Sign-up

ID

VAR-201506-0266


CVE

CVE-2015-4024


TITLE

PHP of main/rfc1867.c of multipart_buffer_headers Service disruption in functions (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2015-003050

DESCRIPTION

Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service (CPU consumption) via crafted form data that triggers an improper order-of-growth outcome. PHP is prone to a remote denial-of-service vulnerability. PHP (PHP: Hypertext Preprocessor, PHP: Hypertext Preprocessor) is an open source general-purpose computer scripting language jointly maintained by the PHP Group and the open source community. The language is mainly used for Web development and supports a variety of databases and operating systems. An algorithmic complexity vulnerability exists in the 'multipart_buffer_headers' function in PHP's main/rfc1867.c file. The following versions are affected: PHP prior to 5.4.41, 5.5.x prior to 5.5.25, and 5.6.x prior to 5.6.9. 7) - x86_64 3. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Moderate: php security update Advisory ID: RHSA-2015:1218-01 Product: Red Hat Enterprise Linux Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-1218.html Issue date: 2015-07-09 CVE Names: CVE-2014-9425 CVE-2014-9705 CVE-2014-9709 CVE-2015-0232 CVE-2015-0273 CVE-2015-2301 CVE-2015-2783 CVE-2015-2787 CVE-2015-3307 CVE-2015-3329 CVE-2015-3411 CVE-2015-3412 CVE-2015-4021 CVE-2015-4022 CVE-2015-4024 CVE-2015-4026 CVE-2015-4147 CVE-2015-4148 CVE-2015-4598 CVE-2015-4599 CVE-2015-4600 CVE-2015-4601 CVE-2015-4602 CVE-2015-4603 ===================================================================== 1. Summary: Updated php packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node (v. 6) - x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64 3. Description: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. A flaw was found in the way PHP parsed multipart HTTP POST requests. A specially crafted request could cause PHP to use an excessive amount of CPU time. (CVE-2015-4024) An uninitialized pointer use flaw was found in PHP's Exif extension. A specially crafted JPEG or TIFF file could cause a PHP application using the exif_read_data() function to crash or, possibly, execute arbitrary code with the privileges of the user running that PHP application. (CVE-2015-0232) An integer overflow flaw leading to a heap-based buffer overflow was found in the way PHP's FTP extension parsed file listing FTP server responses. A malicious FTP server could use this flaw to cause a PHP application to crash or, possibly, execute arbitrary code. (CVE-2015-4022) Multiple flaws were discovered in the way PHP performed object unserialization. Specially crafted input processed by the unserialize() function could cause a PHP application to crash or, possibly, execute arbitrary code. (CVE-2015-0273, CVE-2015-2787, CVE-2015-4147, CVE-2015-4148, CVE-2015-4599, CVE-2015-4600, CVE-2015-4601, CVE-2015-4602, CVE-2015-4603) It was found that certain PHP functions did not properly handle file names containing a NULL character. A remote attacker could possibly use this flaw to make a PHP script access unexpected files and bypass intended file system access restrictions. (CVE-2015-4026, CVE-2015-3411, CVE-2015-3412, CVE-2015-4598) Multiple flaws were found in the way the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened. (CVE-2015-2301, CVE-2015-2783, CVE-2015-3307, CVE-2015-3329, CVE-2015-4021) A heap buffer overflow flaw was found in the enchant_broker_request_dict() function of PHP's enchant extension. An attacker able to make a PHP application enchant dictionaries could possibly cause it to crash. (CVE-2014-9705) A buffer over-read flaw was found in the GD library used by the PHP gd extension. A specially crafted GIF file could cause a PHP application using the imagecreatefromgif() function to crash. (CVE-2014-9709) A double free flaw was found in zend_ts_hash_graceful_destroy() function in the PHP ZTS module. This flaw could possibly cause a PHP application to crash. (CVE-2014-9425) All php users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the updated packages, the httpd daemon must be restarted for the update to take effect. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1177734 - CVE-2014-9425 php: Double-free in zend_ts_hash_graceful_destroy() 1185472 - CVE-2015-0232 php: Free called on unitialized pointer in exif.c 1188639 - CVE-2014-9709 gd: buffer read overflow in gd_gif_in.c 1194730 - CVE-2015-0273 php: use after free vulnerability in unserialize() with DateTimeZone 1194737 - CVE-2014-9705 php: heap buffer overflow in enchant_broker_request_dict() 1194747 - CVE-2015-2301 php: use after free in phar_object.c 1204868 - CVE-2015-4147 php: SoapClient's __call() type confusion through unserialize() 1207676 - CVE-2015-2787 php: use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re 1213407 - CVE-2015-3411 php: missing null byte checks for paths in various PHP extensions 1213446 - CVE-2015-2783 php: buffer over-read in Phar metadata parsing 1213449 - CVE-2015-3329 php: buffer overflow in phar_set_inode() 1222485 - CVE-2015-4024 php: multipart/form-data request parsing CPU usage DoS 1222538 - CVE-2015-4599 CVE-2015-4600 CVE-2015-4601 php: type confusion issue in unserialize() with various SOAP methods 1223412 - CVE-2015-4022 php: integer overflow leading to heap overflow when reading FTP file listing 1223422 - CVE-2015-4026 php: pcntl_exec() accepts paths with NUL character 1223425 - CVE-2015-4021 php: memory corruption in phar_parse_tarfile caused by empty entry file name 1223441 - CVE-2015-3307 php: invalid pointer free() in phar_tar_process_metadata() 1226916 - CVE-2015-4148 php: