CVE-2014-2431

mysql: unspecified DoS related to Options (CPU April 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect availability via unknown vectors related to Options.

CVSS 2.0 · 2.6 Low EPSS 5.1% KEV · Not listed

Vendors

Mariadb Oracle Redhat

Products

Mariadb Mysql Solaris and 8 more

CVE-2015-7545

git: arbitrary code execution via crafted URLs

The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule.

CVSS 3.0 · 9.8 Critical EPSS 18.7% KEV · Not listed

Vendors

Canonical Git Project Opensuse and 1 more

Products

Ubuntu Linux Git Opensuse and 3 more

CVE-2014-9652

file: out of bounds read in mconvert()

The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not properly handle a certain string-length field during a copy of a truncated version of a Pascal string, which might allow remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted file.

CVSS 2.0 · 5.0 Medium EPSS 5.2% KEV · Not listed

Vendors

File Project Php Redhat

Products

File Php Enterprise Linux and 1 more

CVE-2015-6838

php: NULL pointer dereference in XSLTProcessor class

The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13, when libxml2 before 2.9.2 is used, does not consider the possibility of a NULL valuePop return value before proceeding with a free operation after the principal argument loop, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted XML document, a different vulnerability than CVE-2015-6837.

CVSS 3.0 · 7.5 High EPSS 8.1% KEV · Not listed

Vendors

Php Redhat Xmlsoft

Products

Php Rhel Software Collections Libxml2

CVE-2015-6837

php: NULL pointer dereference in XSLTProcessor class

The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13, when libxml2 before 2.9.2 is used, does not consider the possibility of a NULL valuePop return value before proceeding with a free operation during initial error checking, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted XML document, a different vulnerability than CVE-2015-6838.

CVSS 3.0 · 7.5 High EPSS 7.3% KEV · Not listed

Vendors

Php Redhat Xmlsoft

Products

Php Rhel Software Collections Libxml2

CVE-2014-9427

php: out of bounds read when parsing a crafted .php file

sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider the mapping's length during processing of an invalid file that begins with a # character and lacks a newline character, which causes an out-of-bounds read and might (1) allow remote attackers to obtain sensitive information from php-cgi process memory by leveraging the ability to upload a .php file or (2) trigger unexpected code execution if a valid PHP script is present in memory locations adjacent to the mapping.

CVSS 2.0 · 7.5 High EPSS 18.3% KEV · Not listed

Vendors

Php Redhat

Products

Php Rhel Software Collections

CVE-2014-2430

mysql: unspecified DoS related to Performance Schema (CPU April 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect availability via unknown vectors related to Performance Schema.

CVSS 2.0 · 3.5 Low EPSS 3.3% KEV · Not listed

Vendors

Mariadb Oracle Redhat

Products

Mariadb Mysql Solaris and 8 more

CVE-2015-6836

php: SOAP serialize_function_call() type confusion

The SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 does not properly manage headers, which allows remote attackers to execute arbitrary code via crafted serialized data that triggers a "type confusion" in the serialize_function_call function.

CVSS 3.0 · 7.3 High EPSS 10.3% KEV · Not listed

Vendors

Php Redhat

Products

Php Rhel Software Collections

CVE-2015-6835

php: use-after-free vulnerability in session deserializer

The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, which allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted session content.

CVSS 3.0 · 9.8 Critical EPSS 36.2% KEV · Not listed

Vendors

Php Redhat

Products

Php Rhel Software Collections

CVE-2014-9365

python: failure to validate certificates in the HTTP client with TLS (PEP 476)

The HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) xmlrpclib libraries in CPython (aka Python) 2.x before 2.7.9 and 3.x before 3.4.3, when accessing an HTTPS URL, do not (a) check the certificate against a trust store or verify that the server hostname matches a domain name in the subject's (b) Common Name or (c) subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

CVSS 3.0 · 4.7 Medium EPSS 3.0% KEV · Not listed

Vendors

Apple Python Redhat

Products

Mac Os X Python Enterprise Linux and 1 more

CVE-2015-6834

php: multiple unserialization use-after-free issues

Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote attackers to execute arbitrary code via vectors related to (1) the Serializable interface, (2) the SplObjectStorage class, and (3) the SplDoublyLinkedList class, which are mishandled during unserialization.

