python2: multiple issues

CVE-2013-1752 denial of service Multiple unbound readline flaws in python stdlib were found, which can lead to excessive memory usage if a malicious or broken server sends excessively long lines without any line breaks. - CVE-2013-1753 denial of service The XMLRPC library is vulnerable to...

Tapatalk < 5.2.2 Blind SQLi Vulnerability

Tapatalk is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tapatalk:tapatalk"; if...

OracleVM 3.1 : xen (OVMSA-2012-0046)

The remote OracleVM system is missing necessary patches to address critical security updates : - Xen Security Advisory CVE-2012-4411 / XSA-19 version 2 guest administrator can access qemu monitor console Disable qemu monitor by default. The qemu monitor is an overly powerful feature which must be...

SuSE 11.3 Security Update : php53 (SAT Patch Number 9916)

This update fixes the following vulnerabilities in php : - Heap corruption issue in exifthumbnail. CVE-2014-3670 - Integer overflow in unserialize. CVE-2014-3669 - Xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime. CVE-2014-3668 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

php: xmlrpc ISO8601 date format parsing buffer overflow

A stack-based buffer overflow flaw was found in the way the xmlrpc extension parsed dates in the ISO 8601 format. A specially crafted XML-RPC request or response could possibly cause a PHP application to crash or execute arbitrary code with the privileges of the user running that PHP application...

php: xmlrpc ISO8601 date format parsing buffer overflow

A stack-based buffer overflow flaw was found in the way the xmlrpc extension parsed dates in the ISO 8601 format. A specially crafted XML-RPC request or response could possibly cause a PHP application to crash or execute arbitrary code with the privileges of the user running that PHP application...

Scientific Linux Security Update : php53 on SL5.x i386/x86_64 (20141030)

A buffer overflow flaw was found in the Exif extension. A specially crafted JPEG or TIFF file could cause a PHP application using the exifthumbnail function to crash or, possibly, execute arbitrary code with the privileges of the user running that PHP application. CVE-2014-3670 An integer overflo...

Fedora 21 : php-5.6.2-1.fc21 (2014-12983)

16 Oct 2014, PHP 5.6.2 Core : - Fixed bug 68044 Integer overflow in unserialize 32-bits only. CVE-2014-3669 Stas cURL : - Fixed bug 68089 NULL byte injection - cURL lib. Stas EXIF : - Fixed bug 68113 Heap corruption in exifthumbnail. CVE-2014-3670 Stas XMLRPC : - Fixed bug 68027 Global buffer...

PHP memory corruption

exifthumbnail memory corruption on JPEG parsing. XMLRPC buffer overflow. objectcustom function integer overflow...

[USN-2391-1] php5 vulnerabilities

========================================================================== Ubuntu Security Notice USN-2391-1 October 30, 2014 php5 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Oracle Linux 6 / 7 : php (ELSA-2014-1767)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1767 advisory. - fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710 - xmlrpc: fix out-of-bounds read flaw in mkgmtime CVE-2014-3668 - core: fix...

Oracle Linux 5 : php53 (ELSA-2014-1768)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1768 advisory. - fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710 - xmlrpc: fix out-of-bounds read flaw in mkgmtime CVE-2014-3668 - core: fix integ...

php: xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime()

An out of bounds read flaw was found in the way the xmlrpc extension parsed dates in the ISO 8601 format. A specially crafted XML-RPC request or response could possibly cause a PHP application to crash...

php: xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime()

An out of bounds read flaw was found in the way the xmlrpc extension parsed dates in the ISO 8601 format. A specially crafted XML-RPC request or response could possibly cause a PHP application to crash...

php security update

5.4.16-23.3 - fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710 5.4.16-23.2 - xmlrpc: fix out-of-bounds read flaw in mkgmtime CVE-2014-3668 - core: fix integer overflow in unserialize CVE-2014-3669 - exif: fix heap corruption issue in exifthumbnail CVE-2014-3670...

php53 security update

5.3.3-26 - fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710 5.3.3-25 - xmlrpc: fix out-of-bounds read flaw in mkgmtime CVE-2014-3668 - core: fix integer overflow in unserialize CVE-2014-3669 - exif: fix heap corruption issue in exifthumbnail CVE-2014-3670...

CVE-2014-3668

Buffer overflow in the datefromISO8601 function in the mkgmtime implementation in libxmlrpc/xmlrpc.c in the XMLRPC extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to cause a denial of service application crash via 1 a crafted first argument to t...

CVE-2014-3668

CVE-2014-3668 affects PHP’s XMLRPC extension (libxmlrpc/xmlrpc.c: mkgmtime date_from_ISO8601). A crafted first arg to xmlrpc_set_type or a crafted arg to xmlrpc_decode can trigger an out-of-bounds read, causing a denial of service (application crash); may enable code execution per some advisories...

CVE-2014-3668

Buffer overflow in the datefromISO8601 function in the mkgmtime implementation in libxmlrpc/xmlrpc.c in the XMLRPC extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to cause a denial of service application crash via 1 a crafted first argument to t...

Fedora 19 : php-5.5.18-1.fc19 (2014-13031)

16 Oct 2014, PHP 5.5.18 Core : - Fixed bug 67985 Incorrect last used array index copied to new array after unset. Tjerk - Fixed bug 67739 Windows 8.1/Server 2012 R2 OS build number reported as 6.2 instead of 6.3. Christian Wenz - Fixed bug 67633 A foreach on an array returned from a function not...