SoapClient's do_soap_call() type confusion after unserialize() 1232823 - CVE-2015-3412 php: missing null byte checks for paths in various PHP extensions 1232897 - CVE-2015-4598 php: missing null byte checks for paths in DOM and GD extensions 1232918 - CVE-2015-4603 php: exception::getTraceAsString type confusion issue after unserialize 1232923 - CVE-2015-4602 php: Incomplete Class unserialization type confusion 6. Package List: Red Hat Enterprise Linux Desktop Optional (v. 6): Source: php-5.3.3-46.el6_6.src.rpm i386: php-5.3.3-46.el6_6.i686.rpm php-bcmath-5.3.3-46.el6_6.i686.rpm php-cli-5.3.3-46.el6_6.i686.rpm php-common-5.3.3-46.el6_6.i686.rpm php-dba-5.3.3-46.el6_6.i686.rpm php-debuginfo-5.3.3-46.el6_6.i686.rpm php-devel-5.3.3-46.el6_6.i686.rpm php-embedded-5.3.3-46.el6_6.i686.rpm php-enchant-5.3.3-46.el6_6.i686.rpm php-fpm-5.3.3-46.el6_6.i686.rpm php-gd-5.3.3-46.el6_6.i686.rpm php-imap-5.3.3-46.el6_6.i686.rpm php-intl-5.3.3-46.el6_6.i686.rpm php-ldap-5.3.3-46.el6_6.i686.rpm php-mbstring-5.3.3-46.el6_6.i686.rpm php-mysql-5.3.3-46.el6_6.i686.rpm php-odbc-5.3.3-46.el6_6.i686.rpm php-pdo-5.3.3-46.el6_6.i686.rpm php-pgsql-5.3.3-46.el6_6.i686.rpm php-process-5.3.3-46.el6_6.i686.rpm php-pspell-5.3.3-46.el6_6.i686.rpm php-recode-5.3.3-46.el6_6.i686.rpm php-snmp-5.3.3-46.el6_6.i686.rpm php-soap-5.3.3-46.el6_6.i686.rpm php-tidy-5.3.3-46.el6_6.i686.rpm php-xml-5.3.3-46.el6_6.i686.rpm php-xmlrpc-5.3.3-46.el6_6.i686.rpm php-zts-5.3.3-46.el6_6.i686.rpm x86_64: php-5.3.3-46.el6_6.x86_64.rpm php-bcmath-5.3.3-46.el6_6.x86_64.rpm php-cli-5.3.3-46.el6_6.x86_64.rpm php-common-5.3.3-46.el6_6.x86_64.rpm php-dba-5.3.3-46.el6_6.x86_64.rpm php-debuginfo-5.3.3-46.el6_6.x86_64.rpm php-devel-5.3.3-46.el6_6.x86_64.rpm php-embedded-5.3.3-46.el6_6.x86_64.rpm php-enchant-5.3.3-46.el6_6.x86_64.rpm php-fpm-5.3.3-46.el6_6.x86_64.rpm php-gd-5.3.3-46.el6_6.x86_64.rpm php-imap-5.3.3-46.el6_6.x86_64.rpm php-intl-5.3.3-46.el6_6.x86_64.rpm php-ldap-5.3.3-46.el6_6.x86_64.rpm php-mbstring-5.3.3-46.el6_6.x86_64.rpm php-mysql-5.3.3-46.el6_6.x86_64.rpm php-odbc-5.3.3-46.el6_6.x86_64.rpm php-pdo-5.3.3-46.el6_6.x86_64.rpm php-pgsql-5.3.3-46.el6_6.x86_64.rpm php-process-5.3.3-46.el6_6.x86_64.rpm php-pspell-5.3.3-46.el6_6.x86_64.rpm php-recode-5.3.3-46.el6_6.x86_64.rpm php-snmp-5.3.3-46.el6_6.x86_64.rpm php-soap-5.3.3-46.el6_6.x86_64.rpm php-tidy-5.3.3-46.el6_6.x86_64.rpm php-xml-5.3.3-46.el6_6.x86_64.rpm php-xmlrpc-5.3.3-46.el6_6.x86_64.rpm php-zts-5.3.3-46.el6_6.x86_64.rpm Red Hat Enterprise Linux HPC Node (v. 6): Source: php-5.3.3-46.el6_6.src.rpm x86_64: php-cli-5.3.3-46.el6_6.x86_64.rpm php-common-5.3.3-46.el6_6.x86_64.rpm php-debuginfo-5.3.3-46.el6_6.x86_64.rpm Red Hat Enterprise Linux HPC Node Optional (v. 6): x86_64: php-5.3.3-46.el6_6.x86_64.rpm php-bcmath-5.3.3-46.el6_6.x86_64.rpm php-dba-5.3.3-46.el6_6.x86_64.rpm php-debuginfo-5.3.3-46.el6_6.x86_64.rpm php-devel-5.3.3-46.el6_6.x86_64.rpm php-embedded-5.3.3-46.el6_6.x86_64.rpm php-enchant-5.3.3-46.el6_6.x86_64.rpm php-fpm-5.3.3-46.el6_6.x86_64.rpm php-gd-5.3.3-46.el6_6.x86_64.rpm php-imap-5.3.3-46.el6_6.x86_64.rpm php-intl-5.3.3-46.el6_6.x86_64.rpm php-ldap-5.3.3-46.el6_6.x86_64.rpm php-mbstring-5.3.3-46.el6_6.x86_64.rpm php-mysql-5.3.3-46.el6_6.x86_64.rpm php-odbc-5.3.3-46.el6_6.x86_64.rpm php-pdo-5.3.3-46.el6_6.x86_64.rpm php-pgsql-5.3.3-46.el6_6.x86_64.rpm php-process-5.3.3-46.el6_6.x86_64.rpm php-pspell-5.3.3-46.el6_6.x86_64.rpm php-recode-5.3.3-46.el6_6.x86_64.rpm php-snmp-5.3.3-46.el6_6.x86_64.rpm php-soap-5.3.3-46.el6_6.x86_64.rpm php-tidy-5.3.3-46.el6_6.x86_64.rpm php-xml-5.3.3-46.el6_6.x86_64.rpm php-xmlrpc-5.3.3-46.el6_6.x86_64.rpm php-zts-5.3.3-46.el6_6.x86_64.rpm Red Hat Enterprise Linux Server (v. 6): Source: php-5.3.3-46.el6_6.src.rpm i386: php-5.3.3-46.el6_6.i686.rpm php-cli-5.3.3-46.el6_6.i686.rpm php-common-5.3.3-46.el6_6.i686.rpm php-debuginfo-5.3.3-46.el6_6.i686.rpm php-gd-5.3.3-46.el6_6.i686.rpm php-ldap-5.3.3-46.el6_6.i686.rpm php-mysql-5.3.3-46.el6_6.i686.rpm php-odbc-5.3.3-46.el6_6.i686.rpm php-pdo-5.3.3-46.el6_6.i686.rpm php-pgsql-5.3.3-46.el6_6.i686.rpm php-soap-5.3.3-46.el6_6.i686.rpm php-xml-5.3.3-46.el6_6.i686.rpm php-xmlrpc-5.3.3-46.el6_6.i686.rpm ppc64: php-5.3.3-46.el6_6.ppc64.rpm php-cli-5.3.3-46.el6_6.ppc64.rpm php-common-5.3.3-46.el6_6.ppc64.rpm php-debuginfo-5.3.3-46.el6_6.ppc64.rpm php-gd-5.3.3-46.el6_6.ppc64.rpm php-ldap-5.3.3-46.el6_6.ppc64.rpm php-mysql-5.3.3-46.el6_6.ppc64.rpm php-odbc-5.3.3-46.el6_6.ppc64.rpm php-pdo-5.3.3-46.el6_6.ppc64.rpm php-pgsql-5.3.3-46.el6_6.ppc64.rpm php-soap-5.3.3-46.el6_6.ppc64.rpm php-xml-5.3.3-46.el6_6.ppc64.rpm php-xmlrpc-5.3.3-46.el6_6.ppc64.rpm s390x: php-5.3.3-46.el6_6.s390x.rpm php-cli-5.3.3-46.el6_6.s390x.rpm php-common-5.3.3-46.el6_6.s390x.rpm php-debuginfo-5.3.3-46.el6_6.s390x.rpm php-gd-5.3.3-46.el6_6.s390x.rpm php-ldap-5.3.3-46.el6_6.s390x.rpm php-mysql-5.3.3-46.el6_6.s390x.rpm php-odbc-5.3.3-46.el6_6.s390x.rpm php-pdo-5.3.3-46.el6_6.s390x.rpm php-pgsql-5.3.3-46.el6_6.s390x.rpm php-soap-5.3.3-46.el6_6.s390x.rpm php-xml-5.3.3-46.el6_6.s390x.rpm php-xmlrpc-5.3.3-46.el6_6.s390x.rpm x86_64: php-5.3.3-46.el6_6.x86_64.rpm php-cli-5.3.3-46.el6_6.x86_64.rpm php-common-5.3.3-46.el6_6.x86_64.rpm php-debuginfo-5.3.3-46.el6_6.x86_64.rpm php-gd-5.3.3-46.el6_6.x86_64.rpm php-ldap-5.3.3-46.el6_6.x86_64.rpm php-mysql-5.3.3-46.el6_6.x86_64.rpm php-odbc-5.3.3-46.el6_6.x86_64.rpm php-pdo-5.3.3-46.el6_6.x86_64.rpm php-pgsql-5.3.3-46.el6_6.x86_64.rpm php-soap-5.3.3-46.el6_6.x86_64.rpm php-xml-5.3.3-46.el6_6.x86_64.rpm php-xmlrpc-5.3.3-46.el6_6.