https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:51:08 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-00368 bdu:2015-00368 https://cve.radiocsirt.org/vuln/bdu:2015-00368 https://cve.radiocsirt.org/vuln/certfr-2015-avi-139 certfr-2015-avi-139 https://cve.radiocsirt.org/vuln/certfr-2015-avi-139 https://cve.radiocsirt.org/vuln/euvd-2026-99331 EUVD-2026-99331 https://cve.radiocsirt.org/vuln/euvd-2026-99331 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3597 <p>Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow remote DNS servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted DNS record, related to the dns_get_record function and the dn_expand function. NOTE: this issue exists because of an incomplete fix for CVE-2014-4049.</p> <p>Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow remote DNS servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted DNS record, related to the dns_get_record function and the dn_expand function. NOTE: this issue exists because of an incomplete fix for CVE-2014-4049.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-3597 https://cve.radiocsirt.org/vuln/ghsa-hh9h-fmf6-wj4h <p>Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow remote DNS servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted DNS record, related to the dns_get_record function and the dn_expand function. NOTE: this issue exists because of an incomplete fix for CVE-2014-4049.</p> <p>Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow remote DNS servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted DNS record, related to the dns_get_record function and the dn_expand function. NOTE: this issue exists because of an incomplete fix for CVE-2014-4049.</p> https://cve.radiocsirt.org/vuln/ghsa-hh9h-fmf6-wj4h https://cve.radiocsirt.org/vuln/gsd-2014-3597 gsd-2014-3597 https://cve.radiocsirt.org/vuln/gsd-2014-3597 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10290-1 <p>apache2-mod_php7-7.0.14-1.4 on GA media</p> <p>apache2-mod_php7-7.0.14-1.4 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10290-1 https://cve.radiocsirt.org/vuln/rhsa-2014:1326 <p>gd: NULL pointer dereference in gdImageCreateFromXpm() file: incomplete fix for CVE-2012-1571 in cdf_read_property_info php: multiple buffer over-reads in php_parserr php: SPL Iterators use-after-free php: ArrayIterator use-after-free due to object change during sorting</p> <p>gd: NULL pointer dereference in gdImageCreateFromXpm() file: incomplete fix for CVE-2012-1571 in cdf_read_property_info php: multiple buffer over-reads in php_parserr php: SPL Iterators use-after-free php: ArrayIterator use-after-free due to object change during sorting</p> https://cve.radiocsirt.org/vuln/rhsa-2014:1326 https://cve.radiocsirt.org/vuln/suse-su-2016:1638-1 <p>Security update for php53</p> <p>Security update for php53</p> https://cve.radiocsirt.org/vuln/suse-su-2016:1638-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3597 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: php5</p> <p>Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow remote DNS servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted DNS record, related to the dns_get_record function and the dn_expand function. NOTE: this issue exists because of an incomplete fix for CVE-2014-4049.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: php5</p> <p>Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow remote DNS servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted DNS record, related to the dns_get_record function and the dn_expand function. NOTE: this issue exists because of an incomplete fix for CVE-2014-4049.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3597