5

CVE-2014-3668

Exploit
Buffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc/xmlrpc.c in the XMLRPC extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to cause a denial of service (application crash) via (1) a crafted first argument to the xmlrpc_set_type function or (2) a crafted argument to the xmlrpc_decode function, related to an out-of-bounds read operation.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Php ≫ Php Version <= 5.4.33
Php ≫ Php Version5.4.0
Php ≫ Php Version5.4.1
Php ≫ Php Version5.4.2
Php ≫ Php Version5.4.3
Php ≫ Php Version5.4.4
Php ≫ Php Version5.4.5
Php ≫ Php Version5.4.6
Php ≫ Php Version5.4.7
Php ≫ Php Version5.4.8
Php ≫ Php Version5.4.9
Php ≫ Php Version5.4.10
Php ≫ Php Version5.4.11
Php ≫ Php Version5.4.12
Php ≫ Php Version5.4.12 Updaterc1
Php ≫ Php Version5.4.12 Updaterc2
Php ≫ Php Version5.4.13
Php ≫ Php Version5.4.13 Updaterc1
Php ≫ Php Version5.4.14
Php ≫ Php Version5.4.14 Updaterc1
Php ≫ Php Version5.4.15 Updaterc1
Php ≫ Php Version5.4.16 Updaterc1
Php ≫ Php Version5.4.17
Php ≫ Php Version5.4.18
Php ≫ Php Version5.4.19
Php ≫ Php Version5.4.20
Php ≫ Php Version5.4.21
Php ≫ Php Version5.4.22
Php ≫ Php Version5.4.23
Php ≫ Php Version5.4.24
Php ≫ Php Version5.4.25
Php ≫ Php Version5.4.26
Php ≫ Php Version5.4.27
Php ≫ Php Version5.4.28
Php ≫ Php Version5.4.29
Php ≫ Php Version5.4.30
Php ≫ Php Version5.4.31
Php ≫ Php Version5.4.32
Php ≫ Php Version5.5.0
Php ≫ Php Version5.5.0 Updatealpha1
Php ≫ Php Version5.5.0 Updatealpha2
Php ≫ Php Version5.5.0 Updatealpha3
Php ≫ Php Version5.5.0 Updatealpha4
Php ≫ Php Version5.5.0 Updatealpha5
Php ≫ Php Version5.5.0 Updatealpha6
Php ≫ Php Version5.5.0 Updatebeta1
Php ≫ Php Version5.5.0 Updatebeta2
Php ≫ Php Version5.5.0 Updatebeta3
Php ≫ Php Version5.5.0 Updatebeta4
Php ≫ Php Version5.5.0 Updaterc1
Php ≫ Php Version5.5.0 Updaterc2
Php ≫ Php Version5.5.1
Php ≫ Php Version5.5.2
Php ≫ Php Version5.5.3
Php ≫ Php Version5.5.4
Php ≫ Php Version5.5.5
Php ≫ Php Version5.5.6
Php ≫ Php Version5.5.7
Php ≫ Php Version5.5.8
Php ≫ Php Version5.5.9
Php ≫ Php Version5.5.10
Php ≫ Php Version5.5.11
Php ≫ Php Version5.5.12
Php ≫ Php Version5.5.13
Php ≫ Php Version5.5.14
Php ≫ Php Version5.5.15
Php ≫ Php Version5.5.16
Php ≫ Php Version5.5.17
Php ≫ Php Version5.6.0
Php ≫ Php Version5.6.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 27.02% 0.978
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
http://php.net/ChangeLog-5.php
http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
http://rhn.redhat.com/errata/RHSA-2014-1765.html
https://support.apple.com/HT204659
http://rhn.redhat.com/errata/RHSA-2014-1766.html
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=88412772d295ebf7dd34409534507dc9bcac726e
http://linux.oracle.com/errata/ELSA-2014-1767.html
http://linux.oracle.com/errata/ELSA-2014-1768.html
http://lists.opensuse.org/opensuse-updates/2014-11/msg00024.html
http://lists.opensuse.org/opensuse-updates/2014-11/msg00034.html
http://lists.opensuse.org/opensuse-updates/2015-01/msg00006.html
http://rhn.redhat.com/errata/RHSA-2014-1767.html
http://rhn.redhat.com/errata/RHSA-2014-1768.html
http://secunia.com/advisories/59967
http://secunia.com/advisories/60630
http://secunia.com/advisories/60699
http://secunia.com/advisories/61763
http://secunia.com/advisories/61970
http://secunia.com/advisories/61982
http://www.debian.org/security/2014/dsa-3064
http://www.securityfocus.com/bid/70666
http://www.ubuntu.com/usn/USN-2391-1
https://bugs.php.net/bug.php?id=68027
Patch
Vendor Advisory
Exploit
https://bugzilla.redhat.com/show_bug.cgi?id=1154503