https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:24:27 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2014-3710 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2014-3710 https://cve.radiocsirt.org/vuln/certfr-2014-avi-483 certfr-2014-avi-483 https://cve.radiocsirt.org/vuln/certfr-2014-avi-483 https://cve.radiocsirt.org/vuln/euvd-2026-99404 EUVD-2026-99404 https://cve.radiocsirt.org/vuln/euvd-2026-99404 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3710 <p>The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.</p> <p>The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-3710 https://cve.radiocsirt.org/vuln/ghsa-3rf4-9569-4jw7 <p>The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.</p> <p>The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.</p> https://cve.radiocsirt.org/vuln/ghsa-3rf4-9569-4jw7 https://cve.radiocsirt.org/vuln/gsd-2014-3710 gsd-2014-3710 https://cve.radiocsirt.org/vuln/gsd-2014-3710 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10221-1 <p>file-5.29-2.1 on GA media</p> <p>file-5.29-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10221-1 https://cve.radiocsirt.org/vuln/rhsa-2014:1765 <p>php: heap-based buffer over-read in DateInterval file: extensive backtracking in awk rule regular expression file: cdf_read_short_sector insufficient boundary check file: cdf_unpack_summary_info() excessive looping DoS file: CDF property info parsing nelements infinite loop file: unrestricted recursion in handling of indirect type rules file: out-of-bounds access in search rules with offsets from input file gd: NULL pointer dereference in gdImageCreateFromXpm() file: mconvert incorrect handling of truncated pascal string size file: cdf_check_stream_offset insufficient boundary check file: cdf_count_chain insufficient boundary check file: cdf_read_property_info insufficient boundary check php: unserialize() SPL ArrayObject / SPLObjectStorage type confusion flaw file: unrestricted regular expression matching file: incomplete fix for CVE-2012-1571 in cdf_read_property_info php: multiple buffer over-reads in php_parserr php: xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime() php: integer overflow in unserialize() php: heap corruption issue in exif_thumbnail() file: out-of-bounds read in elf note headers php: heap-based buffer overflow in DNS TXT record parsing php: SPL Iterators use-after-free php: ArrayIterator use-after-free due to object change during sorting php: type confusion issue in phpinfo() leading to information leak php: gd extension NUL byte injection in file names</p> <p>php: heap-based buffer over-read in DateInterval file: extensive backtracking in awk rule regular expression file: cdf_read_short_sector insufficient boundary check file: cdf_unpack_summary_info() excessive looping DoS file: CDF property info parsing nelements infinite loop file: unrestricted recursion in handling of indirect type rules file: out-of-bounds access in search rules with offsets from input file gd: NULL pointer dereference in gdImageCreateFromXpm() file: mconvert incorrect handling of truncated pascal string size file: cdf_check_stream_offset insufficient boundary check file: cdf_count_chain insufficient boundary check file: cdf_read_property_info insufficient boundary check php: unserialize() SPL ArrayObject / SPLObjectStorage type confusion flaw file: unrestricted regular expression matching file: incomplete fix for CVE-2012-1571 in cdf_read_property_info php: multiple buffer over-reads in php_parserr php: xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime() php: integer overflow in unserialize() php: heap corruption issue in exif_thumbnail() file: out-of-bounds read in elf note headers php: heap-based buffer overflow in DNS TXT record parsing php: SPL Iterators use-after-free php: ArrayIterator use-after-free due to object change during sorting php: type confusion issue in phpinfo() leading to information leak php: gd extension NUL byte injection in file names</p> https://cve.radiocsirt.org/vuln/rhsa-2014:1765 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3710 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: file, Ubuntu:14.04:LTS: php5</p> <p>The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: file, Ubuntu:14.04:LTS: php5</p> <p>The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3710