Skip to content
OpenAdvisories
Unscored USN-2344-1 2 CVEs

php5 vulnerabilities

Published Sep 10, 2014 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that the Fileinfo component in php5 contains an integer
overflow. An attacker could use this flaw to cause a denial of service
or possibly execute arbitrary code via a crafted CDF file. (CVE-2014-3587)

It was discovered that the php_parserr function contains multiple buffer
overflows. An attacker could use this flaw to cause a denial of service
or possibly execute arbitrary code via crafted DNS records. (CVE-2014-3597)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS php5 5.5.9+dfsg-1ubuntu4.4

Vulnerabilities 2

  • Unscored —
    CVE-2014-3587 EPSS 20%

    Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo componen…

    php5 file file Debian Ubuntu
  • Unscored —
    CVE-2014-3597 EPSS 15%

    Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.1…

    php5 Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2014-3587
  • report
    https://ubuntu.com/security/CVE-2014-3597