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 6): i386: php-bcmath-5.3.3-46.el6_6.i686.rpm php-dba-5.3.3-46.el6_6.i686.rpm php-debuginfo-5.3.3-46.el6_6.i686.rpm php-devel-5.3.3-46.el6_6.i686.rpm php-embedded-5.3.3-46.el6_6.i686.rpm php-enchant-5.3.3-46.el6_6.i686.rpm php-fpm-5.3.3-46.el6_6.i686.rpm php-imap-5.3.3-46.el6_6.i686.rpm php-intl-5.3.3-46.el6_6.i686.rpm php-mbstring-5.3.3-46.el6_6.i686.rpm php-process-5.3.3-46.el6_6.i686.rpm php-pspell-5.3.3-46.el6_6.i686.rpm php-recode-5.3.3-46.el6_6.i686.rpm php-snmp-5.3.3-46.el6_6.i686.rpm php-tidy-5.3.3-46.el6_6.i686.rpm php-zts-5.3.3-46.el6_6.i686.rpm ppc64: php-bcmath-5.3.3-46.el6_6.ppc64.rpm php-dba-5.3.3-46.el6_6.ppc64.rpm php-debuginfo-5.3.3-46.el6_6.ppc64.rpm php-devel-5.3.3-46.el6_6.ppc64.rpm php-embedded-5.3.3-46.el6_6.ppc64.rpm php-enchant-5.3.3-46.el6_6.ppc64.rpm php-fpm-5.3.3-46.el6_6.ppc64.rpm php-imap-5.3.3-46.el6_6.ppc64.rpm php-intl-5.3.3-46.el6_6.ppc64.rpm php-mbstring-5.3.3-46.el6_6.ppc64.rpm php-process-5.3.3-46.el6_6.ppc64.rpm php-pspell-5.3.3-46.el6_6.ppc64.rpm php-recode-5.3.3-46.el6_6.ppc64.rpm php-snmp-5.3.3-46.el6_6.ppc64.rpm php-tidy-5.3.3-46.el6_6.ppc64.rpm php-zts-5.3.3-46.el6_6.ppc64.rpm s390x: php-bcmath-5.3.3-46.el6_6.s390x.rpm php-dba-5.3.3-46.el6_6.s390x.rpm php-debuginfo-5.3.3-46.el6_6.s390x.rpm php-devel-5.3.3-46.el6_6.s390x.rpm php-embedded-5.3.3-46.el6_6.s390x.rpm php-enchant-5.3.3-46.el6_6.s390x.rpm php-fpm-5.3.3-46.el6_6.s390x.rpm php-imap-5.3.3-46.el6_6.s390x.rpm php-intl-5.3.3-46.el6_6.s390x.rpm php-mbstring-5.3.3-46.el6_6.s390x.rpm php-process-5.3.3-46.el6_6.s390x.rpm php-pspell-5.3.3-46.el6_6.s390x.rpm php-recode-5.3.3-46.el6_6.s390x.rpm php-snmp-5.3.3-46.el6_6.s390x.rpm php-tidy-5.3.3-46.el6_6.s390x.rpm php-zts-5.3.3-46.el6_6.s390x.rpm x86_64: php-bcmath-5.3.3-46.el6_6.x86_64.rpm php-dba-5.3.3-46.el6_6.x86_64.rpm php-debuginfo-5.3.3-46.el6_6.x86_64.rpm php-devel-5.3.3-46.el6_6.x86_64.rpm php-embedded-5.3.3-46.el6_6.x86_64.rpm php-enchant-5.3.3-46.el6_6.x86_64.rpm php-fpm-5.3.3-46.el6_6.x86_64.rpm php-imap-5.3.3-46.el6_6.x86_64.rpm php-intl-5.3.3-46.el6_6.x86_64.rpm php-mbstring-5.3.3-46.el6_6.x86_64.rpm php-process-5.3.3-46.el6_6.x86_64.rpm php-pspell-5.3.3-46.el6_6.x86_64.rpm php-recode-5.3.3-46.el6_6.x86_64.rpm php-snmp-5.3.3-46.el6_6.x86_64.rpm php-tidy-5.3.3-46.el6_6.x86_64.rpm php-zts-5.3.3-46.el6_6.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 6): Source: php-5.3.3-46.el6_6.src.rpm i386: php-5.3.3-46.el6_6.i686.rpm php-cli-5.3.3-46.el6_6.i686.rpm php-common-5.3.3-46.el6_6.i686.rpm php-debuginfo-5.3.3-46.el6_6.i686.rpm php-gd-5.3.3-46.el6_6.i686.rpm php-ldap-5.3.3-46.el6_6.i686.rpm php-mysql-5.3.3-46.el6_6.i686.rpm php-odbc-5.3.3-46.el6_6.i686.rpm php-pdo-5.3.3-46.el6_6.i686.rpm php-pgsql-5.3.3-46.el6_6.i686.rpm php-soap-5.3.3-46.el6_6.i686.rpm php-xml-5.3.3-46.el6_6.i686.rpm php-xmlrpc-5.3.3-46.el6_6.i686.rpm x86_64: php-5.3.3-46.el6_6.x86_64.rpm php-cli-5.3.3-46.el6_6.x86_64.rpm php-common-5.3.3-46.el6_6.x86_64.rpm php-debuginfo-5.3.3-46.el6_6.x86_64.rpm php-gd-5.3.3-46.el6_6.x86_64.rpm php-ldap-5.3.3-46.el6_6.x86_64.rpm php-mysql-5.3.3-46.el6_6.x86_64.rpm php-odbc-5.3.3-46.el6_6.x86_64.rpm php-pdo-5.3.3-46.el6_6.x86_64.rpm php-pgsql-5.3.3-46.el6_6.x86_64.rpm php-soap-5.3.3-46.el6_6.x86_64.rpm php-xml-5.3.3-46.el6_6.x86_64.rpm php-xmlrpc-5.3.3-46.el6_6.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 6): i386: php-bcmath-5.3.3-46.el6_6.i686.rpm php-dba-5.3.3-46.el6_6.i686.rpm php-debuginfo-5.3.3-46.el6_6.i686.rpm php-devel-5.3.3-46.el6_6.i686.rpm php-embedded-5.3.3-46.el6_6.i686.rpm php-enchant-5.3.3-46.el6_6.i686.rpm php-fpm-5.3.3-46.el6_6.i686.rpm php-imap-5.3.3-46.el6_6.i686.rpm php-intl-5.3.3-46.el6_6.i686.rpm php-mbstring-5.3.3-46.el6_6.i686.rpm php-process-5.3.3-46.el6_6.i686.rpm php-pspell-5.3.3-46.el6_6.i686.rpm php-recode-5.3.3-46.el6_6.i686.rpm php-snmp-5.3.3-46.el6_6.i686.rpm php-tidy-5.3.3-46.el6_6.i686.rpm php-zts-5.3.3-46.el6_6.i686.rpm x86_64: php-bcmath-5.3.3-46.el6_6.x86_64.rpm php-dba-5.3.3-46.el6_6.x86_64.rpm php-debuginfo-5.3.3-46.el6_6.x86_64.rpm php-devel-5.3.3-46.el6_6.x86_64.rpm php-embedded-5.3.3-46.el6_6.x86_64.rpm php-enchant-5.3.3-46.el6_6.x86_64.rpm php-fpm-5.3.3-46.el6_6.x86_64.rpm php-imap-5.3.3-46.el6_6.x86_64.rpm php-intl-5.3.3-46.el6_6.x86_64.rpm php-mbstring-5.3.3-46.el6_6.x86_64.rpm php-process-5.3.3-46.el6_6.x86_64.rpm php-pspell-5.3.3-46.el6_6.x86_64.rpm php-recode-5.3.3-46.el6_6.x86_64.rpm php-snmp-5.3.3-46.el6_6.x86_64.rpm php-tidy-5.3.3-46.el6_6.x86_64.rpm php-zts-5.3.3-46.el6_6.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2014-9425 https://access.redhat.com/security/cve/CVE-2014-9705 https://access.redhat.com/security/cve/CVE-2014-9709 https://access.redhat.com/security/cve/CVE-2015-0232 https://access.redhat.com/security/cve/CVE-2015-0273 https://access.redhat.com/security/cve/CVE-2015-2301 https://access.redhat.com/security/cve/CVE-2015-2783 https://access.redhat.com/security/cve/CVE-2015-2787 https://access.redhat.com/security/cve/CVE-2015-3307 https://access.redhat.com/security/cve/CVE-2015-3329 https://access.redhat.com/security/cve/CVE-2015-3411 https://access.redhat.com/security/cve/CVE-2015-3412 https://access.redhat.com/security/cve/CVE-2015-4021 https://access.redhat.com/security/cve/CVE-2015-4022 https://access.redhat.com/security/cve/CVE-2015-4024 https://access.redhat.com/security/cve/CVE-2015-4026 https://access.redhat.com/security/cve/CVE-2015-4147 https://access.redhat.com/security/cve/CVE-2015-4148 https://access.redhat.com/security/cve/CVE-2015-4598 https://access.redhat.com/security/cve/CVE-2015-4599 https://access.redhat.com/security/cve/CVE-2015-4600 https://access.redhat.com/security/cve/CVE-2015-4601 https://access.redhat.com/security/cve/CVE-2015-4602 https://access.redhat.com/security/cve/CVE-2015-4603 