27 matches found
EUVD-2011-0765
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2011-0753
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in the PCNTL extension in PHP before 5.3.4, when a user-defined signal handler exists, might allow context-dependent attackers to cause a denial ...
MGASA-2022-0234 Updated php packages fix security vulnerability
CLI -Fixed bug 8575 CLI closes standard streams too early. Core -Fixed Haiku ZTS builds. Date -Fixed bug 8471 Segmentation fault when converting immutable and mutable DateTime instances created using reflection. php-fpm - Fixed bug 72185 writes empty fcgi record causing nginx 502. Mysqlnd - Fixed...
Updated php packages fix security vulnerability
CLI -Fixed bug 8575 CLI closes standard streams too early. Core -Fixed Haiku ZTS builds. Date -Fixed bug 8471 Segmentation fault when converting immutable and mutable DateTime instances created using reflection. php-fpm - Fixed bug 72185 writes empty fcgi record causing nginx 502. Mysqlnd - Fixed...
Fedora 28 : php (2018-b13b720a3d)
PHP version 7.2.4 29 Mar 2018 Core: - Fixed bug php76025 Segfault while throwing exception in errorhandler. Dmitry, Laruence - Fixed bug php76044 'date: illegal option -- -' in ./configure on FreeBSD. Anatol FPM: - Fixed bug php75605 Dumpable FPM child processes allow bypassing opcache access...
php: pcntl_exec() accepts paths with NUL character
It was found that certain PHP functions did not properly handle file names containing a NULL character. A remote attacker could possibly use this flaw to make a PHP script access unexpected files and bypass intended file system access restrictions...
Fedora 21 : php-5.6.9-1.fc21 (2015-8383)
14 May 2015, PHP 5.6.9 Core : - Fixed bug 69467 Wrong checked for the interface by using Trait. Laruence - Fixed bug 69420 Invalid read in zendstdgetmethod. Laruence - Fixed bug 60022 'use statement ... has no effect' depends on leading backslash. Nikita - Fixed bug 67314 Segmentation fault in...
Fedora 20 : php-5.5.25-1.fc20 (2015-8370)
14 May 2015, PHP 5.5.25 Core: - Fixed bug 69364 PHP Multipart/form-data remote dos Vulnerability. Stas - Fixed bug 69403 strrepeat sign mismatch based memory corruption. Stas - Fixed bug 69418 CVE-2006-7243 fix regressions in 5.4+. Stas - Fixed bug 69522 heap buffer overflow in unpack. Stas - Fix...
Fedora 22 : php-5.6.9-1.fc22 (2015-8281)
14 May 2015, PHP 5.6.9 Core : - Fixed bug 69467 Wrong checked for the interface by using Trait. Laruence - Fixed bug 69420 Invalid read in zendstdgetmethod. Laruence - Fixed bug 60022 'use statement ... has no effect' depends on leading backslash. Nikita - Fixed bug 67314 Segmentation fault in...
Fedora 20 : php-5.5.21-1.fc20 (2015-1101)
22 Jan 2014, PHP 5.5.21 Core : - Upgraded cryptblowfish to version 1.3. Leigh - Fixed bug 60704 unlink bug with some files path. - Fixed bug 65419 Inside trait, self::class != CLASS. Julien - Fixed bug 65576 Constructor from trait conflicts with inherited constructor. dunglas at gmail dot com -...
PHP <5.3.4 PCNTL扩展拒绝服务漏洞
No description provided by source...
CVE-2011-0753
Race condition in the PCNTL extension in PHP before 5.3.4, when a user-defined signal handler exists, might allow context-dependent attackers to cause a denial of service memory corruption via a large number of concurrent signals...
Race condition
Race condition in the PCNTL extension in PHP before 5.3.4, when a user-defined signal handler exists, might allow context-dependent attackers to cause a denial of service memory corruption via a large number of concurrent signals...
CVE-2011-0753
Race condition in the PCNTL extension in PHP before 5.3.4, when a user-defined signal handler exists, might allow context-dependent attackers to cause a denial of service memory corruption via a large number of concurrent signals...
CVE-2011-0753
CVE-2011-0753 affects the PHP PCNTL extension. A race condition occurs when a user-defined signal handler is present, enabling context-dependent attackers to cause a denial of service via memory corruption triggered by a large number of concurrent signals. The description specifies vulnerability ...
CVE-2011-0753
Race condition in the PCNTL extension in PHP before 5.3.4, when a user-defined signal handler exists, might allow context-dependent attackers to cause a denial of service memory corruption via a large number of concurrent signals...
SLES10: Security update for PHP5
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache2-modphp5 php5 php5-bcmath php5-bz2 php5-calendar php5-ctype php5-curl php5-dba php5-dbase php5-devel php5-dom php5-exif php5-fastcgi php5-ftp php5-gd...
SLES10: Security update for PHP5
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache2-modphp5 php5 php5-bcmath php5-bz2 php5-calendar php5-ctype php5-curl php5-dba php5-dbase php5-devel php5-dom php5-exif php5-fastcgi php5-ftp php5-gd...
SLES11: Security update for PHP5
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache2-modphp5 php5 php5-bcmath php5-bz2 php5-calendar php5-ctype php5-curl php5-dba php5-dbase php5-dom php5-exif php5-fastcgi php5-ftp php5-gd php5-gettex...
SLES10: Security update for PHP5
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache2-modphp5 php5 php5-bcmath php5-bz2 php5-calendar php5-ctype php5-curl php5-dba php5-dbase php5-devel php5-dom php5-exif php5-fastcgi php5-ftp php5-gd...