CVSS 3.0 · 9.8 Critical EPSS 46.8% KEV · Not listed

Vendors

Php Redhat

Products

Php Rhel Software Collections

CVE-2015-6833

php: Files from archive can be extracted outside of destination directory using phar

Directory traversal vulnerability in the PharData class in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to write to arbitrary files via a .. (dot dot) in a ZIP archive entry that is mishandled during an extractTo call.

CVSS 3.0 · 7.5 High EPSS 4.8% KEV · Not listed

Vendors

Php Redhat

Products

Php Rhel Software Collections

CVE-2014-9130

libyaml: assert failure when processing wrapped strings

scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping.

CVSS 2.0 · 5.0 Medium EPSS 13.2% KEV · Not listed

Vendors

Pyyaml Redhat

Products

Libyaml Enterprise Linux Openstack and 1 more

CVE-2014-2419

mysql: unspecified DoS related to Partition (CPU April 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Partition.

CVSS 2.0 · 4.0 Medium EPSS 3.7% KEV · Not listed

Vendors

Mariadb Oracle Redhat

Products

Mariadb Mysql Solaris and 8 more

CVE-2015-6832

php: dangling pointer in the unserialization of ArrayObject items

Use-after-free vulnerability in the SPL unserialize implementation in ext/spl/spl_array.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to execute arbitrary code via crafted serialized data that triggers misuse of an array field.

CVSS 3.0 · 7.3 High EPSS 5.0% KEV · Not listed

Vendors

Php Redhat

Products

Php Rhel Software Collections

CVE-2015-6831

php: Use After Free Vulnerability in unserialize()

Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to execute arbitrary code via vectors involving (1) ArrayObject, (2) SplObjectStorage, and (3) SplDoublyLinkedList, which are mishandled during unserialization.

CVSS 3.1 · 7.3 High EPSS 7.1% KEV · Not listed

Vendors

Debian Php Redhat

Products

Debian Linux Php Rhel Software Collections

CVE-2014-2270

file: out-of-bounds access in search rules with offsets from input file

softmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial of service (out-of-bounds memory access and crash) via crafted offsets in the softmagic of a PE executable.

CVSS 2.0 · 4.3 Medium EPSS 4.3% KEV · Not listed

Vendors

Canonical Debian File Project and 3 more

Products

Ubuntu Linux Debian Linux File and 4 more

CVE-2015-5590

php: buffer overflow and stack smashing error in phar_fix_filepath

Stack-based buffer overflow in the phar_fix_filepath function in ext/phar/phar.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value, as demonstrated by mishandling of an e-mail attachment by the imap PHP extension.

CVSS 3.0 · 7.3 High EPSS 4.6% KEV · Not listed

Vendors

Php Redhat

Products

Php Rhel Software Collections

CVE-2015-5589

php: segmentation fault in Phar::convertToData on invalid file

The phar_convert_to_other function in ext/phar/phar_object.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 does not validate a file pointer before a close operation, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted TAR archive that is mishandled in a Phar::convertToData call.

CVSS 3.0 · 9.8 Critical EPSS 6.3% KEV · Not listed

Vendors

Php Redhat

Products

Php Rhel Software Collections

CVE-2014-8142

php: use after free vulnerability in unserialize()

Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys within the serialized properties of an object, a different vulnerability than CVE-2004-1019.

CVSS 2.0 · 7.5 High EPSS 55.1% KEV · Not listed

Vendors

Php Redhat

Products

Php Enterprise Linux Rhel Software Collections