Lucene search
Gentoo FoundationMGASA-2014-0441HistoryNov 12, 2014 - 12:56 p.m.
Updated php packages fix security vulnerability
2014-11-1212:56:47
Gentoo Foundation
advisories.mageia.org
8
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.044 Low
EPSS
Percentile
92.3%
An out-of-bounds read flaw was found in file’s donote() function in the way the file utility determined the note headers of a elf file. This could possibly lead to file executable crash (CVE-2014-3710). PHP uses an embedded copy of file’s libmagic library, and was therefore affected. It has been patched to correct this issue. This update also provides an updated php-timezonedb.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 3 | noarch | php | < 5.4.34-1.1 | php-5.4.34-1.1.mga3 |
| Mageia | 3 | noarch | php-timezonedb | < 2014.9-1 | php-timezonedb-2014.9-1.mga3 |
| Mageia | 4 | noarch | php | < 5.5.18-1.2 | php-5.5.18-1.2.mga4 |
| Mageia | 4 | noarch | php-timezonedb | < 2014.9-1 | php-timezonedb-2014.9-1.mga4 |
Related
prion
prion
Out-of-bounds
2014-11-05 11:55:00
nessus
nessus
Debian DLA-86-1 : file security update
2015-03-26 00:00:00
Fedora 21 : file-5.19-7.fc21 (2014-13535)
2014-11-11 00:00:00
PHP 5.6.x < 5.6.3 'donote' DoS
2014-11-14 00:00:00
ubuntucve
ubuntucve
CVE-2014-3710
2014-10-24 00:00:00
debian
debian
[SECURITY] [DLA 86-1] file security update
2014-11-12 16:17:29
[SECURITY] [DSA 3074-1] php5 security update
2014-11-18 21:10:45
[SECURITY] [DSA 3072-1] file security update
2014-11-12 09:19:45
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2014-450)
2015-09-08 00:00:00
Debian Security Advisory DSA 3072-1 (file - security update)
2014-11-11 00:00:00
Debian: Security Advisory (DSA-3072-1)
2014-11-10 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: file-5.19-7.fc21
2014-11-10 06:44:48
[SECURITY] Fedora 20 Update: file-5.19-7.fc20
2014-10-29 11:03:54
f5
f5
K15898 : PHP vulnerability CVE-2014-3710
2014-12-08 00:00:00
SOL15898 - PHP vulnerability CVE-2014-3710
2014-12-08 00:00:00
debiancve
debiancve
CVE-2014-3710
2014-11-05 11:55:00
amazon
amazon
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:04:21
Denial Of Service (DoS)
2019-05-02 05:04:17
Denial Of Service (DoS)
2019-05-02 05:04:17
mageia
mageia
Updated [package] package fix CVE-2014-3710
2014-10-31 18:53:38
osv
osv
php5 - security update
2014-11-18 00:00:00
file - security update
2014-11-11 00:00:00
php5 - security update
2014-11-25 00:00:00
cve
cve
CVE-2014-3710
2014-11-05 11:55:00
archlinux
archlinux
file: denial of service through out-of-bounds read
2014-11-12 00:00:00
php: denial of service
2014-11-13 00:00:00
securityvulns
securityvulns
[slackware-security] php (SSA:2014-356-02)
2014-12-23 00:00:00
PHP/fileinfo/file DoS
2014-06-14 00:00:00
FreeBSD Security Advisory FreeBSD-SA-14:28.file
2014-12-10 00:00:00
slackware
slackware
[slackware-security] php
2014-12-23 05:38:55
ubuntu
ubuntu
file vulnerabilities
2015-02-04 00:00:00
php5 vulnerabilities
2014-10-30 00:00:00
freebsd
freebsd
file -- multiple vulnerabilities
2014-12-16 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:28.file
2014-12-10 00:00:00
oraclelinux
oraclelinux
php security update
2014-10-30 00:00:00
php53 security update
2014-10-30 00:00:00
file security, bug fix, and enhancement update
2016-05-12 00:00:00
centos
centos
php53 security update
2014-10-31 14:37:09
php security update
2014-10-31 13:14:51
file, python security update
2016-05-16 10:13:44
redhat
redhat
(RHSA-2014:1767) Important: php security update
2014-10-30 00:00:00
(RHSA-2014:1768) Important: php53 security update
2014-10-30 00:00:00
(RHSA-2016:0760) Moderate: file security, bug fix, and enhancement update
2016-05-10 06:42:18
gentoo
gentoo
file: Multiple vulnerabilities
2017-01-17 00:00:00
PHP: Multiple vulnerabilities
2015-03-08 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in file affect IBM Security Network Protection
2018-06-16 21:43:49
Security Bulletin: File vulnerabilities affect IBM SmartClound Entry
2020-07-19 00:49:12
Security Bulletin: Multiple vulnerabilities in file affect PowerKVM
2018-06-18 01:30:43
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.044 Low
EPSS
Percentile
92.3%
Related for MGASA-2014-0441