Lucene search

RedhatCVE-2014-3669

HistoryOct 29, 2014 - 10:55 a.m.

CVE-2014-3669

2014-10-2910:55:03

CWE-189

redhat

web.nvd.nist.gov

168

cve

php

integer overflow

remote attackers

denial of service

arbitrary code

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

9.3

Confidence

High

EPSS

0.937

Percentile

99.1%

JSON

Integer overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an argument to the unserialize function that triggers calculation of a large length value.

Affected configurations

Nvd

Node

phpphpRange≤5.4.33

phpphpMatch5.4.0

phpphpMatch5.4.1

phpphpMatch5.4.2

phpphpMatch5.4.3

phpphpMatch5.4.4

phpphpMatch5.4.5

phpphpMatch5.4.6

phpphpMatch5.4.7

phpphpMatch5.4.8

phpphpMatch5.4.9

phpphpMatch5.4.10

phpphpMatch5.4.11

phpphpMatch5.4.12

phpphpMatch5.4.12rc1

phpphpMatch5.4.12rc2

phpphpMatch5.4.13

phpphpMatch5.4.13rc1

phpphpMatch5.4.14

phpphpMatch5.4.14rc1

phpphpMatch5.4.15rc1

phpphpMatch5.4.16rc1

phpphpMatch5.4.17

phpphpMatch5.4.18

phpphpMatch5.4.19

phpphpMatch5.4.20

phpphpMatch5.4.21

phpphpMatch5.4.22

phpphpMatch5.4.23

phpphpMatch5.4.24

phpphpMatch5.4.25

phpphpMatch5.4.26

phpphpMatch5.4.27

phpphpMatch5.4.28

phpphpMatch5.4.29

phpphpMatch5.4.30

phpphpMatch5.4.31

phpphpMatch5.4.32

phpphpMatch5.5.0

phpphpMatch5.5.0alpha1

phpphpMatch5.5.0alpha2

phpphpMatch5.5.0alpha3

phpphpMatch5.5.0alpha4

phpphpMatch5.5.0alpha5

phpphpMatch5.5.0alpha6

phpphpMatch5.5.0beta1

phpphpMatch5.5.0beta2

phpphpMatch5.5.0beta3

phpphpMatch5.5.0beta4

phpphpMatch5.5.0rc1

phpphpMatch5.5.0rc2

phpphpMatch5.5.1

phpphpMatch5.5.2

phpphpMatch5.5.3

phpphpMatch5.5.4

phpphpMatch5.5.5

phpphpMatch5.5.6

phpphpMatch5.5.7

phpphpMatch5.5.8

phpphpMatch5.5.9

phpphpMatch5.5.10

phpphpMatch5.5.11

phpphpMatch5.5.12

phpphpMatch5.5.13

phpphpMatch5.5.14

phpphpMatch5.5.15

phpphpMatch5.5.16

phpphpMatch5.5.17

phpphpMatch5.6.0

phpphpMatch5.6.1

VendorProductVersionCPE
phpphp*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
phpphp5.4.0cpe:2.3:a:php:php:5.4.0:*:*:*:*:*:*:*
phpphp5.4.1cpe:2.3:a:php:php:5.4.1:*:*:*:*:*:*:*
phpphp5.4.2cpe:2.3:a:php:php:5.4.2:*:*:*:*:*:*:*
phpphp5.4.3cpe:2.3:a:php:php:5.4.3:*:*:*:*:*:*:*
phpphp5.4.4cpe:2.3:a:php:php:5.4.4:*:*:*:*:*:*:*
phpphp5.4.5cpe:2.3:a:php:php:5.4.5:*:*:*:*:*:*:*
phpphp5.4.6cpe:2.3:a:php:php:5.4.6:*:*:*:*:*:*:*
phpphp5.4.7cpe:2.3:a:php:php:5.4.7:*:*:*:*:*:*:*
phpphp5.4.8cpe:2.3:a:php:php:5.4.8:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
php	php	*	cpe:2.3:a:php:php::::::::
php	php	5.4.0	cpe:2.3:a:php:php:5.4.0:::::::*
php	php	5.4.1	cpe:2.3:a:php:php:5.4.1:::::::*
php	php	5.4.2	cpe:2.3:a:php:php:5.4.2:::::::*
php	php	5.4.3	cpe:2.3:a:php:php:5.4.3:::::::*
php	php	5.4.4	cpe:2.3:a:php:php:5.4.4:::::::*
php	php	5.4.5	cpe:2.3:a:php:php:5.4.5:::::::*
php	php	5.4.6	cpe:2.3:a:php:php:5.4.6:::::::*
php	php	5.4.7	cpe:2.3:a:php:php:5.4.7:::::::*
php	php	5.4.8	cpe:2.3:a:php:php:5.4.8:::::::*