Vulnerability-Lookup

SUSE-SU-2016:1638-1

Vulnerability from csaf_suse - Published: 2016-06-21 07:55 - Updated: 2016-06-21 07:55

Summary

Security update for php53

Severity

Important

Notes

Title of the patch: Security update for php53

Description of the patch: This update for php53 to version 5.3.17 fixes the following issues: These security issues were fixed: - CVE-2016-5093: get_icu_value_internal out-of-bounds read (bnc#982010). - CVE-2016-5094: Don't create strings with lengths outside int range (bnc#982011). - CVE-2016-5095: Don't create strings with lengths outside int range (bnc#982012). - CVE-2016-5096: int/size_t confusion in fread (bsc#982013). - CVE-2016-5114: fpm_log.c memory leak and buffer overflow (bnc#982162). - CVE-2015-8879: The odbc_bindcols function in ext/odbc/php_odbc.c in PHP mishandles driver behavior for SQL_WVARCHAR columns, which allowed remote attackers to cause a denial of service (application crash) in opportunistic circumstances by leveraging use of the odbc_fetch_array function to access a certain type of Microsoft SQL Server table (bsc#981050). - CVE-2015-4116: Use-after-free vulnerability in the spl_ptr_heap_insert function in ext/spl/spl_heap.c in PHP allowed remote attackers to execute arbitrary code by triggering a failed SplMinHeap::compare operation (bsc#980366). - CVE-2015-8874: Stack consumption vulnerability in GD in PHP allowed remote attackers to cause a denial of service via a crafted imagefilltoborder call (bsc#980375). - CVE-2015-8873: Stack consumption vulnerability in Zend/zend_exceptions.c in PHP allowed remote attackers to cause a denial of service (segmentation fault) via recursive method calls (bsc#980373). - CVE-2016-4540: The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP allowed remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset (bsc#978829). - CVE-2016-4541: The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP allowed remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset (bsc#978829. - CVE-2016-4542: The exif_process_IFD_TAG function in ext/exif/exif.c in PHP did not properly construct spprintf arguments, which allowed remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data (bsc#978830). - CVE-2016-4543: The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP did not validate IFD sizes, which allowed remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data (bsc#978830. - CVE-2016-4544: The exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP did not validate TIFF start data, which allowed remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data (bsc#978830. - CVE-2016-4537: The bcpowmod function in ext/bcmath/bcmath.c in PHP accepted a negative integer for the scale argument, which allowed remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted call (bsc#978827). - CVE-2016-4538: The bcpowmod function in ext/bcmath/bcmath.c in PHP modified certain data structures without considering whether they are copies of the _zero_, _one_, or _two_ global variable, which allowed remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted call (bsc#978827). - CVE-2016-4539: The xml_parse_into_struct function in ext/xml/xml.c in PHP allowed remote attackers to cause a denial of service (buffer under-read and segmentation fault) or possibly have unspecified other impact via crafted XML data in the second argument, leading to a parser level of zero (bsc#978828). - CVE-2016-4342: ext/phar/phar_object.c in PHP mishandles zero-length uncompressed data, which allowed remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted (1) TAR, (2) ZIP, or (3) PHAR archive (bsc#977991). - CVE-2016-4346: Integer overflow in the str_pad function in ext/standard/string.c in PHP allowed remote attackers to cause a denial of service or possibly have unspecified other impact via a long string, leading to a heap-based buffer overflow (bsc#977994). - CVE-2016-4073: Multiple integer overflows in the mbfl_strcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in PHP allowed remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted mb_strcut call (bsc#977003). - CVE-2015-8867: The openssl_random_pseudo_bytes function in ext/openssl/openssl.c in PHP incorrectly relied on the deprecated RAND_pseudo_bytes function, which made it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors (bsc#977005). - CVE-2016-4070: Integer overflow in the php_raw_url_encode function in ext/standard/url.c in PHP allowed remote attackers to cause a denial of service (application crash) via a long string to the rawurlencode function (bsc#976997). - CVE-2015-8866: ext/libxml/libxml.c in PHP when PHP-FPM is used, did not isolate each thread from libxml_disable_entity_loader changes in other threads, which allowed remote attackers to conduct XML External Entity (XXE) and XML Entity Expansion (XEE) attacks via a crafted XML document, a related issue to CVE-2015-5161 (bsc#976996). - CVE-2015-8838: ext/mysqlnd/mysqlnd.c in PHP used a client SSL option to mean that SSL is optional, which allowed man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152 (bsc#973792). - CVE-2015-8835: The make_http_soap_request function in ext/soap/php_http.c in PHP did not properly retrieve keys, which allowed remote attackers to cause a denial of service (NULL pointer dereference, type confusion, and application crash) or possibly execute arbitrary code via crafted serialized data representing a numerically indexed _cookies array, related to the SoapClient::__call method in ext/soap/soap.c (bsc#973351). - CVE-2016-3141: Use-after-free vulnerability in wddx.c in the WDDX extension in PHP allowed remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact by triggering a wddx_deserialize call on XML data containing a crafted var element (bsc#969821). - CVE-2016-3142: The phar_parse_zipfile function in zip.c in the PHAR extension in PHP allowed remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and application crash) by placing a PK\x05\x06 signature at an invalid location (bsc#971912). - CVE-2014-9767: Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP ext/zip/ext_zip.cpp in HHVM allowed remote attackers to create arbitrary empty directories via a crafted ZIP archive (bsc#971612). - CVE-2016-3185: The make_http_soap_request function in ext/soap/php_http.c in PHP allowed remote attackers to obtain sensitive information from process memory or cause a denial of service (type confusion and application crash) via crafted serialized _cookies data, related to the SoapClient::__call method in ext/soap/soap.c (bsc#971611). - CVE-2016-2554: Stack-based buffer overflow in ext/phar/tar.c in PHP allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TAR archive (bsc#968284). - CVE-2015-7803: The phar_get_entry_data function in ext/phar/util.c in PHP allowed remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a .phar file with a crafted TAR archive entry in which the Link indicator references a file that did not exist (bsc#949961). - CVE-2015-6831: Multiple use-after-free vulnerabilities in SPL in PHP allowed remote attackers to execute arbitrary code via vectors involving (1) ArrayObject, (2) SplObjectStorage, and (3) SplDoublyLinkedList, which are mishandled during unserialization (bsc#942291). - CVE-2015-6833: Directory traversal vulnerability in the PharData class in PHP allowed remote attackers to write to arbitrary files via a .. (dot dot) in a ZIP archive entry that is mishandled during an extractTo call (bsc#942296. - CVE-2015-6836: The SoapClient __call method in ext/soap/soap.c in PHP did not properly manage headers, which allowed remote attackers to execute arbitrary code via crafted serialized data that triggers a 'type confusion' in the serialize_function_call function (bsc#945428). - CVE-2015-6837: The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP when libxml2 is used, did not consider the possibility of a NULL valuePop return value proceeding with a free operation during initial error checking, which allowed remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted XML document, a different vulnerability than CVE-2015-6838 (bsc#945412). - CVE-2015-6838: The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP when libxml2 is used, did not consider the possibility of a NULL valuePop return value proceeding with a free operation after the principal argument loop, which allowed remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted XML document, a different vulnerability than CVE-2015-6837 (bsc#945412). - CVE-2015-5590: Stack-based buffer overflow in the phar_fix_filepath function in ext/phar/phar.c in PHP allowed remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value, as demonstrated by mishandling of an e-mail attachment by the imap PHP extension (bsc#938719). - CVE-2015-5589: The phar_convert_to_other function in ext/phar/phar_object.c in PHP did not validate a file pointer a close operation, which allowed remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted TAR archive that is mishandled in a Phar::convertToData call (bsc#938721). - CVE-2015-4602: The __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP allowed remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to a 'type confusion' issue (bsc#935224). - CVE-2015-4599: The SoapFault::__toString method in ext/soap/soap.c in PHP allowed remote attackers to obtain sensitive information, cause a denial of service (application crash), or possibly execute arbitrary code via an unexpected data type, related to a 'type confusion' issue (bsc#935226). - CVE-2015-4600: The SoapClient implementation in PHP allowed remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to 'type confusion' issues in the (1) SoapClient::__getLastRequest, (2) SoapClient::__getLastResponse, (3) SoapClient::__getLastRequestHeaders, (4) SoapClient::__getLastResponseHeaders, (5) SoapClient::__getCookies, and (6) SoapClient::__setCookie methods (bsc#935226). - CVE-2015-4601: PHP allowed remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to 'type confusion' issues in (1) ext/soap/php_encoding.c, (2) ext/soap/php_http.c, and (3) ext/soap/soap.c, a different issue than CVE-2015-4600 (bsc#935226. - CVE-2015-4603: The exception::getTraceAsString function in Zend/zend_exceptions.c in PHP allowed remote attackers to execute arbitrary code via an unexpected data type, related to a 'type confusion' issue (bsc#935234). - CVE-2015-4644: The php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP did not validate token extraction for table names, which might allowed remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted name. