Manager (FSM): (CVE-2013-4248 CVE-2013-6420 CVE-2014-2497 CVE-2014-4049)

2019-01-31 01:30:01

Security Bulletin: Network Intrusion Prevention System is affected by curl and php5 vulnerabilities (CVE-2013-2174, CVE-2014-0015, CVE-2014-0138, CVE-2014-0139, CVE-2013-4248, CVE-2013-6420, CVE-2014-2497, CVE-2014-4049)

2022-02-23 17:14:38

kaspersky

KLA10458 Multiple vulnerabilities in HP SMH

2014-01-10 00:00:00

gentoo

PHP: Multiple vulnerabilities

2014-08-29 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

8.1 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.95 High

EPSS

Percentile

99.1%

JSON

Related for F5:K15110