Lucene search
Gentoo FoundationMGASA-2015-0169HistoryApr 25, 2015 - 11:15 p.m.
Updated php packages fix security vulnerabilities
2015-04-2523:15:07
Gentoo Foundation
advisories.mageia.org
19
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.681
Percentile
98.0%
Updated php packages fix security vulnerabilities: Buffer Over-read in unserialize when parsing Phar (CVE-2015-2783). Buffer Overflow when parsing tar/zip/phar in phar_set_inode (CVE-2015-3329). Potential remote code execution with apache 2.4 apache2handler (CVE-2015-3330). PHP has been updated to version 5.5.24, which fixes these issues and other bugs.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 4 | noarch | php | < 5.5.24-1 | php-5.5.24-1.mga4 |
| Mageia | 4 | noarch | php-apc | < 3.1.15-4.14 | php-apc-3.1.15-4.14.mga4 |
| Mageia | 4 | noarch | php-timezonedb | < 2015.3-1 | php-timezonedb-2015.3-1.mga4 |
Related
nessus
nessus
Mandriva Linux Security Advisory : php (MDVSA-2015:209)
2015-04-28 00:00:00
openSUSE Security Update : php5 (openSUSE-2015-352)
2015-05-13 00:00:00
Ubuntu 14.04 LTS : PHP vulnerabilities (USN-2572-1)
2015-04-21 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0169)
2022-01-28 00:00:00
openSUSE: Security Advisory for php5 (openSUSE-SU-2015:0855-1)
2015-06-09 00:00:00
Ubuntu: Security Advisory (USN-2572-1)
2015-04-21 00:00:00
securityvulns
securityvulns
PHP security vulnerabilities
2015-05-05 00:00:00
[ MDVSA-2015:209 ] php
2015-05-05 00:00:00
[SECURITY] [DSA 3280-1] php5 security update
2015-06-08 00:00:00
suse
suse
Security update for php5 (important)
2015-05-12 17:05:25
Security update for php5 (important)
2015-05-13 15:07:04
Security update for php53 (important)
2016-06-21 13:08:17
ubuntu
ubuntu
PHP vulnerabilities
2015-04-20 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: php-5.6.8-1.fc22
2015-04-22 22:52:07
[SECURITY] Fedora 20 Update: php-5.5.24-1.fc20
2015-04-27 08:39:40
[SECURITY] Fedora 21 Update: php-5.6.8-1.fc21
2015-04-23 16:11:13
ubuntucve
ubuntucve
prion
prion
Code injection
2015-06-09 18:59:00
Stack overflow
2015-06-09 18:59:00
Design/Logic Flaw
2015-06-09 18:59:00
cvelist
cvelist
cve
cve
f5
f5
K35239571 : PHP vulnerability CVE-2015-3329
2016-07-05 00:00:00
SOL35239571 - PHP vulnerability CVE-2015-3329
2016-07-05 00:00:00
SOL17200 - PHP vulnerability CVE-2015-2783
2015-09-08 00:00:00
nvd
nvd
amazon
amazon
hackerone
hackerone
Internet Bug Bounty: Buffer Over flow when parsing tar/zip/phar in phar_set_inode
2015-04-14 00:00:00
Internet Bug Bounty: Buffer Over-read in unserialize when parsing Phar
2015-03-29 00:00:00
veracode
veracode
Denial Of Service
2019-01-15 09:06:21
Heap-based Buffer Overflow
2019-05-02 05:39:55
Arbitrary File Write
2019-05-02 05:39:55
debian
debian
[SECURITY] [DLA 212-1] php5 security update
2015-04-29 20:45:33
[SECURITY] [DSA 3280-1] php5 security update
2015-06-07 17:06:52
osv
osv
php5 - security update
2015-04-29 00:00:00
php5 - security update
2015-06-07 00:00:00
checkpoint_advisories
checkpoint_advisories
PHP Multiple Function Stack Buffer Overflow (CVE-2015-3329; CVE-2016-10159)
2015-07-23 00:00:00
slackware
slackware
[slackware-security] php
2015-04-22 01:22:40
archlinux
archlinux
php: multiple issues
2015-04-17 00:00:00
redhat
redhat
(RHSA-2015:1186) Important: php55-php security update
2015-06-25 00:00:00
(RHSA-2015:1187) Important: rh-php56-php security update
2015-06-25 00:00:00
(RHSA-2015:1066) Important: php54 security and bug fix update
2015-06-04 00:00:00
oraclelinux
oraclelinux
php55-php security update
2016-02-04 00:00:00
php54 security and bug fix update
2016-02-04 00:00:00
php security update
2015-07-09 00:00:00
freebsd
freebsd
Several vulnerabilities found in PHP
2015-04-16 00:00:00
centos
centos
php security update
2015-06-24 03:28:02
php security update
2015-07-09 19:23:41
gentoo
gentoo
PHP: Multiple vulnerabilities
2016-06-19 00:00:00
ibm
ibm
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45
cloudlinux
cloudlinux
Fix of 227 CVE
2020-10-15 12:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.681
Percentile
98.0%
Related for MGASA-2015-0169