Every CVE Search/ Get API key

CVE-2014-9653

readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x...

7.5 HighFix available

readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file.

Exploit likelihood

4.65%Up 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file.

Record
CVE-2014-9653
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file.

Record
CVE-2014-9653
Updated
2026-11-02
EUVDEUVD-2014-9463 No score

readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file.

Record
EUVD-2014-9463
Updated
2026-11-03
GitHub AdvisoriesGHSA-px78-rrg6-77hf No score

readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x...

readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file.

Record
GHSA-px78-rrg6-77hf
Weakness
CWE-20
Updated
2026-11-02
OSVCLSA-2020-1605798462 No score

Fix of 227 CVE

  • Fix bug #69720: Null pointer dereference in phar_get_fp_offset()
  • Fix bug #70728: Type Confusion Vulnerability in PHP_to_XMLRPC_worker()
  • Fix bug #70661: Use After Free Vulnerability in WDDX Packet Deserialization
  • Fix bug #70741: Session WDDX Packet Deserialization Type Confusion Vulnerability
  • Fix bug #71459: Integer overflow in iptcembed()
  • Fix bug #71039: exec functions ignore length but look for NULL termination
  • Fix bug #71354: Heap corruption in tar/zip/phar parser.
  • Fix bug #71391: NULL Pointer Dereference in phar_tar_setupmetadata()
  • Fix bug #71323: Output of stream_get_meta_data can be falsified by its input
  • Fix bug #71498: Out-of-Bound Read in phar_parse_zipfile()
  • Fix bug #71587: Use-After-Free / Double-Free in WDDX Deserialize
  • Fix bug #71860: Invalid memory write in phar on filename with \0 in name
  • Fix bug #71798: Integer Overflow in php_raw_url_encode
  • Fix bug #72837: integer overflow in bzdecompress caused heap corruption
  • Fix bug #72681: PHP Session Data Injection Vulnerability
  • Fix bug #72807: integer overflow in curl_escape caused heap corruption
  • Fix bug #72838: Integer overflow lead to heap corruption in sql_regcase
  • Fix bug #72697: select_colors write out-of-bounds
  • Fix bug #72730: imagegammacorrect allows arbitrary write access
  • Fix bug #72836: integer overflow in base64_decode caused heap corruption
  • Fix bug #72848: integer overflow in quoted_printable_encode caused heap corruption
  • Fix bug #72849: integer overflow in urlencode caused heap corruption
  • Fix bug #72850: integer overflow in php_uuencode caused heap corruption
  • Fix bug #72771: ftps:// wrapper is vulnerable to protocol downgrade attack
  • Fix bug #72749: wddx_deserialize allows illegal memory access
  • Fix bug #72750: wddx_deserialize null dereference
  • Fix bug #72790: wddx_deserialize null dereference with invalid xml
  • Fix bug #72799: wddx_deserialize null dereference in php_wddx_pop_element
  • Fix bug #73189: Memcpy negative size parameter php_resolve_path
  • Fix bug #73150: missing NULL check in dom_document_save_html
  • Fix bug #73284: heap overflow in php_ereg_replace function
  • Fix bug #73218: stack-buffer-overflow through "ResourceBundle" methods
  • Fix bug #73208: integer overflow in imap_8bit caused heap corruption
  • Fix bug #73082: string length overflow in mb_encode_* function
  • Fix bug #73174: heap overflow in php_pcre_replace_impl
  • Fix bug #73276: crash in openssl_random_pseudo_bytes function
  • Fix bug #73275: crash in openssl_encrypt function
  • Fix bug #73017: memory corruption in wordwrap function
  • Fix bug #73240: Write out of bounds at number_format
  • Fix bug #73073: CachingIterator null dereference when convert to string
  • Fix bug #73293: NULL pointer dereference in SimpleXMLElement::asXML()
  • Fix bug #73356: crash in bzcompress function
  • Fix bug #72696: imagefilltoborder stackoverflow on truecolor images
  • Fix bug #73418: Integer Overflow in "_php_imap_mail" leads Heap Overflow
  • Fix bug #73144: Use-after-free in ArrayObject Deserialization
  • Fix bug #73192: parse_url return wrong hostname
  • Fix bug #73331: NULL Pointer Dereference in WDDX Packet Deserialization with PDORow
  • Fix bug #73452: Segfault (Regression for #69152)
  • Fix bug #73631: Invalid read when wddx decodes empty boolean element
  • Fix bug #67587: Redirection loop on nginx with FPM
  • Fix bug #71465: PHAR doesn't know about litespeed
  • Fix bug #73737: FPE when parsing a tag format
  • Fix bug #73868: Fix DOS vulnerability in gdImageCreateFromGd2Ctx()
  • Fix bug #73869: Signed Integer Overflow gd_io.c
  • Fix bug #73773: Seg fault when loading hostile phar
  • Fix bug #70436: Use After Free Vulnerability in unserialize()
  • Fix bug #74603: PHP INI Parsing Stack Buffer Overflow Vulnerability
  • Fix bug #72535: arcfour encryption stream filter crashes php
  • Fix bug #72434: ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unseria
  • Fix bug #72455: Heap Overflow due to integer overflows
  • Fix bug #74782:…
Record
CLSA-2020-1605798462
Updated
2026-11-02
OSV No score

readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file.

