Lucene search
DebianDEBIAN:DLA-94-1:92D05HistoryNov 25, 2014 - 9:53 p.m.
[SECURITY] [DLA 94-1] php5 security update
2014-11-2521:53:34
lists.debian.org
32
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
High
0.937 High
EPSS
Percentile
99.1%
Package : php5
Version : 5.3.3-7+squeeze23
CVE ID : CVE-2014-3668 CVE-2014-3669 CVE-2014-3670 CVE-2014-3710
CVE-2014-3668
Fix bug #68027 - fix date parsing in XMLRPC lib
CVE-2014-3669
Fix bug #68044: Integer overflow in unserialize() (32-bits only)
CVE-2014-3670
Fix bug #68113 (Heap corruption in exif_thumbnail())
CVE-2014-3710
Fix bug #68283: fileinfo: out-of-bounds read in elf note headers
Additional bugfix
Fix null byte handling in LDAP bindings in ldap-fix.patch
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 6 | amd64 | php5-dev | < 5.3.3-7+squeeze23 | php5-dev_5.3.3-7+squeeze23_amd64.deb |
| Debian | 7 | i386 | php5-cgi | < 5.4.35-0+deb7u1 | php5-cgi_5.4.35-0+deb7u1_i386.deb |
| Debian | 7 | s390 | php5-curl | < 5.4.35-0+deb7u1 | php5-curl_5.4.35-0+deb7u1_s390.deb |
| Debian | 7 | sparc | php5-sybase | < 5.4.35-0+deb7u1 | php5-sybase_5.4.35-0+deb7u1_sparc.deb |
| Debian | 6 | i386 | libmagic-dev | < 5.04-5+squeeze8 | libmagic-dev_5.04-5+squeeze8_i386.deb |
| Debian | 7 | ia64 | python-magic | < 5.11-2+deb7u6 | python-magic_5.11-2+deb7u6_ia64.deb |
| Debian | 7 | kfreebsd-amd64 | php5-gmp | < 5.4.35-0+deb7u1 | php5-gmp_5.4.35-0+deb7u1_kfreebsd-amd64.deb |
| Debian | 7 | mips | php5-cli | < 5.4.35-0+deb7u1 | php5-cli_5.4.35-0+deb7u1_mips.deb |
| Debian | 6 | i386 | php5-cgi | < 5.3.3-7+squeeze23 | php5-cgi_5.3.3-7+squeeze23_i386.deb |
| Debian | 7 | ia64 | php5-cgi | < 5.4.35-0+deb7u1 | php5-cgi_5.4.35-0+deb7u1_ia64.deb |
Related
nessus
nessus
RHEL 6 / 7 : php (RHSA-2014:1767)
2014-10-31 00:00:00
Scientific Linux Security Update : php53 on SL5.x i386/x86_64 (20141030)
2014-11-04 00:00:00
redhat
redhat
(RHSA-2014:1768) Important: php53 security update
2014-10-30 00:00:00
(RHSA-2014:1767) Important: php security update
2014-10-30 00:00:00
(RHSA-2015:0021) Important: php security update
2015-01-08 00:00:00
openvas
openvas
CentOS Update for php53 CESA-2014:1768 centos5
2014-11-01 00:00:00
Oracle: Security Advisory (ELSA-2014-1768)
2015-10-06 00:00:00
Debian: Security Advisory (DLA-94-1)
2023-03-08 00:00:00
securityvulns
securityvulns
[USN-2391-1] php5 vulnerabilities
2014-11-03 00:00:00
PHP memory corruption
2014-11-03 00:00:00
[ MDVSA-2014:202 ] php
2014-10-27 00:00:00
oraclelinux
oraclelinux
php53 security update
2014-10-30 00:00:00
php security update
2014-10-30 00:00:00
php security update
2014-11-06 00:00:00
ubuntu
ubuntu
php5 vulnerabilities
2014-10-30 00:00:00
file vulnerabilities
2015-02-04 00:00:00
osv
osv
php5 - security update
2014-11-25 00:00:00
php5 - security update
2014-11-04 00:00:00
file - security update
2014-11-11 00:00:00
centos
centos
php security update
2014-10-31 13:14:51
php53 security update
2014-10-31 14:37:09
php security update
2014-11-06 18:30:07
threatpost
threatpost
PHP Patches Buffer Overflow Vulnerabilities
2014-10-22 13:33:23
gentoo
gentoo
PHP: Multiple vulnerabilities
2014-11-09 00:00:00
file: Multiple vulnerabilities
2017-01-17 00:00:00
PHP: Multiple vulnerabilities
2015-03-08 00:00:00
f5
f5
SOL15866 - Multiple PHP vulnerabilities CVE-2014-3668, CVE-2014-3669, and CVE-2014-3670
2014-11-26 00:00:00
K15866 : Multiple PHP vulnerabilities CVE-2014-3668, CVE-2014-3669, and CVE-2014-3670
2014-11-26 00:00:00
SOL15898 - PHP vulnerability CVE-2014-3710
2014-12-08 00:00:00
debian
debian
[SECURITY] [DSA 3064-1] php5 security update
2014-11-04 16:08:18
[SECURITY] [DSA 3064-1] php5 security update
2014-11-04 16:08:18
[SECURITY] [DSA 3074-1] php5 security update
2014-11-18 21:10:45
slackware
slackware
[slackware-security] php
2014-11-04 01:25:39
[slackware-security] php
2014-12-23 05:38:55
amazon
amazon
Important: php55
2014-10-28 17:10:00
Important: php54
2014-10-28 17:09:00
Medium: file
2014-11-22 14:34:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in php affect IBM Flex System Manager (FSM): (CVE-2014-3668, CVE-2014-3669 and CVE-2014-3670)
2019-01-31 01:45:01
Security Bulletin: IBM BladeCenter Advanced Management Module is affected by PHP vulnerability (CVE-2014-3669)
2019-01-31 01:45:01
Security Bulletin: File vulnerabilities affect IBM SmartClound Entry
2020-07-19 00:49:12
mageia
mageia
Updated php packages fix security vulnerabilities
2014-10-28 14:33:36
Updated [package] package fix CVE-2014-3710
2014-10-31 18:53:38
Updated php packages fix security vulnerability
2014-11-12 12:56:47
veracode
veracode
Memory Corruption And Code Execution
2019-05-02 05:13:12
Denial Of Service (DoS)
2019-01-15 09:02:38
Denial Of Service (DoS)
2019-05-02 05:04:21
nvd
nvd
cve
cve
prion
prion
Buffer overflow
2014-10-29 10:55:00
Out-of-bounds
2014-11-05 11:55:00
Memory corruption
2014-10-29 10:55:00
ubuntucve
ubuntucve
hackerone
hackerone
cvelist
cvelist
checkpoint_advisories
checkpoint_advisories
PHP Core unserialize Function Integer Overflow (CVE-2014-3669)
2014-11-25 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: php-5.6.2-1.fc21
2014-11-01 16:41:03
[SECURITY] Fedora 21 Update: file-5.19-7.fc21
2014-11-10 06:44:48
[SECURITY] Fedora 20 Update: php-5.5.18-1.fc20
2014-10-23 06:23:25
archlinux
archlinux
php: denial of service
2014-11-13 00:00:00
file: denial of service through out-of-bounds read
2014-11-12 00:00:00
debiancve
debiancve
CVE-2014-3710
2014-11-05 11:55:06
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:28.file
2014-12-10 00:00:00
freebsd
freebsd
file -- multiple vulnerabilities
2014-12-16 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
High
0.937 High
EPSS
Percentile
99.1%
Related for DEBIAN:DLA-94-1:92D05