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1352 (bsc#935274). - CVE-2015-4643: Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP allowed remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-4022 (bsc#935275). - CVE-2015-3411: PHP did not ensure that pathnames lack %00 sequences, which might have allowed remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument load method, (2) the xmlwriter_open_uri function, (3) the finfo_file function, or (4) the hash_hmac_file function, as demonstrated by a filename\0.xml attack that bypasses an intended configuration in which client users may read only .xml files (bsc#935227). - CVE-2015-3412: PHP did not ensure that pathnames lack %00 sequences, which might have allowed remote attackers to read arbitrary files via crafted input to an application that calls the stream_resolve_include_path function in ext/standard/streamsfuncs.c, as demonstrated by a filename\0.extension attack that bypasses an intended configuration in which client users may read files with only one specific extension (bsc#935229). - CVE-2015-4598: PHP did not ensure that pathnames lack %00 sequences, which might have allowed remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument save method or (2) the GD imagepsloadfont function, as demonstrated by a filename\0.html attack that bypasses an intended configuration in which client users may write to only .html files (bsc#935232). - CVE-2015-4148: The do_soap_call function in ext/soap/soap.c in PHP did not verify that the uri property is a string, which allowed remote attackers to obtain sensitive information by providing crafted serialized data with an int data type, related to a 'type confusion' issue (bsc#933227). - CVE-2015-4024: Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP allowed remote attackers to cause a denial of service (CPU consumption) via crafted form data that triggers an improper order-of-growth outcome (bsc#931421). - CVE-2015-4026: The pcntl_exec implementation in PHP truncates a pathname upon encountering a \x00 character, which might allowed remote attackers to bypass intended extension restrictions and execute files with unexpected names via a crafted first argument. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243 (bsc#931776). - CVE-2015-4022: Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP allowed remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow (bsc#931772). - CVE-2015-4021: The phar_parse_tarfile function in ext/phar/tar.c in PHP did not verify that the first character of a filename is different from the \0 character, which allowed remote attackers to cause a denial of service (integer underflow and memory corruption) via a crafted entry in a tar archive (bsc#931769). - CVE-2015-3329: Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP allowed remote attackers to execute arbitrary code via a crafted length value in a (1) tar, (2) phar, or (3) ZIP archive (bsc#928506). - CVE-2015-2783: ext/phar/phar.c in PHP allowed remote attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read and application crash) via a crafted length value in conjunction with crafted serialized data in a phar archive, related to the phar_parse_metadata and phar_parse_pharfile functions (bsc#928511). - CVE-2015-2787: Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP allowed remote attackers to execute arbitrary code via a crafted unserialize call that leverages use of the unset function within an __wakeup function, a related issue to CVE-2015-0231 (bsc#924972). - CVE-2014-9709: The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP allowed remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function (bsc#923945). - CVE-2015-2301: Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP allowed remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted renaming of a Phar archive to the name of an existing file (bsc#922452). - CVE-2015-2305: Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) 32-bit platforms might have allowed context-dependent attackers to execute arbitrary code via a large regular expression that leads to a heap-based buffer overflow (bsc#921950). - CVE-2014-9705: Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP allowed remote attackers to execute arbitrary code via vectors that trigger creation of multiple dictionaries (bsc#922451). - CVE-2015-0273: Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP allowed remote attackers to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZone data handled by the php_date_timezone_initialize_from_hash function or (b) DateTime data handled by the php_date_initialize_from_hash function (bsc#918768). - CVE-2014-9652: The mconvert function in softmagic.c in file as used in the Fileinfo component in PHP did not properly handle a certain string-length field during a copy of a truncated version of a Pascal string, which might allowed remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted file (bsc#917150). - CVE-2014-8142: Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP allowed remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys within the serialized properties of an object, a different vulnerability than CVE-2004-1019 (bsc#910659). - CVE-2015-0231: Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP allowed remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate numerical keys within the serialized properties of an object. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-8142 (bsc#910659). - CVE-2014-8142: Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP allowed remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys within the serialized properties of an object, a different vulnerability than CVE-2004-1019 (bsc#910659). - CVE-2015-0232: The exif_process_unicode function in ext/exif/exif.c in PHP allowed remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free and application crash) via crafted EXIF data in a JPEG image (bsc#914690). - CVE-2014-3670: The exif_ifd_make_value function in exif.c in the EXIF extension in PHP operates on floating-point arrays incorrectly, which allowed remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a crafted JPEG image with TIFF thumbnail data that is improperly handled by the exif_thumbnail function (bsc#902357). - CVE-2014-3669: Integer overflow in the object_custom function in ext/standard/var_unserializer.c in PHP allowed remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an argument to the unserialize function that triggers calculation of a large length value (bsc#902360). - CVE-2014-3668: Buffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc/xmlrpc.c in the XMLRPC extension in PHP allowed remote attackers to cause a denial of service (application crash) via (1) a crafted first argument to the xmlrpc_set_type function or (2) a crafted argument to the xmlrpc_decode function, related to an out-of-bounds read operation (bsc#902368). - CVE-2014-5459: The PEAR_REST class in REST.php in PEAR in PHP allowed local users to write to arbitrary files via a symlink attack on a (1) rest.cachefile or (2) rest.cacheid file in /tmp/pear/cache/, related to the retrieveCacheFirst and useLocalCache functions (bsc#893849). - CVE-2014-3597: Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP allowed remote DNS servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted DNS record, related to the dns_get_record function and the dn_expand function. NOTE: this issue exists because of an incomplete fix for CVE-2014-4049 (bsc#893853). - CVE-2014-4670: Use-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP allowed context-dependent attackers to cause a denial of service or possibly have unspecified other impact via crafted iterator usage within applications in certain web-hosting environments (bsc#886059). - CVE-2014-4698: Use-after-free vulnerability in ext/spl/spl_array.c in the SPL component in PHP allowed context-dependent attackers to cause a denial of service or possibly have unspecified other impact via crafted ArrayIterator usage within applications in certain web-hosting environments (bsc#886060). - CVE-2014-4721: The phpinfo implementation in ext/standard/info.c in PHP did not ensure use of the string data type for the PHP_AUTH_PW, PHP_AUTH_TYPE, PHP_AUTH_USER, and PHP_SELF variables, which might allowed context-dependent attackers to obtain sensitive information from process memory by using the integer data type with crafted values, related to a 'type confusion' vulnerability, as demonstrated by reading a private SSL key in an Apache HTTP Server web-hosting environment with mod_ssl and a PHP 5.3.x mod_php (bsc#885961). - CVE-2014-0207: The cdf_read_short_sector function in cdf.c in file as used in the Fileinfo component in PHP allowed remote attackers to cause a denial of service (assertion failure and application exit) via a crafted CDF file (bsc#884986). - CVE-2014-3478: Buffer overflow in the mconvert function in softmagic.c in file as used in the Fileinfo component in PHP allowed remote attackers to cause a denial of service (application crash) via a crafted Pascal string in a FILE_PSTRING conversion (bsc#884987). - CVE-2014-3479: The cdf_check_stream_offset function in cdf.c in file as used in the Fileinfo component in PHP relies on incorrect sector-size data, which allowed remote attackers to cause a denial of service (application crash) via a crafted stream offset in a CDF file (bsc#884989). - CVE-2014-3480: The cdf_count_chain function in cdf.c in file as used in the Fileinfo component in PHP did not properly validate sector-count data, which allowed remote attackers to cause a denial of service (application crash) via a crafted CDF file (bsc#884990). - CVE-2014-3487: The cdf_read_property_info function in file as used in the Fileinfo component in PHP did not properly validate a stream offset, which allowed remote attackers to cause a denial of service (application crash) via a crafted CDF file (bsc#884991). - CVE-2014-3515: The SPL component in PHP incorrectly anticipates that certain data structures will have the array data type after unserialization, which allowed remote attackers to execute arbitrary code via a crafted string that triggers use of a Hashtable destructor, related to 'type confusion' issues in (1) ArrayObject and (2) SPLObjectStorage (bsc#884992). These non-security issues were fixed: - bnc#935074: compare with SQL_NULL_DATA correctly - bnc#935074: fix segfault in odbc_fetch_array - bnc#919080: fix timezone map - bnc#925109: unserialize SoapClient type confusion

