php:8.1 security update

An update is available for module.php-pecl-apcu, php-pecl-rrd, php-pecl-zip, module.php-pecl-zip, module.php-pecl-rrd, php-pecl-apcu, php-pecl-xdebug3, module.php-pecl-xdebug3. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

SUSE CVE-2015-5590

Stack-based buffer overflow in the pharfixfilepath function in ext/phar/phar.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value, as demonstrated by mishandling...

Mageia: Security Advisory (MGASA-2018-0222)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2018-0222 Updated php packages fix security vulnerabilities

Heap Buffer Overflow READ: 1786 in exifiifaddvalue CVE-2018-10549 - Stream filter convert.iconv leads to infinite loop on invalid sequence CVE-2018-10546 - Malicious LDAP-Server Response causes Crash. CVE-2018-10548 - incomplete PHAR Fix CVE-2018-10547...

Updated php packages fix security vulnerabilities

- Heap Buffer Overflow READ: 1786 in exifiifaddvalue CVE-2018-10549 - Stream filter convert.iconv leads to infinite loop on invalid sequence CVE-2018-10546 - Malicious LDAP-Server Response causes Crash. CVE-2018-10548 - incomplete PHAR Fix CVE-2018-10547...

php: buffer overflow and stack smashing error in phar_fix_filepath

A flaw was found in the way the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened...

PHP DoS

The vulnerability of the pharfixfilepath function ext/phar/phar.c in the PHP interpreter arises due to buffer overflow in the stack. Exploiting this vulnerability may allow an attacker to cause service failures or potentially have other effects by using a value with a very long length that is not...

PHP 'phar_fix_filepath()' function stack buffer overflow vulnerability

PHP is an open source general-purpose computer scripting language. A stack-based buffer overflow vulnerability exists in the PHP 'pharfixfilepath' function, which allows remote attackers to exploit the vulnerability by submitting a special request to crash the application or execute arbitrary cod...

UBUNTU-CVE-2015-5590

Stack-based buffer overflow in the pharfixfilepath function in ext/phar/phar.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value, as demonstrated by mishandling...

PT-2015-3095

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.43 PHP versions 5.5.x prior to 5.5.27 PHP versions 5.6.x prior to 5.6.11 Description The issue is caused by a stack-based buffer overflow in the phar fix filepath function. This can be exploited by a remote attacker t...