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFVnsPKXlSAg2UNWIIRAtXEAKC6gknTJ+I/czViSyE71AjUZ1pWSQCgo6ip /jsvmaEr/ag17pZ7M9fXiz4= =vWCv -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce . ============================================================================ Ubuntu Security Notice USN-2658-1 July 06, 2015 php5 vulnerabilities ============================================================================ A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 15.04 - Ubuntu 14.10 - Ubuntu 14.04 LTS - Ubuntu 12.04 LTS Summary: Several security issues were fixed in PHP. Software Description: - php5: HTML-embedded scripting language interpreter Details: Neal Poole and Tomas Hoger discovered that PHP incorrectly handled NULL bytes in file paths. (CVE-2015-3411, CVE-2015-3412, CVE-2015-4025, CVE-2015-4026, CVE-2015-4598) Emmanuel Law discovered that the PHP phar extension incorrectly handled filenames starting with a NULL byte. (CVE-2015-4021) Max Spelsberg discovered that PHP incorrectly handled the LIST command when connecting to remote FTP servers. (CVE-2015-4022, CVE-2015-4643) Shusheng Liu discovered that PHP incorrectly handled certain malformed form data. (CVE-2015-4024) Andrea Palazzo discovered that the PHP Soap client incorrectly validated data types. (CVE-2015-4147) Andrea Palazzo discovered that the PHP Soap client incorrectly validated that the uri property is a string. A remote attacker could possibly use these issues to obtain sensitive information or cause a denial of service. This issue only affected Ubuntu 15.04. (CVE-2015-4644) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 15.04: libapache2-mod-php5 5.6.4+dfsg-4ubuntu6.2 php5-cgi 5.6.4+dfsg-4ubuntu6.2 php5-cli 5.6.4+dfsg-4ubuntu6.2 php5-fpm 5.6.4+dfsg-4ubuntu6.2 Ubuntu 14.10: libapache2-mod-php5 5.5.12+dfsg-2ubuntu4.6 php5-cgi 5.5.12+dfsg-2ubuntu4.6 php5-cli 5.5.12+dfsg-2ubuntu4.6 php5-fpm 5.5.12+dfsg-2ubuntu4.6 Ubuntu 14.04 LTS: libapache2-mod-php5 5.5.9+dfsg-1ubuntu4.11 php5-cgi 5.5.9+dfsg-1ubuntu4.11 php5-cli 5.5.9+dfsg-1ubuntu4.11 php5-fpm 5.5.9+dfsg-1ubuntu4.11 Ubuntu 12.04 LTS: libapache2-mod-php5 5.3.10-1ubuntu3.19 php5-cgi 5.3.10-1ubuntu3.19 php5-cli 5.3.10-1ubuntu3.19 php5-fpm 5.3.10-1ubuntu3.19 In general, a standard system update will make all the necessary changes. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+ patches/packages/php-5.4.41-i486-1_slack14.1.txz: Upgraded. This update fixes some bugs and security issues. For more information, see: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7243 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2325 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2326 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4021 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4022 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4024 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4025 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4026 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://slackware.com for additional mirror sites near you. Updated package for Slackware 14.0: ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/php-5.4.41-i486-1_slack14.0.txz Updated package for Slackware x86_64 14.0: ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/php-5.4.41-x86_64-1_slack14.0.txz Updated package for Slackware 14.1: ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/php-5.4.41-i486-1_slack14.1.txz Updated package for Slackware x86_64 14.1: ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/php-5.4.41-x86_64-1_slack14.1.txz Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/php-5.6.9-i586-1.txz Updated package for Slackware x86_64 -current: ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/php-5.6.9-x86_64-1.txz MD5 signatures: +-------------+ Slackware 14.0 package: 5e8d107dba11f8c87693edfdc32f56b7 php-5.4.41-i486-1_slack14.0.txz Slackware x86_64 14.0 package: 24d6895fe6b0e9c88b04ceaccc35383d php-5.4.41-x86_64-1_slack14.0.txz Slackware 14.1 package: 52011eec3a256a365789562b63e8ba84 php-5.4.41-i486-1_slack14.1.txz Slackware x86_64 14.1 package: 82b75af6253121cab6cc84dd714f554c php-5.4.41-x86_64-1_slack14.1.txz Slackware -current package: e1c64f133f44b0abac21e0846e39d3c8 n/php-5.6.9-i586-1.txz Slackware x86_64 -current package: ae51c99af34a4bd8721e7140c38a8c1a n/php-5.6.9-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg php-5.4.41-i486-1_slack14.1.txz Then, restart Apache httpd: # /etc/rc.d/rc.httpd stop # /etc/rc.d/rc.httpd start +-----+ Slackware Linux Security Team http://slackware.com/gpg-key security@slackware.com +------------------------------------------------------------------------+ | To leave the slackware-security mailing list: | +------------------------------------------------------------------------+ | Send an email to majordomo@slackware.com with this text in the body of | | the email message: | | | | unsubscribe slackware-security | | | | You will get a confirmation message back containing instructions to | | complete the process. Please do not reply to this email address. CVE-2015-4024 Denial of service when processing multipart/form-data requests. CVE-2015-4022 Integer overflow in the ftp_genlist() function may result in denial of service or potentially the execution of arbitrary code. For the oldstable distribution (wheezy), these problems have been fixed in version 5.4.41-0+deb7u1. For the stable distribution (jessie), these problems have been fixed in version 5.6.9+dfsg-0+deb8u1. For the testing distribution (stretch), these problems have been fixed in version 5.6.9+dfsg-1. For the unstable distribution (sid), these problems have been fixed in version 5.6.9+dfsg-1. We recommend that you upgrade your php5 packages

