MGASA-2014-0542 Updated php packages fix CVE-2014-8142

Updated php packages fix security vulnerability: A use-after-free flaw was found in PHP unserialize. An untrusted input could cause PHP interpreter to crash or, possibly, execute arbitrary code when processed using unserialize CVE-2014-8142. PHP has been updated to version 5.5.20, which fixes the...

Updated php packages fix CVE-2014-8142

Updated php packages fix security vulnerability: A use-after-free flaw was found in PHP unserialize. An untrusted input could cause PHP interpreter to crash or, possibly, execute arbitrary code when processed using unserialize CVE-2014-8142. PHP has been updated to version 5.5.20, which fixes the...

BELL-CVE-2014-8142 CVE-2014-8142 does not affect BellSoft software

Bulletin has no description...

CVE-2014-8142

CVE-2014-8142 is a use-after-free in PHP core (process_nested_data in var_unserializer.re) triggered by crafted serialized data with identical keys during unserialize. Affects PHP versions prior to 5.4.37, 5.5.x prior to 5.5.21, and 5.6.x prior to 5.6.5; exploitation can lead to remote code execu...

CVE-2014-8142

Use-after-free vulnerability in the processnesteddata function in ext/standard/varunserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys...

CVE-2014-8142

Use-after-free vulnerability in the processnesteddata function in ext/standard/varunserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys...

MS:45F26D8F-5A75-45C8-8142-8B5B53792D01

...