Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistMitreCVELIST:CVE-2014-9652
HistoryMar 30, 2015 - 10:00 a.m.

CVE-2014-9652

2015-03-3010:00:00
mitre
www.cve.org
3

7.9 High

AI Score

Confidence

High

0.089 Low

EPSS

Percentile

94.6%

JSON

The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not properly handle a certain string-length field during a copy of a truncated version of a Pascal string, which might allow remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted file.

References

Related

prion 1
openvas 20
osv 2
cve 1
ubuntucve 1
nvd 1
debiancve 1
suse 4
nessus 25
gentoo 1
hackerone 1
ubuntu 1
securityvulns 4
kaspersky 1
oraclelinux 4
ibm 1
centos 2
redhat 4
veracode 26
rosalinux 1
prion
prion
Out-of-bounds
2015-03-30 10:59:00
openvas
openvas
Debian Security Advisory DSA 3126-1 (php5 - security update)
2015-01-12 00:00:00
Debian: Security Advisory (DSA-3126-1)
2015-01-11 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:0424-1)
2021-06-09 00:00:00
osv
osv
php5 - security update
2015-01-12 00:00:00
file - security update
2015-01-08 00:00:00
cve
cve
CVE-2014-9652
2015-03-30 10:59:01
ubuntucve
ubuntucve
CVE-2014-9652
2015-01-08 00:00:00
nvd
nvd
CVE-2014-9652
2015-03-30 10:59:01
debiancve
debiancve
CVE-2014-9652
2015-03-30 10:59:01
suse
suse
Security update for php5 (important)
2015-03-04 16:04:57
Security update for php5 (important)
2015-03-06 11:04:50
Security update for PHP 5.3 (important)
2015-03-05 21:04:56
nessus
nessus
openSUSE Security Update : php5 (openSUSE-2015-203)
2015-03-09 00:00:00
SUSE SLES12 Security Update : php5 (SUSE-SU-2015:0424-1)
2019-01-02 00:00:00
SuSE 11.3 Security Update : PHP 5.3 (SAT Patch Number 10370)
2015-03-06 00:00:00
gentoo
gentoo
file: Multiple vulnerabilities
2017-01-17 00:00:00
hackerone
hackerone
Gratipay: PHP 5.4.45 is Outdated and Full of Preformance Interupting Arbitrary Code Execution Bugs
2016-04-16 22:49:59
ubuntu
ubuntu
PHP vulnerabilities
2015-02-17 00:00:00
securityvulns
securityvulns
[USN-2501-1] PHP vulnerabilities
2015-02-22 00:00:00
[security bulletin] HPSBMU03409 rev.1 - HP Matrix Operating Environment, Multiple Vulnerabilities
2015-09-14 00:00:00
APPLE-SA-2015-09-30-3 OS X El Capitan 10.11
2015-10-05 00:00:00
kaspersky
kaspersky
KLA10514 Multiple vulnerabilities in PHP and plugins
2015-03-30 00:00:00
oraclelinux
oraclelinux
file security and bug fix update
2015-11-23 00:00:00
php55 security and bug fix update
2016-02-04 00:00:00
php54 security and bug fix update
2016-02-04 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in file affect PowerKVM
2018-06-18 01:30:43
centos
centos
file, python security update
2015-11-30 19:28:42
php security update
2015-06-24 03:28:02
redhat
redhat
(RHSA-2015:2155) Moderate: file security and bug fix update
2015-11-19 14:41:30
(RHSA-2015:1053) Moderate: php55 security and bug fix update
2015-06-04 00:00:00
(RHSA-2015:1066) Important: php54 security and bug fix update
2015-06-04 00:00:00
veracode
veracode
Use-After-Free
2019-05-02 05:39:23
Null Pointer Dereference
2019-05-02 05:39:23
Denial Of Service (DoS)
2019-05-02 05:39:23
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45

7.9 High

AI Score

Confidence

High

0.089 Low

EPSS

Percentile

94.6%

JSON
Related for CVELIST:CVE-2014-9652
prion1openvas20osv2cve1ubuntucve1nvd1debiancve1suse4nessus25gentoo1hackerone1ubuntu1securityvulns4kaspersky1oraclelinux4ibm1centos2redhat4veracode26rosalinux1