Security Update for php5
Summary
DSA-2974-1: php5 - security update. Affects php5 versions < 5.4.4-14+deb7u12. Fixed in 5.4.4-14+deb7u12. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
PHP is a widely used general-purpose scripting language for web application development. It provides a range of functionalities and is commonly used in various web applications. However, several vulnerabilities have been discovered in PHP version 5.4.4-14+deb7u12, which could potentially compromise the security of systems utilizing this version.
Vulnerability Detail
The vulnerabilities identified in PHP version 5.4.4-14+deb7u12 include:
- CVE-2014-0207: This vulnerability involves an incorrect boundary check in the cdf_read_short_sector() function.
- CVE-2014-3478: A flaw has been found in the computation of the truncated pascal string size in the mconvert() function.
- CVE-2014-3479: An incorrect boundary check exists in the cdf_check_stream_offset() function.
- CVE-2014-3480: The cdf_count_chain() function lacks sufficient boundary checks.
- CVE-2014-3487: A boundary check issue has been identified in the cdf_read_property_info() function.
- CVE-2014-3515: The ArrayObject and SPLObjectStorage unserialize() handler do not verify the type of unserialized data, potentially leading to arbitrary code execution.
- CVE-2014-4721: A type confusion issue affecting phpinfo() may allow an attacker to obtain sensitive information from process memory.
These vulnerabilities could be exploited by remote attackers to execute arbitrary code, obtain sensitive information, or cause other security-related issues.
How To Fix
Minimum fixed version
5.4.4-14+deb7u12
This is the first release that contains the fix.
sudo apt-get install --only-upgrade php5Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Upgrading the php5 package to version 5.4.4-14+deb7u12 or later is crucial to address the identified vulnerabilities and ensure the security of your system. It is recommended to apply the security update as soon as possible. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for php5 →
FAQ
PHP is a general-purpose scripting language commonly used for web application development.
The vulnerabilities include incorrect boundary checks, computation flaws, insufficient checks, and type confusion issues. These vulnerabilities could be exploited to execute arbitrary code, obtain sensitive information, or cause other security-related issues.
To fix these vulnerabilities, it is recommended to upgrade the php5 package to version 5.4.4-14+deb7u12 or later.
No specific workarounds have been mentioned for these vulnerabilities. It is recommended to apply the security update as soon as possible.
You can find more information about these vulnerabilities in the provided Common Vulnerabilities and Exposures (CVE) references.
Related vulnerabilities
Recent vulnerabilities recorded for php5.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.