Vulnerability   
Search   
    Search 191973 CVE descriptions
and 86218 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.702723
Category:Debian Local Security Checks
Title:Debian Security Advisory DSA 2723-1 (php5 - heap corruption)
Summary:It was discovered that PHP could perform an invalid free request when;processing crafted XML documents, corrupting the heap and potentially;leading to arbitrary code execution. Depending on the PHP;application, this vulnerability could be exploited remotely.
Description:Summary:
It was discovered that PHP could perform an invalid free request when
processing crafted XML documents, corrupting the heap and potentially
leading to arbitrary code execution. Depending on the PHP
application, this vulnerability could be exploited remotely.

Affected Software/OS:
php5 on Debian Linux

Solution:
For the oldstable distribution (squeeze), this problem has been fixed in
version 5.3.3-7+squeeze16.

For the stable distribution (wheezy), this problem has been fixed in
version 5.4.4-14+deb7u3.

For the unstable distribution (sid), this problem has been fixed in
version 5.5.0+dfsg-15.

We recommend that you upgrade your php5 packages.

CVSS Score:
6.8

CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2013-4113
Debian Security Information: DSA-2723 (Google Search)
http://www.debian.org/security/2013/dsa-2723
RedHat Security Advisories: RHSA-2013:1049
http://rhn.redhat.com/errata/RHSA-2013-1049.html
RedHat Security Advisories: RHSA-2013:1050
http://rhn.redhat.com/errata/RHSA-2013-1050.html
RedHat Security Advisories: RHSA-2013:1061
http://rhn.redhat.com/errata/RHSA-2013-1061.html
RedHat Security Advisories: RHSA-2013:1062
http://rhn.redhat.com/errata/RHSA-2013-1062.html
RedHat Security Advisories: RHSA-2013:1063
http://rhn.redhat.com/errata/RHSA-2013-1063.html
http://secunia.com/advisories/54071
http://secunia.com/advisories/54104
http://secunia.com/advisories/54163
http://secunia.com/advisories/54165
SuSE Security Announcement: SUSE-SU-2013:1285 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00034.html
SuSE Security Announcement: SUSE-SU-2013:1315 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00006.html
SuSE Security Announcement: SUSE-SU-2013:1316 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00007.html
http://www.ubuntu.com/usn/USN-1905-1
CopyrightCopyright (C) 2013 Greenbone Networks GmbH http://greenbone.net

This is only one of 86218 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2020 E-Soft Inc. All rights reserved.