Lucene search

K
mageiaGentoo FoundationMGASA-2013-0379
HistoryDec 20, 2013 - 1:08 a.m.

Updated php packages fix multiple security vulnerabilities

2013-12-2001:08:56
Gentoo Foundation
advisories.mageia.org
25

0.95 High

EPSS

Percentile

99.3%

Updated php packages fix security vulnerabilities: Stefan Esser discovered that PHP incorrectly parsed certificates. An attacker could use a malformed certificate to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code (CVE-2013-6420). It was discovered that PHP incorrectly handled DateInterval objects. An attacker could use this issue to cause PHP to crash, resulting in a denial of service (CVE-2013-6712).