CVE-2015-3329: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the pharsetinode function in pharinternal.h in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allow remote attackers to execute arbitrary code via a crafted length value in a 1 tar, 2 phar, or 3 ZIP archive...

CVE-2015-2783: Improper Restriction of Operations within the Bounds of a Memory Buffer

ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information from process memory or cause a denial of service buffer over-read and application crash via a crafted length value in conjunction with crafted serialized data ...

UBUNTU-CVE-2015-4021

The pharparsetarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that the first character of a filename is different from the \0 character, which allows remote attackers to cause a denial of service integer underflow and memory...

[SECURITY] [DSA 3280-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3280-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 07, 2015 http://www.debian.org/security/faq -...

PT-2015-3418

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.40 PHP versions 5.5.x prior to 5.5.24 PHP versions 5.6.x prior to 5.6.8 Description The issue is caused by a buffer overflow in the phar parse metadata function. This can be exploited by a remote attacker to cause a...

DSA-3280-1 php5 - security update

Bulletin has no description...

Moderate: Red Hat Security Advisory: php55 security and bug fix update

Updated php55 collection packages that fix multiple security issues and several bugs are now available as part of Red Hat Software Collections 2. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

php: use after free in phar_object.c

A use-after-free flaw was found in PHP's phar PHP Archive paths implementation. A malicious script author could possibly use this flaw to disclose certain portions of server memory...

php: use after free in phar_object.c

A use-after-free flaw was found in PHP's phar PHP Archive paths implementation. A malicious script author could possibly use this flaw to disclose certain portions of server memory...

php: buffer over-read in Phar metadata parsing

A buffer over-read flaw was found in PHP's phar PHP Archive paths implementation. A malicious script author could possibly use this flaw to disclose certain portions of server memory...

php: invalid pointer free() in phar_tar_process_metadata()

An invalid free flaw was found in the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened...

php: buffer overflow in phar_set_inode()

A buffer overflow flaw was found in the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened...

PHP phar_parse_tarfile() function integer underflow vulnerability

PHP is a general-purpose web programming language. An integer underflow vulnerability exists in the PHP pharparsetarfile function, which allows remote attackers to construct a special Phar file that can be parsed by an application to trigger an overflow and execute arbitrary code...

Fedora 20 : php-5.5.25-1.fc20 (2015-8370)

14 May 2015, PHP 5.5.25 Core: - Fixed bug 69364 PHP Multipart/form-data remote dos Vulnerability. Stas - Fixed bug 69403 strrepeat sign mismatch based memory corruption. Stas - Fixed bug 69418 CVE-2006-7243 fix regressions in 5.4+. Stas - Fixed bug 69522 heap buffer overflow in unpack. Stas - Fix...

Fedora 22 : php-5.6.9-1.fc22 (2015-8281)

14 May 2015, PHP 5.6.9 Core : - Fixed bug 69467 Wrong checked for the interface by using Trait. Laruence - Fixed bug 69420 Invalid read in zendstdgetmethod. Laruence - Fixed bug 60022 'use statement ... has no effect' depends on leading backslash. Nikita - Fixed bug 67314 Segmentation fault in...

PT-2015-3427

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.41 PHP versions 5.5.x prior to 5.5.25 PHP versions 5.6.x prior to 5.6.9 Description The issue is related to errors in number processing in the phar parse tarfile function. It allows remote attackers to cause a denial ...

Security update for php5 (important)

PHP was updated to fix three security issues. The following vulnerabilities were fixed: CVE-2015-3330: Specially crafted PHAR files could, when executed under Apache httpd 2.4 apache2handler, allow arbitrary code execution bnc928506 CVE-2015-3329: Specially crafted PHAR data could lead to...

PHP 'phar_set_inode()' function buffer overflow vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A...

Vulnerabilities in Magento Community Edition and Enterprise Edition

Magento is a professional open-source PHP e-commerce system from Magento, which provides rights management, search engine and payment gateway, etc. Magento Community Edition CE is a community edition.Magento Enterprise Edition EE is an enterprise edition. A security vulnerability exists in the...

PT-2015-6239

Name of the Vulnerable Software and Affected Versions Magento Community Edition CE version 1.9.1.0 Magento Enterprise Edition EE version 1.14.1.0 Description The issue is related to the fetchView function in the Mage Core Block Template Zend class, which does not restrict the stream wrapper used ...