Patchnames: slessp2-php53-12621

CVE-2004-1019

Affected products

Recommended 135 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:apache2-mod_php53-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:apache2-mod_php53-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:apache2-mod_php53-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-bcmath-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-bcmath-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-bcmath-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-bz2-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-bz2-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-bz2-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-calendar-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-calendar-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-calendar-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-ctype-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-ctype-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-ctype-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-curl-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-curl-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-curl-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-dba-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-dba-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-dba-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-dom-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-dom-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-dom-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-exif-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-exif-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-exif-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-fastcgi-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-fastcgi-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-fastcgi-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-fileinfo-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-fileinfo-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-fileinfo-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-ftp-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-ftp-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-ftp-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-gd-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-gd-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-gd-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-gettext-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-gettext-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-gettext-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-gmp-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-gmp-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-gmp-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-iconv-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-iconv-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-iconv-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-intl-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-intl-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-intl-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-json-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-json-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-json-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-ldap-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-ldap-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-ldap-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-mbstring-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-mbstring-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-mbstring-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-mcrypt-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-mcrypt-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-mcrypt-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-mysql-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-mysql-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-mysql-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-odbc-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-odbc-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-odbc-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-openssl-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-openssl-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-openssl-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-pcntl-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-pcntl-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-pcntl-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-pdo-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-pdo-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-pdo-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-pear-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-pear-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-pear-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-pgsql-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-pgsql-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-pgsql-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-pspell-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-pspell-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-pspell-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-shmop-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-shmop-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-shmop-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-snmp-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-snmp-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-snmp-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-soap-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-soap-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-soap-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-suhosin-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-suhosin-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-suhosin-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-sysvmsg-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-sysvmsg-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-sysvmsg-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-sysvsem-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-sysvsem-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-sysvsem-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-sysvshm-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-sysvshm-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-sysvshm-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-tokenizer-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-tokenizer-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-tokenizer-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-wddx-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-wddx-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-wddx-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-xmlreader-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-xmlreader-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-xmlreader-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-xmlrpc-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-xmlrpc-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-xmlrpc-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-xmlwriter-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-xmlwriter-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-xmlwriter-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-xsl-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-xsl-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-xsl-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-zip-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-zip-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-zip-5.3.17-47.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-zlib-5.3.17-47.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-zlib-5.3.17-47.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:php53-zlib-5.3.17-47.1.x86_64	—	Vendor Fix