Trust: 2.7

sources: NVD: CVE-2015-4024 // JVNDB: JVNDB-2015-003050 // BID: 74903 // VULHUB: VHN-81985 // VULMON: CVE-2015-4024 // PACKETSTORM: 132440 // PACKETSTORM: 132618 // PACKETSTORM: 132619 // PACKETSTORM: 132531 // PACKETSTORM: 132442 // PACKETSTORM: 132284 // PACKETSTORM: 132198

AFFECTED PRODUCTS

vendor:redhatmodel:enterprise linux serverscope:eqversion:7.0

Trust: 1.6

vendor:redhatmodel:enterprise linux workstationscope:eqversion:7.0

Trust: 1.6

vendor:redhatmodel:enterprise linux server eusscope:eqversion:7.1

Trust: 1.6

vendor:oraclemodel:linuxscope:eqversion:6

Trust: 1.3

vendor:oraclemodel:linuxscope:eqversion:7

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.6.8

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.5.4

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.5.19

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.5.13

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.6.5

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.5.8

Trust: 1.3

vendor:oraclemodel:solarisscope:eqversion:11.2

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.5.21

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.6.4

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.5.24

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.6.2

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.5.11

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.5.18

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.5.12

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.5.9

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.5.2

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.6.7

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.5.23

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.6.6

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.5.14

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.5.7

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.5.10

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.5.20

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.6.3

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.5.1

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.5.22

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.5.3

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.5.5

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.4.39

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.5.6

Trust: 1.3

vendor:phpmodel:phpscope:eqversion:5.6.0

Trust: 1.0

vendor:phpmodel:phpscope:eqversion:5.5.0

Trust: 1.0

vendor:redhatmodel:enterprise linux hpc node eusscope:eqversion:7.1

Trust: 1.0

vendor:applemodel:mac os xscope:lteversion:10.10.4

Trust: 1.0

vendor:redhatmodel:enterprise linuxscope:eqversion:7.0

Trust: 1.0

vendor:phpmodel:phpscope:lteversion:5.4.40

Trust: 1.0

vendor:redhatmodel:enterprise linux desktopscope:eqversion:7.0

Trust: 1.0

vendor:hpmodel:system management homepagescope:lteversion:7.5.3.1

Trust: 1.0

vendor:redhatmodel:enterprise linux hpc nodescope:eqversion:7.0

Trust: 1.0

vendor:redhatmodel:enterprise linuxscope:eqversion:6.0

Trust: 1.0

vendor:red hatmodel:software collectionsscope: - version: -

Trust: 0.8

vendor:red hatmodel:enterprise linux hpc nodescope: - version: -

Trust: 0.8

vendor:red hatmodel:enterprise linux workstationscope: - version: -

Trust: 0.8

vendor:applemodel:mac os xscope:eqversion:10.9.5

Trust: 0.8

vendor:red hatmodel:enterprise linux serverscope: - version: -

Trust: 0.8

vendor:hewlett packardmodel:system management homepagescope: - version: -

Trust: 0.8

vendor:applemodel:mac os xscope:eqversion:10.10 to 10.10.4

Trust: 0.8

vendor:red hatmodel:enterprise linux desktopscope: - version: -

Trust: 0.8

vendor:the php groupmodel:phpscope:ltversion:5.6.x

Trust: 0.8

vendor:the php groupmodel:phpscope:eqversion:5.6.9

Trust: 0.8

vendor:red hatmodel:enterprise linux server eusscope: - version: -

Trust: 0.8

vendor:the php groupmodel:phpscope:eqversion:5.5.25

Trust: 0.8

vendor:the php groupmodel:phpscope:ltversion:5.5.x

Trust: 0.8

vendor:red hatmodel:enterprise linux hpc node eusscope: - version: -

Trust: 0.8

vendor:slackwaremodel:linuxscope:eqversion:14.0

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.5

Trust: 0.3

vendor:redhatmodel:enterprise linux hpc node optionalscope:eqversion:6

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.14

Trust: 0.3

vendor:applemodel:mac osscope:neversion:x10.10.5

Trust: 0.3

vendor:debianmodel:linux armscope:eqversion:6.0

Trust: 0.3

vendor:ibmmodel:tealeaf customer experiencescope:eqversion:9.0

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.28

Trust: 0.3

vendor:debianmodel:linux ia-64scope:eqversion:6.0

Trust: 0.3

vendor:oraclemodel:enterprise linuxscope:eqversion:6.2

Trust: 0.3

vendor:redhatmodel:enterprise linux serverscope:eqversion:6

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.6.1

Trust: 0.3

vendor:redhatmodel:enterprise linux server optionalscope:eqversion:6

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.19

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.10

Trust: 0.3

vendor:redhatmodel:enterprise linux serverscope:eqversion:7

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.15

Trust: 0.3

vendor:alienvaultmodel:alienvaultscope:eqversion:4.14

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.11

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.10.3

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.6

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.13

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.35

Trust: 0.3

vendor:ibmmodel:tealeaf customer experiencescope:eqversion:8.8

Trust: 0.3

vendor:redhatmodel:enterprise linux workstationscope:eqversion:6

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.30

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.40

Trust: 0.3

vendor:alienvaultmodel:alienvaultscope:neversion:5.2

Trust: 0.3

vendor:redhatmodel:enterprise linux desktopscope:eqversion:7

