Medium WID-SEC-2023-0069 6 CVEs

PHP: Mehrere Schwachstellen

Published Mar 30, 2015 · Updated Jan 12, 2023 · Revision 22 · de-DE

Vendor: Debian Vendor: HPE Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: Enterprise Linux Product: Enterprise Linux 6 Product: Enterprise Linux 7 Product: HP-UX Product: Linux Product: Linux Product: Linux Enterprise Desktop 11 SP3 Product: Linux Enterprise Server Product: Linux Enterprise Server 11 SP3 Product: Linux Enterprise Server 11 SP3 for VMware Product: Linux Wheezy (7.0) Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen oder einen Denial of Service Zustand herbeizuführen.

Product

PHP ist eine Programmiersprache, die zur Implementierung von Web-Applikationen genutzt wird.

Vulnerabilities 6

Unscored —

CVE-2013-6501

The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 spec…

php5 php7.0 Ubuntu

Mar 30, 2015
Unscored —

CVE-2014-9705 EPSS 19%

Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5…

php5 Ubuntu

Mar 30, 2015
Unscored —

CVE-2014-9709 EPSS 15%

The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allo…

libgd2 libgd2 Debian Ubuntu

Mar 30, 2015
Unscored —

CVE-2015-2301 EPSS 15%

Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before…

php5 Ubuntu

Mar 30, 2015
Unscored —

CVE-2015-2348

The move_uploaded_file implementation in ext/standard/basic_functions.c in PHP before 5.4.39, 5.5.x before 5.5.23, and …

php5 Ubuntu

Mar 30, 2015
Unscored —

CVE-2015-2787 EPSS 12%

Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.…

php5 Ubuntu

Mar 30, 2015

Revision history

2023-01-12 #22
Bereinigung doppelte Einträge
2023-01-11 #21
Neue Updates von SUSE aufgenommen
2016-07-17 #20
New remediations available
2016-05-31 #19
New remediations available
2015-07-12 #17
New remediations available
2015-07-12 #18
Version nicht vorhanden
2015-07-09 #16
New remediations available
2015-06-22 #15
New remediations available
2015-06-11 #13
New remediations available
2015-06-11 #14
Version nicht vorhanden
2015-06-09 #11
New remediations available
2015-06-09 #12
Version nicht vorhanden
2015-06-07 #10
New remediations available
2015-06-04 #8
New remediations available
2015-06-04 #9
Version nicht vorhanden
2015-05-10 #6
New remediations available
2015-05-10 #7
Version nicht vorhanden
2015-04-20 #5
New remediations available
2015-04-07 #3
New remediations available
2015-04-07 #4
Version nicht vorhanden
2015-03-30 #1
Initial Release
2015-03-30 #2
Version nicht vorhanden

References

SUSE Security Update SUSE-SU-2023:0072-1 vom 2023-01-12
https://lists.suse.com/pipermail/sle-security-updates/2023-January/013458.html
Einträge in der NIST National Vulnerability Database vom 2015-03-30
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6501
Einträge in der NIST National Vulnerability Database vom 2015-03-30
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9705
Einträge in der NIST National Vulnerability Database vom 2015-03-30
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9709
Einträge in der NIST National Vulnerability Database vom 2015-03-30
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-2301
Einträge in der NIST National Vulnerability Database vom 2015-03-30
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-2787
Einträge in der NIST National Vulnerability Database vom 2015-03-30
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-2348
Debian Security Advisory DSA-3215-1 vom 2015-04-07
https://www.debian.org/security/2015/dsa-3215
Ubuntu Security Notice USN-2572-1 vom 2015-04-20
http://www.ubuntu.com/usn/usn-2572-1/
SUSE Security Update SUSE-SU-2015:0835-1 vom 2015-05-09
https://www.suse.com/support/update/announcement/2015/suse-su-20150835-1.html
Red Hat Security Advisory RHSA-2015:1053 vom 2015-06-04
https://rhn.redhat.com/errata/RHSA-2015-1053.html
Red Hat Security Advisory RHSA-2015:1066-2 vom 2015-06-05
http://rhn.redhat.com/errata/RHSA-2015-1066.html
SUSE Security Update SUSE-SU-2015:1018-1 vom 2015-06-09
https://www.suse.com/support/update/announcement/2015/suse-su-20151018-1.html
HP-UX Security Bulletin HPSBUX03337 SSRT102066 rev.1
http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04686230
Red Hat Security Advisory RHSA-2015:1135 vom 2015-06-23
http://rhn.redhat.com/errata/RHSA-2015-1135.html
Red Hat Security Advisory RHSA-2015:1218-1 vom 2015-07-09
http://rhn.redhat.com/errata/RHSA-2015-1218.html
CESA-2015:1218 Moderate CentOS 6 php Security Update vom 2015-07-09
http://lists.centos.org/pipermail/centos-announce/2015-July/021237.html
Ubuntu Security Notice USN-2987-1 vom 2016-05-31
http://www.ubuntu.com/usn/usn-2987-1/
GENTOO Security Advisory GLSA201607-04 vom 2016-07-16
https://security.gentoo.org/glsa/201607-04