Threats

Impact critical

CVE-2006-7243

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2014-0207

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2014-3478

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2014-3479

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2014-3480

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2014-3487

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2014-3515

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2014-3597

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2014-3668

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2014-3669

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2014-3670

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2014-4049

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2014-4670

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2014-4698

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2014-4721

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2014-5459

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2014-8142

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact low

CVE-2014-9652

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact important

CVE-2014-9705

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2014-9709

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact low

CVE-2014-9767

4.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-0231

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact low

CVE-2015-0232

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-0273

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact important

CVE-2015-1352

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-2301

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-2305

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-2783

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-2787

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact important

CVE-2015-3152

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-3329

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact important

CVE-2015-3411

6.5 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-3412

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-4021

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-4022

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-4024

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-4026

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-4116

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-4148

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact low

CVE-2015-4598

6.5 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-4599

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-4600

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-4601

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-4602

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-4603

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-4643

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-4644

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-5161

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-5589

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-5590

7.3 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-6831

7.3 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact important

CVE-2015-6833

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact important

CVE-2015-6836

7.3 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact low

CVE-2015-6837

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-6838

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-7803

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-8835

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-8838

5.9 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-8866

9.6 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-8867

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-8873

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-8874

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2015-8879

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact important

CVE-2016-2554

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2016-3141

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2016-3142

8.2 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2016-3185

7.1 (High)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2016-4070

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact low

CVE-2016-4073

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2016-4342

8.8 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact important

CVE-2016-4346

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2016-4537

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact low

CVE-2016-4538

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact low

CVE-2016-4539

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2016-4540

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact low

CVE-2016-4541

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact low

CVE-2016-4542

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact critical

CVE-2016-4543

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact critical

CVE-2016-4544

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact critical

CVE-2016-5093

8.6 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2016-5094

8.6 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2016-5095

8.6 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2016-5096

8.6 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

CVE-2016-5114

9.1 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Affected products

Recommended 135 products, the same list as for CVE-2004-1019

Threats

Impact moderate

References

478 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/884986	self
https://bugzilla.suse.com/884987	self
https://bugzilla.suse.com/884989	self
https://bugzilla.suse.com/884990	self
https://bugzilla.suse.com/884991	self
https://bugzilla.suse.com/884992	self
https://bugzilla.suse.com/885961	self
https://bugzilla.suse.com/886059	self
https://bugzilla.suse.com/886060	self
https://bugzilla.suse.com/893849	self
https://bugzilla.suse.com/893853	self
https://bugzilla.suse.com/902357	self
https://bugzilla.suse.com/902360	self
https://bugzilla.suse.com/902368	self
https://bugzilla.suse.com/910659	self
https://bugzilla.suse.com/914690	self
https://bugzilla.suse.com/917150	self
https://bugzilla.suse.com/918768	self
https://bugzilla.suse.com/919080	self
https://bugzilla.suse.com/921950	self
https://bugzilla.suse.com/922451	self
https://bugzilla.suse.com/922452	self
https://bugzilla.suse.com/923945	self
https://bugzilla.suse.com/924972	self
https://bugzilla.suse.com/925109	self
https://bugzilla.suse.com/928506	self
https://bugzilla.suse.com/928511	self
https://bugzilla.suse.com/931421	self
https://bugzilla.suse.com/931769	self
https://bugzilla.suse.com/931772	self
https://bugzilla.suse.com/931776	self
https://bugzilla.suse.com/933227	self
https://bugzilla.suse.com/935074	self
https://bugzilla.suse.com/935224	self
https://bugzilla.suse.com/935226	self
https://bugzilla.suse.com/935227	self
https://bugzilla.suse.com/935229	self
https://bugzilla.suse.com/935232	self
https://bugzilla.suse.com/935234	self
https://bugzilla.suse.com/935274	self
https://bugzilla.suse.com/935275	self
https://bugzilla.suse.com/938719	self
https://bugzilla.suse.com/938721	self
https://bugzilla.suse.com/942291	self
https://bugzilla.suse.com/942296	self
https://bugzilla.suse.com/945412	self
https://bugzilla.suse.com/945428	self
https://bugzilla.suse.com/949961	self
https://bugzilla.suse.com/968284	self
https://bugzilla.suse.com/969821	self
https://bugzilla.suse.com/971611	self
https://bugzilla.suse.com/971612	self
https://bugzilla.suse.com/971912	self
https://bugzilla.suse.com/973351	self
https://bugzilla.suse.com/973792	self
https://bugzilla.suse.com/976996	self
https://bugzilla.suse.com/976997	self
https://bugzilla.suse.com/977003	self
https://bugzilla.suse.com/977005	self
https://bugzilla.suse.com/977991	self
https://bugzilla.suse.com/977994	self
https://bugzilla.suse.com/978827	self
https://bugzilla.suse.com/978828	self
https://bugzilla.suse.com/978829	self
https://bugzilla.suse.com/978830	self
https://bugzilla.suse.com/980366	self
https://bugzilla.suse.com/980373	self
https://bugzilla.suse.com/980375	self
https://bugzilla.suse.com/981050	self
