Lucene search
Gentoo FoundationMGASA-2015-0134HistoryApr 04, 2015 - 2:13 p.m.
Updated php and libzip packages fix security vulnerabilities
2015-04-0414:13:35
Gentoo Foundation
advisories.mageia.org
33
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.951
Percentile
99.4%
Heap overflow vulnerability in regcomp.c in the ereg extension in PHP before 5.5.23 on 32-bit systems (CVE-2015-2305). Integer overflow in zip extension in PHP before 5.5.23 leads to writing past heap boundary (CVE-2015-2331). Use after free vulnerability in unserialize() in PHP before 5.5.23 (CVE-2015-2787). PHP has been updated to version 5.5.23, which fixes these issues and other bugs. The php zip extension uses the libzip library, so it has been patched to fix CVE-2015-2331.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 4 | noarch | php | < 5.5.23-1 | php-5.5.23-1.mga4 |
| Mageia | 4 | noarch | php-apc | < 3.1.15-4.13 | php-apc-3.1.15-4.13.mga4 |
| Mageia | 4 | noarch | libzip | < 0.11.2-1.1 | libzip-0.11.2-1.1.mga4 |
Related
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0134)
2022-01-28 00:00:00
Fedora Update for php FEDORA-2015-4236
2015-03-31 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-507)
2015-09-08 00:00:00
nessus
nessus
Fedora 22 : php-5.6.7-2.fc22 (2015-4255)
2015-03-27 00:00:00
Fedora 21 : php-5.6.7-1.fc21 (2015-4236)
2015-03-31 00:00:00
Amazon Linux AMI : php56 (ALAS-2015-508)
2015-04-17 00:00:00
kaspersky
kaspersky
KLA10515 Multiple vulnerabilities in PHP and extensions
2015-03-30 00:00:00
KLA10514 Multiple vulnerabilities in PHP and plugins
2015-03-30 00:00:00
amazon
amazon
Important: php54
2015-04-15 21:49:00
Important: php56
2015-04-15 21:50:00
Important: php55
2015-04-15 21:49:00
freebsd
freebsd
Several vulnerabilities found in PHP
2015-03-19 00:00:00
libzip -- integer overflow
2015-03-18 00:00:00
clamav -- multiple vulnerabilities
2015-04-29 00:00:00
ubuntucve
ubuntucve
hackerone
hackerone
Internet Bug Bounty: Use After Free Vulnerability in unserialize()
2015-02-03 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: mingw-libzip-0.11.2-3.fc21
2015-04-05 14:31:52
[SECURITY] Fedora 20 Update: mingw-libzip-0.11.2-3.fc20
2015-04-05 14:33:09
[SECURITY] Fedora 20 Update: libzip-0.11.2-5.fc20
2015-04-21 19:00:28
cvelist
cvelist
prion
prion
Integer overflow
2015-03-30 10:59:00
Integer overflow
2015-03-30 10:59:00
Design/Logic Flaw
2015-03-30 10:59:00
nvd
nvd
archlinux
archlinux
php: integer overflow
2015-03-28 00:00:00
clamav: multiple issues
2015-05-03 00:00:00
checkpoint_advisories
checkpoint_advisories
PHP Group PHP ZIP Integer Overflow (CVE-2015-2331)
2015-04-14 00:00:00
debiancve
debiancve
CVE-2015-2331
2015-03-30 10:59:12
CVE-2015-2305
2015-03-30 10:59:11
cve
cve
f5
f5
SOL16831 - BSD regex library vulnerability CVE-2015-2305
2015-07-01 00:00:00
K16831 : BSD regex library vulnerability CVE-2015-2305
2015-07-01 00:00:00
SOL16714 - PHP vulnerabilities CVE-2015-2301 and CVE-2015-2331
2015-06-08 00:00:00
veracode
veracode
Heap-based Buffer Overflow
2019-05-02 05:39:23
Denial Of Service (DoS)
2019-05-02 05:39:23
Arbitrary File Write
2019-05-02 05:39:23
ubuntu
ubuntu
PHP vulnerabilities
2015-04-20 00:00:00
ClamAV vulnerabilities
2015-05-05 00:00:00
debian
debian
[SECURITY] [DSA 3198-2] php5 regression update
2015-03-28 18:47:31
[SECURITY] [DSA 3198-2] php5 regression update
2015-03-28 18:47:31
[SECURITY] [DSA 3198-1] php5 security update
2015-03-20 17:31:08
rosalinux
rosalinux
Advisory ROSA-SA-2021-1907
2021-07-02 17:26:08
osv
osv
php5 - regression update
2015-03-20 00:00:00
php5 - security update
2015-03-20 00:00:00
php5 - security update
2016-02-29 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3198-1] php5 security update
2015-03-21 00:00:00
PHP multiple security vulnerabilities
2015-03-21 00:00:00
[ MDVSA-2015:221 ] clamav
2015-05-04 00:00:00
slackware
slackware
[slackware-security] php
2015-04-22 01:22:40
suse
suse
Security update for php5 (important)
2015-05-13 15:07:04
mageia
mageia
Updated clamav packages fix security vulnerabilities
2015-05-05 16:36:50
redhat
redhat
(RHSA-2015:1053) Moderate: php55 security and bug fix update
2015-06-04 00:00:00
(RHSA-2015:1066) Important: php54 security and bug fix update
2015-06-04 00:00:00
oraclelinux
oraclelinux
php55 security and bug fix update
2016-02-04 00:00:00
php54 security and bug fix update
2016-02-04 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.951
Percentile
99.4%
Related for MGASA-2015-0134