Most recent entries from all

bdu:2016-01361

Withdrawn: BELL-CVE-2015-4644 — CVE-2015-4644 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2015-avi-265 — De multiples vulnérabilités ont été corrigées dans PHP. Elles permettent à un attaquant de…

certfr-2015-avi-265

cnvd-2015-03911

EUVD-2026-92740

fkie_cve-2015-4644

The php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not validate token extraction for table names, which might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted name. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1352.

GHSA-xhh6-8vwc-47w8

gsd-2015-4644

RHSA-2015:1186 — Red Hat Security Advisory: php55-php security update

php: buffer over-read in Phar metadata parsing php: invalid pointer free() in phar_tar_process_metadata() php: buffer overflow in phar_set_inode() php: pipelined request executed in deinitialized interpreter under httpd 2.4 php: missing null byte checks for paths in various PHP extensions php: missing null byte checks for paths in various PHP extensions php: memory corruption in phar_parse_tarfile caused by empty entry file name php: integer overflow leading to heap overflow when reading FTP file listing php: multipart/form-data request parsing CPU usage DoS php: regressions in 5.4+ php: pcntl_exec() accepts paths with NUL character php: missing null byte checks for paths in DOM and GD extensions php: Incomplete Class unserialization type confusion php: exception:: getTraceAsString type confusion issue after unserialize php: denial of service when processing a crafted file with Fileinfo php: denial of service when processing a crafted file with Fileinfo php: integer overflow in ftp_genlist() resulting in heap overflow (improved fix for CVE-2015-4022) php: NULL pointer dereference in php_pgsql_meta_data()

SUSE-SU-2015:0370-1 — Security update for php53

Security update for php53

UBUNTU-CVE-2015-4644

Affected: Ubuntu:14.04:LTS: php5