https://bugzilla.suse.com/982010	self
https://bugzilla.suse.com/982011	self
https://bugzilla.suse.com/982012	self
https://bugzilla.suse.com/982013	self
https://bugzilla.suse.com/982162	self
https://www.suse.com/security/cve/CVE-2004-1019/	self
https://www.suse.com/security/cve/CVE-2006-7243/	self
https://www.suse.com/security/cve/CVE-2014-0207/	self
https://www.suse.com/security/cve/CVE-2014-3478/	self
https://www.suse.com/security/cve/CVE-2014-3479/	self
https://www.suse.com/security/cve/CVE-2014-3480/	self
https://www.suse.com/security/cve/CVE-2014-3487/	self
https://www.suse.com/security/cve/CVE-2014-3515/	self
https://www.suse.com/security/cve/CVE-2014-3597/	self
https://www.suse.com/security/cve/CVE-2014-3668/	self
https://www.suse.com/security/cve/CVE-2014-3669/	self
https://www.suse.com/security/cve/CVE-2014-3670/	self
https://www.suse.com/security/cve/CVE-2014-4049/	self
https://www.suse.com/security/cve/CVE-2014-4670/	self
https://www.suse.com/security/cve/CVE-2014-4698/	self
https://www.suse.com/security/cve/CVE-2014-4721/	self
https://www.suse.com/security/cve/CVE-2014-5459/	self
https://www.suse.com/security/cve/CVE-2014-8142/	self
https://www.suse.com/security/cve/CVE-2014-9652/	self
https://www.suse.com/security/cve/CVE-2014-9705/	self
https://www.suse.com/security/cve/CVE-2014-9709/	self
https://www.suse.com/security/cve/CVE-2014-9767/	self
https://www.suse.com/security/cve/CVE-2015-0231/	self
https://www.suse.com/security/cve/CVE-2015-0232/	self
https://www.suse.com/security/cve/CVE-2015-0273/	self
https://www.suse.com/security/cve/CVE-2015-1352/	self
https://www.suse.com/security/cve/CVE-2015-2301/	self
https://www.suse.com/security/cve/CVE-2015-2305/	self
https://www.suse.com/security/cve/CVE-2015-2783/	self
https://www.suse.com/security/cve/CVE-2015-2787/	self
https://www.suse.com/security/cve/CVE-2015-3152/	self
https://www.suse.com/security/cve/CVE-2015-3329/	self
https://www.suse.com/security/cve/CVE-2015-3411/	self
https://www.suse.com/security/cve/CVE-2015-3412/	self
https://www.suse.com/security/cve/CVE-2015-4021/	self
https://www.suse.com/security/cve/CVE-2015-4022/	self
https://www.suse.com/security/cve/CVE-2015-4024/	self
https://www.suse.com/security/cve/CVE-2015-4026/	self
https://www.suse.com/security/cve/CVE-2015-4116/	self
https://www.suse.com/security/cve/CVE-2015-4148/	self
https://www.suse.com/security/cve/CVE-2015-4598/	self
https://www.suse.com/security/cve/CVE-2015-4599/	self
https://www.suse.com/security/cve/CVE-2015-4600/	self
https://www.suse.com/security/cve/CVE-2015-4601/	self
https://www.suse.com/security/cve/CVE-2015-4602/	self
https://www.suse.com/security/cve/CVE-2015-4603/	self
https://www.suse.com/security/cve/CVE-2015-4643/	self
https://www.suse.com/security/cve/CVE-2015-4644/	self
https://www.suse.com/security/cve/CVE-2015-5161/	self
https://www.suse.com/security/cve/CVE-2015-5589/	self
https://www.suse.com/security/cve/CVE-2015-5590/	self
https://www.suse.com/security/cve/CVE-2015-6831/	self
https://www.suse.com/security/cve/CVE-2015-6833/	self
https://www.suse.com/security/cve/CVE-2015-6836/	self
https://www.suse.com/security/cve/CVE-2015-6837/	self
https://www.suse.com/security/cve/CVE-2015-6838/	self
https://www.suse.com/security/cve/CVE-2015-7803/	self
https://www.suse.com/security/cve/CVE-2015-8835/	self
https://www.suse.com/security/cve/CVE-2015-8838/	self
https://www.suse.com/security/cve/CVE-2015-8866/	self
https://www.suse.com/security/cve/CVE-2015-8867/	self
https://www.suse.com/security/cve/CVE-2015-8873/	self
https://www.suse.com/security/cve/CVE-2015-8874/	self
https://www.suse.com/security/cve/CVE-2015-8879/	self
https://www.suse.com/security/cve/CVE-2016-2554/	self
https://www.suse.com/security/cve/CVE-2016-3141/	self
https://www.suse.com/security/cve/CVE-2016-3142/	self
https://www.suse.com/security/cve/CVE-2016-3185/	self
https://www.suse.com/security/cve/CVE-2016-4070/	self
https://www.suse.com/security/cve/CVE-2016-4073/	self
https://www.suse.com/security/cve/CVE-2016-4342/	self
https://www.suse.com/security/cve/CVE-2016-4346/	self
https://www.suse.com/security/cve/CVE-2016-4537/	self
https://www.suse.com/security/cve/CVE-2016-4538/	self
https://www.suse.com/security/cve/CVE-2016-4539/	self
https://www.suse.com/security/cve/CVE-2016-4540/	self
https://www.suse.com/security/cve/CVE-2016-4541/	self
https://www.suse.com/security/cve/CVE-2016-4542/	self
https://www.suse.com/security/cve/CVE-2016-4543/	self
https://www.suse.com/security/cve/CVE-2016-4544/	self
https://www.suse.com/security/cve/CVE-2016-5093/	self
https://www.suse.com/security/cve/CVE-2016-5094/	self
https://www.suse.com/security/cve/CVE-2016-5095/	self
https://www.suse.com/security/cve/CVE-2016-5096/	self
https://www.suse.com/security/cve/CVE-2016-5114/	self
https://www.suse.com/security/cve/CVE-2004-1019	external
https://bugzilla.suse.com/63635	external
https://bugzilla.suse.com/64657	external
https://bugzilla.suse.com/72441	external
https://www.suse.com/security/cve/CVE-2006-7243	external
https://bugzilla.suse.com/1067090	external
https://bugzilla.suse.com/654853	external
https://bugzilla.suse.com/893855	external
https://bugzilla.suse.com/924970	external
https://bugzilla.suse.com/992991	external
https://www.suse.com/security/cve/CVE-2014-0207	external
https://bugzilla.suse.com/884986	external
https://bugzilla.suse.com/980366	external
https://bugzilla.suse.com/992991	external
https://www.suse.com/security/cve/CVE-2014-3478	external
https://bugzilla.suse.com/884987	external
https://bugzilla.suse.com/980366	external
https://bugzilla.suse.com/992991	external
https://www.suse.com/security/cve/CVE-2014-3479	external
https://bugzilla.suse.com/884989	external
https://bugzilla.suse.com/980366	external
https://bugzilla.suse.com/992991	external
https://www.suse.com/security/cve/CVE-2014-3480	external
https://bugzilla.suse.com/884990	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2014-3487	external
https://bugzilla.suse.com/884991	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2014-3515	external
https://bugzilla.suse.com/884992	external
https://bugzilla.suse.com/980366	external
https://bugzilla.suse.com/992991	external
https://www.suse.com/security/cve/CVE-2014-3597	external
https://bugzilla.suse.com/893853	external
https://bugzilla.suse.com/980366	external
https://bugzilla.suse.com/992991	external
https://www.suse.com/security/cve/CVE-2014-3668	external
https://bugzilla.suse.com/902368	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2014-3669	external
https://bugzilla.suse.com/902360	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2014-3670	external
https://bugzilla.suse.com/902357	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2014-4049	external
https://bugzilla.suse.com/882992	external
https://bugzilla.suse.com/893853	external
https://www.suse.com/security/cve/CVE-2014-4670	external
https://bugzilla.suse.com/886059	external
https://bugzilla.suse.com/980366	external
https://bugzilla.suse.com/992991	external
https://www.suse.com/security/cve/CVE-2014-4698	external
https://bugzilla.suse.com/886060	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2014-4721	external
https://bugzilla.suse.com/885961	external
https://bugzilla.suse.com/980366	external
https://bugzilla.suse.com/992991	external
https://www.suse.com/security/cve/CVE-2014-5459	external
https://bugzilla.suse.com/893849	external
https://bugzilla.suse.com/980366	external
https://bugzilla.suse.com/992991	external
https://www.suse.com/security/cve/CVE-2014-8142	external
https://bugzilla.suse.com/910659	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2014-9652	external
https://bugzilla.suse.com/917150	external
https://bugzilla.suse.com/917302	external
https://bugzilla.suse.com/918768	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2014-9705	external
https://bugzilla.suse.com/922451	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2014-9709	external
https://bugzilla.suse.com/923945	external
https://bugzilla.suse.com/923946	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2014-9767	external
https://bugzilla.suse.com/971612	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-0231	external
https://bugzilla.suse.com/910659	external
https://bugzilla.suse.com/924972	external
https://bugzilla.suse.com/980366	external
https://bugzilla.suse.com/992991	external
https://www.suse.com/security/cve/CVE-2015-0232	external
https://bugzilla.suse.com/914690	external
https://bugzilla.suse.com/980366	external