Trust: 0.3

vendor:redhatmodel:enterprise linux workstationscope:eqversion:7

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.6

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.10.1

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.33

Trust: 0.3

vendor:ibmmodel:tealeaf customer experiencescope:eqversion:9.0.1

Trust: 0.3

vendor:alienvaultmodel:alienvaultscope:eqversion:5.1

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.17

Trust: 0.3

vendor:redhatmodel:enterprise linux workstation optionalscope:eqversion:6

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.8

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.7

Trust: 0.3

vendor:debianmodel:linux sparcscope:eqversion:6.0

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.32

Trust: 0.3

vendor:ibmmodel:tealeaf customer experience 9.0.0ascope: - version: -

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.9.5

Trust: 0.3

vendor:slackwaremodel:linux x86 64scope:eqversion:14.1

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.34

Trust: 0.3

vendor:alienvaultmodel:alienvaultscope:eqversion:4.15

Trust: 0.3

vendor:slackwaremodel:linux -currentscope: - version: -

Trust: 0.3

vendor:ibmmodel:tealeaf customer experiencescope:eqversion:9.0.2

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.26

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.3

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.4

Trust: 0.3

vendor:oraclemodel:solarisscope:eqversion:11.3

Trust: 0.3

vendor:phpmodel:phpscope:neversion:5.4.41

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.2

Trust: 0.3

vendor:centosmodel:centosscope:eqversion:6

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.16

Trust: 0.3

vendor:ibmmodel:tealeaf customer experiencescope:eqversion:8.7

Trust: 0.3

vendor:alienvaultmodel:alienvaultscope:eqversion:4.15.1

Trust: 0.3

vendor:alienvaultmodel:alienvaultscope:eqversion:4.15.2

Trust: 0.3

vendor:oraclemodel:enterprise linuxscope:eqversion:6

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.5.15

Trust: 0.3

vendor:redhatmodel:enterprise linux desktop optionalscope:eqversion:6

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.10.4

Trust: 0.3

vendor:ubuntumodel:linux ltsscope:eqversion:14.04

Trust: 0.3

vendor:phpmodel:phpscope:neversion:5.5.25

Trust: 0.3

vendor:ubuntumodel:linux lts i386scope:eqversion:12.04

Trust: 0.3

vendor:redhatmodel:enterprise linux hpc nodescope:eqversion:6

Trust: 0.3

vendor:debianmodel:linux amd64scope:eqversion:6.0

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.37

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.10.2

Trust: 0.3

vendor:alienvaultmodel:alienvaultscope:eqversion:4.13

Trust: 0.3

vendor:ubuntumodel:linux lts amd64scope:eqversion:12.04

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.36

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.38

Trust: 0.3

vendor:debianmodel:linux ia-32scope:eqversion:6.0

Trust: 0.3

vendor:debianmodel:linux mipsscope:eqversion:6.0

Trust: 0.3

vendor:ubuntumodel:linuxscope:eqversion:14.10

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.9

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.27

Trust: 0.3

vendor:alienvaultmodel:alienvaultscope:eqversion:4.12

Trust: 0.3

vendor:phpmodel:phpscope:neversion:5.6.9

Trust: 0.3

vendor:alienvaultmodel:alienvaultscope:eqversion:5.0.4

Trust: 0.3

vendor:alienvaultmodel:alienvaultscope:eqversion:4.12.1

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.29

Trust: 0.3

vendor:ibmmodel:tealeaf customer experience 9.0.1ascope: - version: -

Trust: 0.3

vendor:ibmmodel:flex system chassis management module 2petscope: - version: -

Trust: 0.3

vendor:slackwaremodel:linuxscope:eqversion:14.1

Trust: 0.3

vendor:ibmmodel:tealeaf customer experiencescope:eqversion:8.6

Trust: 0.3

vendor:alienvaultmodel:alienvaultscope:eqversion:5.0

Trust: 0.3

vendor:debianmodel:linux s/390scope:eqversion:6.0

Trust: 0.3

vendor:slackwaremodel:linux x86 64scope:eqversion:14.0

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.20

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.10

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.1

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.12

Trust: 0.3

vendor:debianmodel:linux powerpcscope:eqversion:6.0

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.5.16

Trust: 0.3

vendor:ibmmodel:flex system chassis management module 2pet14c-2.5.5cscope:neversion: -

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.18

Trust: 0.3

vendor:redhatmodel:enterprise linux hpc nodescope:eqversion:7

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.22

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.31

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.5.17

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.24

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.25

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.5

Trust: 0.3

vendor:ibmmodel:tealeaf customer experiencescope:eqversion:8.0

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.23

Trust: 0.3

vendor:ubuntumodel:linuxscope:eqversion:15.04

Trust: 0.3

vendor:slackwaremodel:linux x86 64 -currentscope: - version: -

Trust: 0.3

vendor:phpmodel:phpscope:eqversion:5.4.21

Trust: 0.3

sources: BID: 74903 // JVNDB: JVNDB-2015-003050 // CNNVD: CNNVD-201506-131 // NVD: CVE-2015-4024

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2015-4024
value: MEDIUM

Trust: 1.0

NVD: CVE-2015-4024
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-201506-131
value: MEDIUM

Trust: 0.6

VULHUB: VHN-81985
value: MEDIUM

Trust: 0.1

VULMON: CVE-2015-4024
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2015-4024
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

VULHUB: VHN-81985
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-81985 // VULMON: CVE-2015-4024 // JVNDB: JVNDB-2015-003050 // CNNVD: CNNVD-201506-131 // NVD: CVE-2015-4024

