CVE-2014-3710

2014-10-2400:00:00

ubuntu.com

8.2 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.044 Low

EPSS

Percentile

92.3%

JSON

The donote function in readelf.c in file through 5.20, as used in the
Fileinfo component in PHP 5.4.34, does not ensure that sufficient note
headers are present, which allows remote attackers to cause a denial of
service (out-of-bounds read and application crash) via a crafted ELF file.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchfile< 5.03-5ubuntu1.5UNKNOWN
ubuntu12.04noarchfile< 5.09-2ubuntu0.6UNKNOWN
ubuntu14.04noarchfile< 1:5.14-2ubuntu3.3UNKNOWN
ubuntu14.10noarchfile< 1:5.19-1ubuntu1.2UNKNOWN
ubuntu10.04noarchphp5< 5.3.2-1ubuntu4.28UNKNOWN
ubuntu12.04noarchphp5< 5.3.10-1ubuntu3.15UNKNOWN
ubuntu14.04noarchphp5< 5.5.9+dfsg-1ubuntu4.5UNKNOWN
ubuntu14.10noarchphp5< 5.5.12+dfsg-2ubuntu4.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	file	< 5.03-5ubuntu1.5	UNKNOWN
ubuntu	12.04	noarch	file	< 5.09-2ubuntu0.6	UNKNOWN
ubuntu	14.04	noarch	file	< 1:5.14-2ubuntu3.3	UNKNOWN
ubuntu	14.10	noarch	file	< 1:5.19-1ubuntu1.2	UNKNOWN
ubuntu	10.04	noarch	php5	< 5.3.2-1ubuntu4.28	UNKNOWN
ubuntu	12.04	noarch	php5	< 5.3.10-1ubuntu3.15	UNKNOWN
ubuntu	14.04	noarch	php5	< 5.5.9+dfsg-1ubuntu4.5	UNKNOWN
ubuntu	14.10	noarch	php5	< 5.5.12+dfsg-2ubuntu4.1	UNKNOWN