https://bugzilla.suse.com/992991	external
https://www.suse.com/security/cve/CVE-2015-0273	external
https://bugzilla.suse.com/917302	external
https://bugzilla.suse.com/918768	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-1352	external
https://bugzilla.suse.com/935274	external
https://www.suse.com/security/cve/CVE-2015-2301	external
https://bugzilla.suse.com/922452	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-2305	external
https://bugzilla.suse.com/1040662	external
https://bugzilla.suse.com/921950	external
https://bugzilla.suse.com/922022	external
https://bugzilla.suse.com/922028	external
https://bugzilla.suse.com/922030	external
https://bugzilla.suse.com/922043	external
https://bugzilla.suse.com/922560	external
https://bugzilla.suse.com/922567	external
https://bugzilla.suse.com/929192	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-2783	external
https://bugzilla.suse.com/928408	external
https://bugzilla.suse.com/928506	external
https://bugzilla.suse.com/928511	external
https://bugzilla.suse.com/931418	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-2787	external
https://bugzilla.suse.com/924972	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-3152	external
https://bugzilla.suse.com/1037590	external
https://bugzilla.suse.com/1047059	external
https://bugzilla.suse.com/1088681	external
https://bugzilla.suse.com/924663	external
https://bugzilla.suse.com/928962	external
https://bugzilla.suse.com/936407	external
https://www.suse.com/security/cve/CVE-2015-3329	external
https://bugzilla.suse.com/928408	external
https://bugzilla.suse.com/928506	external
https://bugzilla.suse.com/928511	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-3411	external
https://bugzilla.suse.com/935074	external
https://bugzilla.suse.com/935227	external
https://bugzilla.suse.com/935229	external
https://bugzilla.suse.com/935232	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-3412	external
https://bugzilla.suse.com/935227	external
https://bugzilla.suse.com/935229	external
https://bugzilla.suse.com/935232	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-4021	external
https://bugzilla.suse.com/931769	external
https://bugzilla.suse.com/935074	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-4022	external
https://bugzilla.suse.com/931769	external
https://bugzilla.suse.com/931772	external
https://bugzilla.suse.com/935275	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-4024	external
https://bugzilla.suse.com/931421	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-4026	external
https://bugzilla.suse.com/931776	external
https://bugzilla.suse.com/935227	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-4116	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-4148	external
https://bugzilla.suse.com/933227	external
https://bugzilla.suse.com/935074	external
https://bugzilla.suse.com/935226	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-4598	external
https://bugzilla.suse.com/935227	external
https://bugzilla.suse.com/935232	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-4599	external
https://bugzilla.suse.com/935074	external
https://bugzilla.suse.com/935226	external
https://bugzilla.suse.com/935234	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-4600	external
https://bugzilla.suse.com/935226	external
https://bugzilla.suse.com/935234	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-4601	external
https://bugzilla.suse.com/935226	external
https://bugzilla.suse.com/935234	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-4602	external
https://bugzilla.suse.com/935074	external
https://bugzilla.suse.com/935224	external
https://bugzilla.suse.com/935226	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-4603	external
https://bugzilla.suse.com/935074	external
https://bugzilla.suse.com/935226	external
https://bugzilla.suse.com/935234	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-4643	external
https://bugzilla.suse.com/931769	external
https://bugzilla.suse.com/935074	external
https://bugzilla.suse.com/935275	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-4644	external
https://bugzilla.suse.com/935074	external
https://bugzilla.suse.com/935274	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-5161	external
https://bugzilla.suse.com/976996	external
https://www.suse.com/security/cve/CVE-2015-5589	external
https://bugzilla.suse.com/935074	external
https://bugzilla.suse.com/938721	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-5590	external
https://bugzilla.suse.com/935074	external
https://bugzilla.suse.com/938719	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-6831	external
https://bugzilla.suse.com/942291	external
https://bugzilla.suse.com/942294	external
https://bugzilla.suse.com/942295	external
https://bugzilla.suse.com/945188	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-6833	external
https://bugzilla.suse.com/942296	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-6836	external
https://bugzilla.suse.com/945428	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-6837	external
https://bugzilla.suse.com/945412	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-6838	external
https://bugzilla.suse.com/945412	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-7803	external
https://bugzilla.suse.com/949961	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-8835	external
https://bugzilla.suse.com/973351	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-8838	external
https://bugzilla.suse.com/973792	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-8866	external
https://bugzilla.suse.com/976996	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-8867	external
https://bugzilla.suse.com/977005	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2015-8873	external
https://bugzilla.suse.com/980366	external
https://bugzilla.suse.com/980373	external
https://www.suse.com/security/cve/CVE-2015-8874	external
https://bugzilla.suse.com/980366	external
https://bugzilla.suse.com/980375	external
https://www.suse.com/security/cve/CVE-2015-8879	external
https://bugzilla.suse.com/981050	external
https://www.suse.com/security/cve/CVE-2016-2554	external
https://bugzilla.suse.com/968284	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2016-3141	external
https://bugzilla.suse.com/969821	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2016-3142	external
https://bugzilla.suse.com/971912	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2016-3185	external
https://bugzilla.suse.com/971611	external
https://bugzilla.suse.com/973351	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2016-4070	external
https://bugzilla.suse.com/976997	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2016-4073	external
https://bugzilla.suse.com/977003	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2016-4342	external
https://bugzilla.suse.com/977991	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2016-4346	external
https://bugzilla.suse.com/977993	external
https://bugzilla.suse.com/977994	external
https://bugzilla.suse.com/977995	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2016-4537	external
https://bugzilla.suse.com/978827	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2016-4538	external
https://bugzilla.suse.com/978827	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2016-4539	external
https://bugzilla.suse.com/978828	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2016-4540	external
https://bugzilla.suse.com/978829	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2016-4541	external
https://bugzilla.suse.com/978829	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2016-4542	external
https://bugzilla.suse.com/978830	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2016-4543	external
https://bugzilla.suse.com/978830	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2016-4544	external
https://bugzilla.suse.com/978830	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2016-5093	external
https://bugzilla.suse.com/982010	external
https://www.suse.com/security/cve/CVE-2016-5094	external
https://bugzilla.suse.com/982011	external
https://bugzilla.suse.com/982012	external
https://www.suse.com/security/cve/CVE-2016-5095	external
https://bugzilla.suse.com/982011	external
https://bugzilla.suse.com/982012	external
https://www.suse.com/security/cve/CVE-2016-5096	external
https://bugzilla.suse.com/982013	external
https://www.suse.com/security/cve/CVE-2016-5114	external
https://bugzilla.suse.com/982162	external