PROBLEMTYPE DATA

problemtype:CWE-399

Trust: 1.9

sources: VULHUB: VHN-81985 // JVNDB: JVNDB-2015-003050 // NVD: CVE-2015-4024

THREAT TYPE

remote

Trust: 0.9

sources: PACKETSTORM: 132440 // PACKETSTORM: 132531 // PACKETSTORM: 132442 // CNNVD: CNNVD-201506-131

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-201506-131

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2015-003050

PATCH
title:APPLE-SA-2015-08-13-2 OS X Yosemite v10.10.5 and Security Update 2015-006url:http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html
Trust: 0.8
title:HT205031url:https://support.apple.com/en-us/HT205031
Trust: 0.8
title:HT205031url:https://support.apple.com/ja-jp/HT205031
Trust: 0.8
title:HPSBMU03546url:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763
Trust: 0.8
title:Oracle Solaris Third Party Bulletin - July 2015url:http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
Trust: 0.8
title:Sec Bug #69364url:https://bugs.php.net/bug.php?id=69364
Trust: 0.8
title:RHSA-2015:1135url:http://rhn.redhat.com/errata/RHSA-2015-1135.html
Trust: 0.8
title:RHSA-2015:1187url:http://rhn.redhat.com/errata/RHSA-2015-1187.html
Trust: 0.8
title:PHP 5 ChangeLogurl:http://php.net/ChangeLog-5.php
Trust: 0.8
title:TLSA-2015-15url:http://www.turbolinux.co.jp/security/2015/TLSA-2015-15j.html
Trust: 0.8
title:Debian Security Advisories: DSA-3280-1 php5 -- security updateurl:https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories&qid=46f85ac4e3abfa7a18e115fb47892db6
Trust: 0.1
title:Amazon Linux AMI: ALAS-2015-535url:https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami&qid=ALAS-2015-535
Trust: 0.1
title:Amazon Linux AMI: ALAS-2015-534url:https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami&qid=ALAS-2015-534
Trust: 0.1
title:Tenable Security Advisories: [R4] SecurityCenter 5.0.0.1 Affected by Third-party Libraryurl:https://vulmon.com/vendoradvisory?qidtp=tenable_security_advisories&qid=TNS-2015-06
Trust: 0.1
title:Amazon Linux AMI: ALAS-2015-536url:https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami&qid=ALAS-2015-536
Trust: 0.1
title:Ubuntu Security Notice: php5 vulnerabilitiesurl:https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-2658-1
Trust: 0.1
title:Oracle Solaris Third Party Bulletins: Oracle Solaris Third Party Bulletin - July 2015url:https://vulmon.com/vendoradvisory?qidtp=oracle_solaris_third_party_bulletins&qid=8b701aba68029ec36b631a8e26157a22
Trust: 0.1
title:Apple: OS X Yosemite v10.10.5 and Security Update 2015-006url:https://vulmon.com/vendoradvisory?qidtp=apple_security_advisories&qid=9834d0d73bf28fb80d3390930bafd906
Trust: 0.1
title:Oracle Solaris Third Party Bulletins: Oracle Solaris Third Party Bulletin - July 2017url:https://vulmon.com/vendoradvisory?qidtp=oracle_solaris_third_party_bulletins&qid=a22ad41e97bbfc5abb0bb927bf43089c
Trust: 0.1
title:Oracle Linux Bulletins: Oracle Linux Bulletin - January 2016url:https://vulmon.com/vendoradvisory?qidtp=oracle_linux_bulletins&qid=8ad80411af3e936eb2998df70506cc71
Trust: 0.1
title:php-load-testurl:https://github.com/typcn/php-load-test 
Trust: 0.1
title:phpbug69364-testurl:https://github.com/qqq232575/phpbug69364-test 
Trust: 0.1
sources:
            
            
            VULMON: CVE-2015-4024 // 
            
            
            
            JVNDB: JVNDB-2015-003050

EXTERNAL IDS
db:NVDid:CVE-2015-4024
Trust: 3.6
db:BIDid:74903
Trust: 2.1
db:SECTRACKid:1032432
Trust: 1.8
db:JVNDBid:JVNDB-2015-003050
Trust: 0.8
db:CNNVDid:CNNVD-201506-131
Trust: 0.7
db:SEEBUGid:SSVID-89209
Trust: 0.1
db:VULHUBid:VHN-81985
Trust: 0.1
db:VULMONid:CVE-2015-4024
Trust: 0.1
db:PACKETSTORMid:132440
Trust: 0.1
db:PACKETSTORMid:132618
Trust: 0.1
db:PACKETSTORMid:132619
Trust: 0.1
db:PACKETSTORMid:132531
Trust: 0.1
db:PACKETSTORMid:132442
Trust: 0.1
db:PACKETSTORMid:132284
Trust: 0.1
db:PACKETSTORMid:132198
Trust: 0.1
sources:
            
            
            VULHUB: VHN-81985 // 
            
            
            
            VULMON: CVE-2015-4024 // 
            
            
            
            BID: 74903 // 
            
            
            
            JVNDB: JVNDB-2015-003050 // 
            
            
            
            PACKETSTORM: 132440 // 
            
            
            
            PACKETSTORM: 132618 // 
            
            
            
            PACKETSTORM: 132619 // 
            
            
            
            PACKETSTORM: 132531 // 
            
            
            
            PACKETSTORM: 132442 // 
            
            
            
            PACKETSTORM: 132284 // 
            
            
            
            PACKETSTORM: 132198 // 
            
            
            
            CNNVD: CNNVD-201506-131 // 
            
            
            
