Most recent entries from all

bdu:2015-00376

Withdrawn: BELL-CVE-2014-3515 — CVE-2014-3515 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2014-avi-296 — De multiples vulnérabilités ont été corrigées dans PHP. Elles permettent à un attaquant de…

certfr-2014-avi-296

EUVD-2026-99239

fkie_cve-2014-3515

The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which allows remote attackers to execute arbitrary code via a crafted string that triggers use of a Hashtable destructor, related to "type confusion" issues in (1) ArrayObject and (2) SPLObjectStorage.

GHSA-x775-rjw6-fgf2

gsd-2014-3515

RHSA-2014:1012 — Red Hat Security Advisory: php53 and php security update

file: out of bounds read in CDF parser php: heap-based buffer over-read in DateInterval file: cdf_unpack_summary_info() excessive looping DoS file: CDF property info parsing nelements infinite loop file: unrestricted recursion in handling of indirect type rules file: out-of-bounds access in search rules with offsets from input file file: cdf_check_stream_offset insufficient boundary check file: cdf_count_chain insufficient boundary check php: unserialize() SPL ArrayObject / SPLObjectStorage type confusion flaw php: heap-based buffer overflow in DNS TXT record parsing php: type confusion issue in phpinfo() leading to information leak

RHSA-2014:1013 — Red Hat Security Advisory: php security update

file: extensive backtracking in awk rule regular expression file: cdf_read_short_sector insufficient boundary check file: cdf_unpack_summary_info() excessive looping DoS file: CDF property info parsing nelements infinite loop file: cdf_check_stream_offset insufficient boundary check file: cdf_count_chain insufficient boundary check file: cdf_read_property_info insufficient boundary check php: unserialize() SPL ArrayObject / SPLObjectStorage type confusion flaw php: heap-based buffer overflow in DNS TXT record parsing php: type confusion issue in phpinfo() leading to information leak

SUSE-SU-2015:0370-1 — Security update for php53

Security update for php53

UBUNTU-CVE-2014-3515

Affected: Ubuntu:14.04:LTS: php5