Lucene search
F5SOL16954HistoryJul 14, 2015 - 12:00 a.m.
SOL16954 - Multiple PHP CDF vulnerabilities CVE-2014-0237 and CVE-2014-0238
2015-07-1400:00:00
support.f5.com
125
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.111 Low
EPSS
Percentile
94.6%
- CVE-2014-0237
The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (performance degradation) by triggering many file_printf calls. - CVE-2014-0238
The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite loop or out-of-bounds memory access) via a vector that (1) has zero length or (2) is too long.
Related
nessus
nessus
Fedora 20 : php-phpunit-PHPUnit-MockObject-1.2.3-4.fc20 / php-5.5.13-3.fc20 / etc (2014-6901)
2014-06-18 00:00:00
Mandriva Linux Security Advisory : php (MDVSA-2014:115)
2014-06-11 00:00:00
PHP 5.5.x < 5.5.13 'src/cdf.c' Multiple Vulnerabilities
2014-06-03 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: php-phpunit-PHPUnit-MockObject-1.2.3-4.fc19
2014-06-17 23:36:22
[SECURITY] Fedora 20 Update: php-phpunit-PHPUnit-MockObject-1.2.3-4.fc20
2014-06-17 23:31:30
[SECURITY] Fedora 19 Update: php-doctrine-orm-2.4.2-2.fc19
2014-06-17 23:36:22
mageia
mageia
Updated file packages fix CVE-2014-0237-8
2014-06-06 09:52:39
Updated php packages fix CVE-2014-0237-8
2014-06-06 21:54:14
openvas
openvas
PHP CDF File Parsing Denial of Service Vulnerabilities - 01 (Jun 2014)
2014-06-16 00:00:00
Fedora Update for php-doctrine-orm FEDORA-2014-6904
2014-06-23 00:00:00
Fedora Update for php-doctrine-orm FEDORA-2014-6901
2014-06-23 00:00:00
securityvulns
securityvulns
[ MDVSA-2014:116 ] file
2014-06-14 00:00:00
PHP/fileinfo/file DoS
2014-06-14 00:00:00
APPLE-SA-2014-09-17-3 OS X Mavericks 10.9.5 and Security Update 2014-004
2014-09-21 00:00:00
f5
f5
K16954 : Multiple PHP CDF vulnerabilities CVE-2014-0237 and CVE-2014-0238
2015-09-16 00:00:00
amazon
amazon
slackware
slackware
[slackware-security] php
2014-06-09 21:04:52
suse
suse
Security update for php53 (important)
2014-07-04 01:04:18
ubuntu
ubuntu
PHP updates
2014-06-25 00:00:00
PHP vulnerabilities
2014-06-23 00:00:00
osv
osv
php5 - security update
2014-06-01 00:00:00
php5 - security update
2015-01-31 00:00:00
php5 - regression update
2015-01-31 00:00:00
debian
debian
[SECURITY] [DSA 2943-1] php5 security update
2014-06-01 08:38:03
[SECURITY] [DLA 145-1] php5 security update
2015-01-31 13:08:25
[DLA 27-1] file security update
2014-07-31 14:47:17
ubuntucve
ubuntucve
CVE-2014-0237
2014-06-01 00:00:00
CVE-2014-0238
2014-06-01 00:00:00
cve
cve
CVE-2014-0237
2014-06-01 04:29:00
CVE-2014-0238
2014-06-01 04:29:00
debiancve
debiancve
CVE-2014-0237
2014-06-01 04:29:00
CVE-2014-0238
2014-06-01 04:29:00
checkpoint_advisories
checkpoint_advisories
PHP CDF File Handling Infinite Loop (CVE-2014-0238)
2014-08-03 00:00:00
prion
prion
Code injection
2014-06-01 04:29:00
Design/Logic Flaw
2014-06-01 04:29:00
ibm
ibm
redhat
redhat
(RHSA-2014:1606) Moderate: file security and bug fix update
2014-10-14 00:00:00
(RHSA-2014:1013) Moderate: php security update
2014-08-06 00:00:00
(RHSA-2014:1012) Moderate: php53 and php security update
2014-08-06 00:00:00
oraclelinux
oraclelinux
file security and bug fix update
2014-10-15 00:00:00
php security update
2014-08-06 00:00:00
php53 and php security update
2014-08-06 00:00:00
freebsd
freebsd
PHP multiple vulnerabilities
2014-08-14 00:00:00
centos
centos
file, python security update
2014-10-20 18:08:44
php security update
2014-08-06 14:38:20
php, php53 security update
2014-08-06 14:53:37
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:04:17
Denial Of Service (DoS)
2019-05-02 05:04:16
Denial Of Service (DoS)
2019-05-02 05:04:17
gentoo
gentoo
PHP: Multiple vulnerabilities
2014-08-29 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.111 Low
EPSS
Percentile
94.6%
Related for SOL16954