JSON

To clipboard

Loading 2.7 MB of JSON…

CVE-2016-5093 (GCVE-0-2016-5093)

Vulnerability from cvelistv5 – Published: 2016-08-07 10:00 – Updated: 2024-08-06 00:53

Summary

The get_icu_value_internal function in ext/intl/locale/locale_methods.c in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7 does not ensure the presence of a '\0' character, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted locale_get_primary_language call.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

9 references

URL	Tags
https://github.com/php/php-src/commit/97eff7eb57f…	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2016/05/26/3	mailing-listx_refsource_MLIST
http://rhn.redhat.com/errata/RHSA-2016-2750.html	vendor-advisoryx_refsource_REDHAT
https://bugs.php.net/bug.php?id=72241	x_refsource_CONFIRM
http://www.debian.org/security/2016/dsa-3602	vendor-advisoryx_refsource_DEBIAN
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://php.net/ChangeLog-7.php	x_refsource_CONFIRM
http://www.securityfocus.com/bid/90946	vdb-entryx_refsource_BID
https://h20566.www2.hpe.com/portal/site/hpsc/publ…	x_refsource_CONFIRM

Date Public

2016-05-26 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:53:47.291Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/php/php-src/commit/97eff7eb57fc2320c267a949cffd622c38712484?w=1"
          },
          {
            "name": "[oss-security] 20160526 Re: Fwd: CVE for PHP 5.5.36 issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/26/3"
          },
          {
            "name": "RHSA-2016:2750",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=72241"
          },
          {
            "name": "DSA-3602",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3602"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-7.php"
          },
          {
            "name": "90946",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/90946"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The get_icu_value_internal function in ext/intl/locale/locale_methods.c in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7 does not ensure the presence of a \u0027\\0\u0027 character, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted locale_get_primary_language call."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/php/php-src/commit/97eff7eb57fc2320c267a949cffd622c38712484?w=1"
        },
        {
          "name": "[oss-security] 20160526 Re: Fwd: CVE for PHP 5.5.36 issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/26/3"
        },
        {
          "name": "RHSA-2016:2750",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=72241"
        },
        {
          "name": "DSA-3602",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3602"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-7.php"
        },
        {
          "name": "90946",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/90946"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-5093",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The get_icu_value_internal function in ext/intl/locale/locale_methods.c in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7 does not ensure the presence of a \u0027\\0\u0027 character, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted locale_get_primary_language call."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/php/php-src/commit/97eff7eb57fc2320c267a949cffd622c38712484?w=1",
              "refsource": "CONFIRM",
              "url": "https://github.com/php/php-src/commit/97eff7eb57fc2320c267a949cffd622c38712484?w=1"
            },
            {
              "name": "[oss-security] 20160526 Re: Fwd: CVE for PHP 5.5.36 issues",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/05/26/3"
            },
            {
              "name": "RHSA-2016:2750",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=72241",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=72241"
            },
            {
              "name": "DSA-3602",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3602"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "http://php.net/ChangeLog-7.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-7.php"
            },
            {
              "name": "90946",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/90946"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-5093",
    "datePublished": "2016-08-07T10:00:00.000Z",
    "dateReserved": "2016-05-26T00:00:00.000Z",
    "dateUpdated": "2024-08-06T00:53:47.291Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5094 (GCVE-0-2016-5094)

Vulnerability from cvelistv5 – Published: 2016-08-07 10:00 – Updated: 2024-08-06 00:53

Summary

Integer overflow in the php_html_entities function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from the htmlspecialchars function.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

8 references

URL	Tags
http://www.securityfocus.com/bid/90857	vdb-entryx_refsource_BID
http://www.openwall.com/lists/oss-security/2016/05/26/3	mailing-listx_refsource_MLIST
http://rhn.redhat.com/errata/RHSA-2016-2750.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2016/dsa-3602	vendor-advisoryx_refsource_DEBIAN
https://github.com/php/php-src/commit/0da8b8b801f…	x_refsource_CONFIRM
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
https://bugs.php.net/bug.php?id=72135	x_refsource_CONFIRM
https://h20566.www2.hpe.com/portal/site/hpsc/publ…	x_refsource_CONFIRM

Date Public

2016-05-26 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:53:47.113Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "90857",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/90857"
          },
          {
            "name": "[oss-security] 20160526 Re: Fwd: CVE for PHP 5.5.36 issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/26/3"
          },
          {
            "name": "RHSA-2016:2750",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
          },
          {
            "name": "DSA-3602",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3602"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/php/php-src/commit/0da8b8b801f9276359262f1ef8274c7812d3dfda?w=1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=72135"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the php_html_entities function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from the htmlspecialchars function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "90857",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/90857"
        },
        {
          "name": "[oss-security] 20160526 Re: Fwd: CVE for PHP 5.5.36 issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/26/3"
        },
        {
          "name": "RHSA-2016:2750",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
        },
        {
          "name": "DSA-3602",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3602"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/php/php-src/commit/0da8b8b801f9276359262f1ef8274c7812d3dfda?w=1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=72135"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-5094",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in the php_html_entities function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from the htmlspecialchars function."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "90857",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/90857"
            },
            {
              "name": "[oss-security] 20160526 Re: Fwd: CVE for PHP 5.5.36 issues",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/05/26/3"
            },
            {
              "name": "RHSA-2016:2750",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
            },
            {
              "name": "DSA-3602",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3602"
            },
            {
              "name": "https://github.com/php/php-src/commit/0da8b8b801f9276359262f1ef8274c7812d3dfda?w=1",
              "refsource": "CONFIRM",
              "url": "https://github.com/php/php-src/commit/0da8b8b801f9276359262f1ef8274c7812d3dfda?w=1"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=72135",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=72135"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-5094",
    "datePublished": "2016-08-07T10:00:00.000Z",
    "dateReserved": "2016-05-26T00:00:00.000Z",
    "dateUpdated": "2024-08-06T00:53:47.113Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5095 (GCVE-0-2016-5095)

Vulnerability from cvelistv5 – Published: 2016-08-07 10:00 – Updated: 2024-08-06 00:53

Summary

Integer overflow in the php_escape_html_entities_ex function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from a FILTER_SANITIZE_FULL_SPECIAL_CHARS filter_var call. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-5094.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

6 references

URL	Tags
http://www.openwall.com/lists/oss-security/2016/05/26/3	mailing-listx_refsource_MLIST
http://www.debian.org/security/2016/dsa-3602	vendor-advisoryx_refsource_DEBIAN
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
https://bugs.php.net/bug.php?id=72135	x_refsource_CONFIRM
http://www.securityfocus.com/bid/92144	vdb-entryx_refsource_BID
https://gist.github.com/8ef775c117d84ff1518595399…	x_refsource_CONFIRM

Date Public

2016-05-26 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:53:48.182Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20160526 Re: Fwd: CVE for PHP 5.5.36 issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/26/3"
          },
          {
            "name": "DSA-3602",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3602"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=72135"
          },
          {
            "name": "92144",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92144"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://gist.github.com/8ef775c117d84ff15185953990a28576"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the php_escape_html_entities_ex function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from a FILTER_SANITIZE_FULL_SPECIAL_CHARS filter_var call.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-5094."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-25T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[oss-security] 20160526 Re: Fwd: CVE for PHP 5.5.36 issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/26/3"
        },
        {
          "name": "DSA-3602",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3602"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=72135"
        },
        {
          "name": "92144",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92144"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://gist.github.com/8ef775c117d84ff15185953990a28576"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-5095",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in the php_escape_html_entities_ex function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from a FILTER_SANITIZE_FULL_SPECIAL_CHARS filter_var call.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-5094."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[oss-security] 20160526 Re: Fwd: CVE for PHP 5.5.36 issues",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/05/26/3"
            },
            {
              "name": "DSA-3602",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3602"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=72135",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=72135"
            },
            {
              "name": "92144",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92144"
            },
            {
              "name": "https://gist.github.com/8ef775c117d84ff15185953990a28576",
              "refsource": "CONFIRM",
              "url": "https://gist.github.com/8ef775c117d84ff15185953990a28576"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-5095",
    "datePublished": "2016-08-07T10:00:00.000Z",
    "dateReserved": "2016-05-26T00:00:00.000Z",
    "dateUpdated": "2024-08-06T00:53:48.182Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5096 (GCVE-0-2016-5096)

