30 matches found
EUVD-2011-0765
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2011-0753
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in the PCNTL extension in PHP before 5.3.4, when a user-defined signal handler exists, might allow context-dependent attackers to cause a denial ...
MGASA-2022-0234 Updated php packages fix security vulnerability
CLI -Fixed bug 8575 CLI closes standard streams too early. Core -Fixed Haiku ZTS builds. Date -Fixed bug 8471 Segmentation fault when converting immutable and mutable DateTime instances created using reflection. php-fpm - Fixed bug 72185 writes empty fcgi record causing nginx 502. Mysqlnd - Fixed...
Updated php packages fix security vulnerability
CLI -Fixed bug 8575 CLI closes standard streams too early. Core -Fixed Haiku ZTS builds. Date -Fixed bug 8471 Segmentation fault when converting immutable and mutable DateTime instances created using reflection. php-fpm - Fixed bug 72185 writes empty fcgi record causing nginx 502. Mysqlnd - Fixed...
Fedora 28 : php (2018-b13b720a3d)
PHP version 7.2.4 29 Mar 2018 Core: - Fixed bug php76025 Segfault while throwing exception in errorhandler. Dmitry, Laruence - Fixed bug php76044 'date: illegal option -- -' in ./configure on FreeBSD. Anatol FPM: - Fixed bug php75605 Dumpable FPM child processes allow bypassing opcache access...
php: pcntl_exec() accepts paths with NUL character
It was found that certain PHP functions did not properly handle file names containing a NULL character. A remote attacker could possibly use this flaw to make a PHP script access unexpected files and bypass intended file system access restrictions...
Fedora 21 : php-5.6.9-1.fc21 (2015-8383)
14 May 2015, PHP 5.6.9 Core : - Fixed bug 69467 Wrong checked for the interface by using Trait. Laruence - Fixed bug 69420 Invalid read in zendstdgetmethod. Laruence - Fixed bug 60022 'use statement ... has no effect' depends on leading backslash. Nikita - Fixed bug 67314 Segmentation fault in...
Fedora 20 : php-5.5.25-1.fc20 (2015-8370)
14 May 2015, PHP 5.5.25 Core: - Fixed bug 69364 PHP Multipart/form-data remote dos Vulnerability. Stas - Fixed bug 69403 strrepeat sign mismatch based memory corruption. Stas - Fixed bug 69418 CVE-2006-7243 fix regressions in 5.4+. Stas - Fixed bug 69522 heap buffer overflow in unpack. Stas - Fix...
Fedora 22 : php-5.6.9-1.fc22 (2015-8281)
14 May 2015, PHP 5.6.9 Core : - Fixed bug 69467 Wrong checked for the interface by using Trait. Laruence - Fixed bug 69420 Invalid read in zendstdgetmethod. Laruence - Fixed bug 60022 'use statement ... has no effect' depends on leading backslash. Nikita - Fixed bug 67314 Segmentation fault in...
PT-2015-3431
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.41 PHP versions 5.5.x prior to 5.5.25 PHP versions 5.6.x prior to 5.6.9 Description The issue is related to the pcntl exec implementation in PHP, which incorrectly handles pathnames containing a x00 character. This...
Fedora 20 : php-5.5.21-1.fc20 (2015-1101)
22 Jan 2014, PHP 5.5.21 Core : - Upgraded cryptblowfish to version 1.3. Leigh - Fixed bug 60704 unlink bug with some files path. - Fixed bug 65419 Inside trait, self::class != CLASS. Julien - Fixed bug 65576 Constructor from trait conflicts with inherited constructor. dunglas at gmail dot com -...
PHP <5.3.4 PCNTL扩展拒绝服务漏洞
No description provided by source...
CVE-2011-0753
Race condition in the PCNTL extension in PHP before 5.3.4, when a user-defined signal handler exists, might allow context-dependent attackers to cause a denial of service memory corruption via a large number of concurrent signals...
Race condition
Race condition in the PCNTL extension in PHP before 5.3.4, when a user-defined signal handler exists, might allow context-dependent attackers to cause a denial of service memory corruption via a large number of concurrent signals...
CVE-2011-0753
Race condition in the PCNTL extension in PHP before 5.3.4, when a user-defined signal handler exists, might allow context-dependent attackers to cause a denial of service memory corruption via a large number of concurrent signals...
CVE-2011-0753
Race condition in the PCNTL extension in PHP before 5.3.4, when a user-defined signal handler exists, might allow context-dependent attackers to cause a denial of service memory corruption via a large number of concurrent signals...
CVE-2011-0753
CVE-2011-0753 affects the PHP PCNTL extension. A race condition occurs when a user-defined signal handler is present, enabling context-dependent attackers to cause a denial of service via memory corruption triggered by a large number of concurrent signals. The description specifies vulnerability ...
PT-2011-2609
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.4 Description A race condition exists in the PCNTL extension when a user-defined signal handler is present, potentially allowing attackers to cause a denial of service through memory corruption by sending a large numb...
CVE-2011-0753: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in the PCNTL extension in PHP before 5.3.4, when a user-defined signal handler exists, might allow context-dependent attackers to cause a denial of service memory corruption via a large number of concurrent signals...
SLES10: Security update for PHP5
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache2-modphp5 php5 php5-bcmath php5-bz2 php5-calendar php5-ctype php5-curl php5-dba php5-dbase php5-devel php5-dom php5-exif php5-fastcgi php5-ftp php5-gd...