            NVD: CVE-2015-4024

REFERENCES
url:http://www.securityfocus.com/bid/74903
Trust: 2.4
url:http://www.debian.org/security/2015/dsa-3280
Trust: 2.4
url:http://php.net/changelog-5.php
Trust: 2.1
url:http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
Trust: 2.1
url:http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
Trust: 2.1
url:https://bugs.php.net/bug.php?id=69364
Trust: 2.1
url:http://rhn.redhat.com/errata/rhsa-2015-1135.html
Trust: 2.1
url:http://rhn.redhat.com/errata/rhsa-2015-1186.html
Trust: 1.9
url:http://rhn.redhat.com/errata/rhsa-2015-1187.html
Trust: 1.9
url:http://rhn.redhat.com/errata/rhsa-2015-1218.html
Trust: 1.9
url:http://rhn.redhat.com/errata/rhsa-2015-1219.html
Trust: 1.9
url:http://lists.apple.com/archives/security-announce/2015/aug/msg00001.html
Trust: 1.8
url:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docdisplay?docid=emr_na-c05045763
Trust: 1.8
url:https://support.apple.com/kb/ht205031
Trust: 1.8
url:http://lists.fedoraproject.org/pipermail/package-announce/2015-may/158616.html
Trust: 1.8
url:http://lists.fedoraproject.org/pipermail/package-announce/2015-may/159031.html
Trust: 1.8
url:http://lists.fedoraproject.org/pipermail/package-announce/2015-may/158915.html
Trust: 1.8
url:http://www.securitytracker.com/id/1032432
Trust: 1.8
url:http://lists.opensuse.org/opensuse-updates/2015-06/msg00002.html
Trust: 1.8
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-4024
Trust: 0.9
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-4024
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2015-4021
Trust: 0.7
url:https://nvd.nist.gov/vuln/detail/cve-2015-4024
Trust: 0.7
url:https://nvd.nist.gov/vuln/detail/cve-2015-4026
Trust: 0.7
url:https://nvd.nist.gov/vuln/detail/cve-2015-4022
Trust: 0.7
url:https://nvd.nist.gov/vuln/detail/cve-2015-4025
Trust: 0.6
url:https://nvd.nist.gov/vuln/detail/cve-2015-4598
Trust: 0.5
url:https://nvd.nist.gov/vuln/detail/cve-2015-3411
Trust: 0.4
url:https://access.redhat.com/security/cve/cve-2015-4024
Trust: 0.4
url:https://access.redhat.com/security/cve/cve-2015-4021
Trust: 0.4
url:https://access.redhat.com/security/cve/cve-2015-4022
Trust: 0.4
url:https://nvd.nist.gov/vuln/detail/cve-2015-3412
Trust: 0.4
url:https://access.redhat.com/articles/11258
Trust: 0.4
url:https://access.redhat.com/security/team/contact/
Trust: 0.4
url:https://www.redhat.com/mailman/listinfo/rhsa-announce
Trust: 0.4
url:https://access.redhat.com/security/cve/cve-2015-4026
Trust: 0.4
url:https://bugzilla.redhat.com/):
Trust: 0.4
url:https://nvd.nist.gov/vuln/detail/cve-2015-4602
Trust: 0.4
url:https://access.redhat.com/security/cve/cve-2015-4598
Trust: 0.4
url:https://nvd.nist.gov/vuln/detail/cve-2015-4603
Trust: 0.4
url:https://nvd.nist.gov/vuln/detail/cve-2015-3329
Trust: 0.4
url:https://access.redhat.com/security/team/key/
Trust: 0.4
url:https://nvd.nist.gov/vuln/detail/cve-2015-2783
Trust: 0.4
url:http://www.php.net
Trust: 0.3
url:http://prod.lists.apple.com/archives/security-announce/2015/aug/msg00001.html
Trust: 0.3
url:http://git.php.net/?p=php-src.git;a=commitdiff;h=4605d536d23b00813d11cc906bb48d39bdcf5f25
Trust: 0.3
url:https://www.oracle.com/technetwork/topics/security/bulletinjul2017-3814622.html
Trust: 0.3
url:https://www.alienvault.com/forums/discussion/6075/security-advisory-alienvault-v5-2-addresses-55-vulnerabilities
Trust: 0.3
url:https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5099196
Trust: 0.3
url:http://www-01.ibm.com/support/docview.wss?uid=swg21972384
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2015-4605
Trust: 0.3
url:https://access.redhat.com/security/cve/cve-2015-4603
Trust: 0.3
url:https://access.redhat.com/security/cve/cve-2015-3307
Trust: 0.3
url:https://access.redhat.com/security/cve/cve-2015-3411
Trust: 0.3
url:https://access.redhat.com/security/cve/cve-2015-2783
Trust: 0.3
url:https://access.redhat.com/security/cve/cve-2015-4602
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2015-3307
Trust: 0.3
url:https://access.redhat.com/security/cve/cve-2015-3412
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2015-4604
Trust: 0.3
url:https://access.redhat.com/security/cve/cve-2015-3329
Trust: 0.3
url:https://access.redhat.com/security/cve/cve-2015-4025
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2015-3330
Trust: 0.2
url:https://access.redhat.com/security/cve/cve-2015-4604
Trust: 0.2
url:https://access.redhat.com/security/cve/cve-2015-3330
Trust: 0.2
url:https://access.redhat.com/security/updates/classification/#important
Trust: 0.2
url:https://access.redhat.com/security/cve/cve-2015-4605
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2015-4148
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2015-4601
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2015-4600
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2015-4147
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2015-4599
Trust: 0.2
url:https://access.redhat.com/security/updates/classification/#moderate
Trust: 0.2
url:http://www.debian.org/security/
Trust: 0.2
url:https://cwe.mitre.org/data/definitions/399.html
Trust: 0.1
url:https://github.com/typcn/php-load-test
Trust: 0.1
url:https://nvd.nist.gov
Trust: 0.1
url:http://tools.cisco.com/security/center/viewalert.x?alertid=39138
Trust: 0.1
url:https://usn.ubuntu.com/2658-1/
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2015-4600
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2015-4147
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2015-4148
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2014-9705
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2015-0232
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2015-0232
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2015-0273
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2014-9705
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2015-2301
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2014-9425
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2015-4599
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2015-2787
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2015-2787
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2014-9425
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2015-4601
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2014-9709
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2015-0273
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2015-2301
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2014-9709
Trust: 0.1
url:https://launchpad.net/ubuntu/+source/php5/5.6.4+dfsg-4ubuntu6.2
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2015-4644
Trust: 0.1
url:https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.11
Trust: 0.1
url:https://launchpad.net/ubuntu/+source/php5/5.5.12+dfsg-2ubuntu4.6
Trust: 0.1
url:http://www.ubuntu.com/usn/usn-2658-1
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2015-4643
Trust: 0.1
url:https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.19
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2015-2325
Trust: 0.1
url:http://slackware.com
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-4025
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-4026
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-4021
Trust: 0.1
url:http://slackware.com/gpg-key
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2015-2326
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-4022
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-2325
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2006-7243
Trust: 0.1
url:http://osuosl.org)
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2006-7243
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-2326
Trust: 0.1
url:http://www.debian.org/security/faq
Trust: 0.1
sources:
            
            
            VULHUB: VHN-81985 // 
            
            
            
            VULMON: CVE-2015-4024 // 
            
            
            
            BID: 74903 // 
            
            
            
            JVNDB: JVNDB-2015-003050 // 
            
            
            
            PACKETSTORM: 132440 // 
            
            
            
            PACKETSTORM: 132618 // 
            
            
            
            PACKETSTORM: 132619 // 
            
            
            
            PACKETSTORM: 132531 // 
            
            
            
            PACKETSTORM: 132442 // 
            
            
            
            PACKETSTORM: 132284 // 
            
            
            
            PACKETSTORM: 132198 // 
            
            
            
            CNNVD: CNNVD-201506-131 // 
            
            
            
            NVD: CVE-2015-4024

CREDITS
Red Hat
Trust: 0.4
sources:
            
            
            PACKETSTORM: 132440 // 
            
            
            
            PACKETSTORM: 132618 // 
            
            
            
            PACKETSTORM: 132619 // 
            
            
            
            PACKETSTORM: 132442

SOURCES
db:VULHUBid:VHN-81985
db:VULMONid:CVE-2015-4024
db:BIDid:74903
db:JVNDBid:JVNDB-2015-003050
db:PACKETSTORMid:132440
db:PACKETSTORMid:132618
db:PACKETSTORMid:132619
db:PACKETSTORMid:132531
db:PACKETSTORMid:132442
db:PACKETSTORMid:132284
db:PACKETSTORMid:132198
db:CNNVDid:CNNVD-201506-131
db:NVDid:CVE-2015-4024

LAST UPDATE DATE
2024-11-12T20:24:23.777000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-81985date:2019-12-27T00:00:00
db:VULMONid:CVE-2015-4024date:2019-12-27T00:00:00
db:BIDid:74903date:2017-07-21T13:07:00
db:JVNDBid:JVNDB-2015-003050date:2016-09-30T00:00:00
db:CNNVDid:CNNVD-201506-131date:2019-12-30T00:00:00
db:NVDid:CVE-2015-4024date:2019-12-27T16:08:55.810

SOURCES RELEASE DATE
db:VULHUBid:VHN-81985date:2015-06-09T00:00:00
db:VULMONid:CVE-2015-4024date:2015-06-09T00:00:00
db:BIDid:74903date:2015-05-14T00:00:00
db:JVNDBid:JVNDB-2015-003050date:2015-06-12T00:00:00
db:PACKETSTORMid:132440date:2015-06-25T14:18:12
db:PACKETSTORMid:132618date:2015-07-09T23:16:17
db:PACKETSTORMid:132619date:2015-07-09T23:16:26
db:PACKETSTORMid:132531date:2015-07-07T00:23:34
db:PACKETSTORMid:132442date:2015-06-25T14:18:25
db:PACKETSTORMid:132284date:2015-06-12T13:17:49
db:PACKETSTORMid:132198date:2015-06-10T01:21:58
db:CNNVDid:CNNVD-201506-131date:2015-06-10T00:00:00
db:NVDid:CVE-2015-4024date:2015-06-09T18:59:06.770