Vulnerability from cvelistv5 – Published: 2016-08-07 10:00 – Updated: 2024-08-06 00:53

Summary

Integer overflow in the fread function in ext/standard/file.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large integer in the second argument.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

8 references

URL	Tags
http://www.openwall.com/lists/oss-security/2016/05/26/3	mailing-listx_refsource_MLIST
http://rhn.redhat.com/errata/RHSA-2016-2750.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2016/dsa-3602	vendor-advisoryx_refsource_DEBIAN
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
https://h20566.www2.hpe.com/portal/site/hpsc/publ…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/90861	vdb-entryx_refsource_BID
https://bugs.php.net/bug.php?id=72114	x_refsource_CONFIRM
https://github.com/php/php-src/commit/abd159cce48…	x_refsource_CONFIRM

Date Public

2016-05-26 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:53:47.276Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20160526 Re: Fwd: CVE for PHP 5.5.36 issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/26/3"
          },
          {
            "name": "RHSA-2016:2750",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
          },
          {
            "name": "DSA-3602",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3602"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"
          },
          {
            "name": "90861",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/90861"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=72114"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/php/php-src/commit/abd159cce48f3e34f08e4751c568e09677d5ec9c?w=1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the fread function in ext/standard/file.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large integer in the second argument."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[oss-security] 20160526 Re: Fwd: CVE for PHP 5.5.36 issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/26/3"
        },
        {
          "name": "RHSA-2016:2750",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
        },
        {
          "name": "DSA-3602",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3602"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"
        },
        {
          "name": "90861",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/90861"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=72114"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/php/php-src/commit/abd159cce48f3e34f08e4751c568e09677d5ec9c?w=1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-5096",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in the fread function in ext/standard/file.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large integer in the second argument."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[oss-security] 20160526 Re: Fwd: CVE for PHP 5.5.36 issues",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/05/26/3"
            },
            {
              "name": "RHSA-2016:2750",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
            },
            {
              "name": "DSA-3602",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3602"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"
            },
            {
              "name": "90861",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/90861"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=72114",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=72114"
            },
            {
              "name": "https://github.com/php/php-src/commit/abd159cce48f3e34f08e4751c568e09677d5ec9c?w=1",
              "refsource": "CONFIRM",
              "url": "https://github.com/php/php-src/commit/abd159cce48f3e34f08e4751c568e09677d5ec9c?w=1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-5096",
    "datePublished": "2016-08-07T10:00:00.000Z",
    "dateReserved": "2016-05-26T00:00:00.000Z",
    "dateUpdated": "2024-08-06T00:53:47.276Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5114 (GCVE-0-2016-5114)

Vulnerability from cvelistv5 – Published: 2016-08-07 10:00 – Updated: 2024-08-06 00:53

Summary

sapi/fpm/fpm/fpm_log.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 misinterprets the semantics of the snprintf return value, which allows attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and buffer overflow) via a long string, as demonstrated by a long URI in a configuration with custom REQUEST_URI logging.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

8 references

URL	Tags
https://bugs.php.net/bug.php?id=70755	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-2750.html	vendor-advisoryx_refsource_REDHAT
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2016/05/29/1	mailing-listx_refsource_MLIST
http://php.net/ChangeLog-7.php	x_refsource_CONFIRM
https://h20566.www2.hpe.com/portal/site/hpsc/publ…	x_refsource_CONFIRM
http://github.com/php/php-src/commit/2721a0148649…	x_refsource_CONFIRM
http://www.search-lab.hu/about-us/news/111-some-u…	x_refsource_MISC

Date Public

2016-01-05 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:53:47.352Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=70755"
          },
          {
            "name": "RHSA-2016:2750",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "name": "[oss-security] 20160528 Re: Fwd: PHP-FPM fpm_log.c memory leak and buffer overflow",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/29/1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-7.php"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://github.com/php/php-src/commit/2721a0148649e07ed74468f097a28899741eb58f?w=1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.search-lab.hu/about-us/news/111-some-unusual-vulnerabilities-in-the-php-engine"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-01-05T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "sapi/fpm/fpm/fpm_log.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 misinterprets the semantics of the snprintf return value, which allows attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and buffer overflow) via a long string, as demonstrated by a long URI in a configuration with custom REQUEST_URI logging."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=70755"
        },
        {
          "name": "RHSA-2016:2750",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "name": "[oss-security] 20160528 Re: Fwd: PHP-FPM fpm_log.c memory leak and buffer overflow",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/29/1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-7.php"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://github.com/php/php-src/commit/2721a0148649e07ed74468f097a28899741eb58f?w=1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.search-lab.hu/about-us/news/111-some-unusual-vulnerabilities-in-the-php-engine"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-5114",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "sapi/fpm/fpm/fpm_log.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 misinterprets the semantics of the snprintf return value, which allows attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and buffer overflow) via a long string, as demonstrated by a long URI in a configuration with custom REQUEST_URI logging."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.php.net/bug.php?id=70755",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=70755"
            },
            {
              "name": "RHSA-2016:2750",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "[oss-security] 20160528 Re: Fwd: PHP-FPM fpm_log.c memory leak and buffer overflow",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/05/29/1"
            },
            {
              "name": "http://php.net/ChangeLog-7.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-7.php"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"
            },
            {
              "name": "http://github.com/php/php-src/commit/2721a0148649e07ed74468f097a28899741eb58f?w=1",
              "refsource": "CONFIRM",
              "url": "http://github.com/php/php-src/commit/2721a0148649e07ed74468f097a28899741eb58f?w=1"
            },
            {
              "name": "http://www.search-lab.hu/about-us/news/111-some-unusual-vulnerabilities-in-the-php-engine",
              "refsource": "MISC",
              "url": "http://www.search-lab.hu/about-us/news/111-some-unusual-vulnerabilities-in-the-php-engine"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-5114",
    "datePublished": "2016-08-07T10:00:00.000Z",
    "dateReserved": "2016-05-28T00:00:00.000Z",
    "dateUpdated": "2024-08-06T00:53:47.352Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

SUSE-SU-2016:1638-1

CVE-2016-5093 (GCVE-0-2016-5093)

CVE-2016-5094 (GCVE-0-2016-5094)

CVE-2016-5095 (GCVE-0-2016-5095)

CVE-2016-5096 (GCVE-0-2016-5096)

CVE-2016-5114 (GCVE-0-2016-5114)

Tags

Sightings

Nomenclature

Related by attack behaviour