Lucene search
RedhatCVELIST:CVE-2014-8626HistoryNov 23, 2014 - 2:00 a.m.
CVE-2014-8626
2014-11-2302:00:00
redhat
www.cve.org
1
Stack-based buffer overflow in the date_from_ISO8601 function in ext/xmlrpc/libxmlrpc/xmlrpc.c in PHP before 5.2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by including a timezone field in a date, leading to improper XML-RPC encoding.
References
git.php.net/?p=php-src.git%3Ba=commit%3Bh=c818d0d01341907fee82bdb81cab07b7d93bb9db
openwall.com/lists/oss-security/2014/11/06/3
php.net/ChangeLog-5.php
rhn.redhat.com/errata/RHSA-2014-1824.html
rhn.redhat.com/errata/RHSA-2014-1825.html
www.securityfocus.com/bid/70928
bugs.php.net/bug.php?id=45226
bugzilla.redhat.com/show_bug.cgi?id=1155607
Related
redhat
redhat
(RHSA-2014:1825) Critical: php security update
2014-11-06 00:00:00
(RHSA-2014:1824) Important: php security update
2014-11-06 00:00:00
cve
cve
CVE-2014-8626
2014-11-23 02:59:00
prion
prion
Stack overflow
2014-11-23 02:59:00
ubuntucve
ubuntucve
CVE-2014-8626
2014-11-23 00:00:00
openvas
openvas
PHP Multiple Buffer Overflow Vulnerabilities (Jan 2015)
2015-01-06 00:00:00
Oracle: Security Advisory (ELSA-2014-1824)
2015-10-06 00:00:00
RedHat Update for php RHSA-2014:1824-01
2014-11-07 00:00:00
nvd
nvd
CVE-2014-8626
2014-11-23 02:59:00
veracode
veracode
Memory Corruption And Code Execution
2019-05-02 05:13:12
nessus
nessus
Oracle Linux 5 : php (ELSA-2014-1824)
2014-11-07 00:00:00
CentOS 5 : php (CESA-2014:1824)
2014-11-07 00:00:00
Scientific Linux Security Update : php on SL5.x i386/x86_64 (20141106)
2014-11-10 00:00:00
oraclelinux
oraclelinux
php security update
2014-11-06 00:00:00
centos
centos
php security update
2014-11-06 18:30:07