Record
CVE-2014-9653
Updated
2026-11-02
Show 4 moreShow less
OSVDEBIAN-CVE-2014-9653 No score

readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file.

Record
DEBIAN-CVE-2014-9653
Updated
2026-11-02
OSVSUSE-SU-2017:3048-1 No score

Security update for file

The GNU file utility was updated to version 5.22.

Security issues fixed:

  • CVE-2014-9621: The ELF parser in file allowed remote attackers to cause a denial of service via a long string. (bsc#913650)
  • CVE-2014-9620: The ELF parser in file allowed remote attackers to cause a denial of service via a large number of notes. (bsc#913651)
  • CVE-2014-9653: readelf.c in file did not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file. (bsc#917152)
  • CVE-2014-8116: The ELF parser (readelf.c) in file allowed remote attackers to cause a denial of service (CPU consumption or crash) via a large number of (1) program or (2) section headers or (3) invalid capabilities. (bsc#910253)
  • CVE-2014-8117: softmagic.c in file did not properly limit recursion, which allowed remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors. (bsc#910253)

Version update to file version 5.22

  • add indirect relative for TIFF/Exif
  • restructure elf note printing to avoid repeated messages
  • add note limit, suggested by Alexander Cherepanov
  • Bail out on partial pread()'s (Alexander Cherepanov)
  • Fix incorrect bounds check in file_printable (Alexander Cherepanov)
  • PR/405: ignore SIGPIPE from uncompress programs
  • change printable -> file_printable and use it in more places for safety
  • in ELF, instead of '(uses dynamic libraries)' when PT_INTERP is present print the interpreter name.

Version update to file version 5.21

  • there was an incorrect free in magic_load_buffers()
  • there was an out of bounds read for some pascal strings
  • there was a memory leak in magic lists
  • don't interpret strings printed from files using the current locale, convert them to ascii format first.
  • there was an out of bounds read in elf note reads

Update to file version 5.20

  • recognize encrypted CDF documents
  • add magic_load_buffers from Brooks Davis
  • add thumbs.db support

Additional non-security bug fixes:

  • Fixed a memory corruption during rpmbuild (bsc#1063269)
  • Backport of a fix for an increased printable string length as found in file 5.30 (bsc#996511)
  • file command throws 'Composite Document File V2 Document, corrupt: Can't read SSAT' error against excel 97/2003 file format. (bsc#1009966)
Record
SUSE-SU-2017:3048-1
Updated
2026-11-02
OSVUBUNTU-CVE-2014-9653 No score

readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file.

Record
UBUNTU-CVE-2014-9653
Updated
2026-11-02
OSVUSN-3686-1 No score

file vulnerabilities

Alexander Cherepanov discovered that file incorrectly handled a large number of notes. An attacker could use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-9620)

Alexander Cherepanov discovered that file incorrectly handled certain long strings. An attacker could use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-9621)

Alexander Cherepanov discovered that file incorrectly handled certain malformed ELF files. An attacker could use this issue to cause a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-9653)

It was discovered that file incorrectly handled certain magic files. An attacker could use this issue with a specially crafted magic file to cause a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2015-8865)

It was discovered that file incorrectly handled certain malformed ELF files. An attacker could use this issue to cause a denial of service. (CVE-2018-10360)

Record
USN-3686-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
php
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-bcmath
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-cli
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-common
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-dba
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-devel
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-embedded
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-enchant
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-fpm
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-gd
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
Show 84 moreShow less
Affected packages
PackageAffectedFixed
php-imap
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-intl
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-ldap
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-mbstring
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-mysql
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-odbc
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-pdo
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-pgsql
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-process
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-pspell
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-recode
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-snmp
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-soap
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-tidy
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-xml
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-xmlrpc
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-zts
TuxCare:CentOS:6
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
file
Debian:12
 before 1:5.22+15-1
1:5.22+15-1
file
Debian:13
 before 1:5.22+15-1
1:5.22+15-1
file
Debian:14
 before 1:5.22+15-1
1:5.22+15-1
file
Debian:6.0
 before 5.04-5+squeeze10, plus listed versions
5.04-55.04-5+squeeze15.04-5+squeeze25.04-5+squeeze35.04-5+squeeze4
Show 5 moreShow less
5.04-5+squeeze55.04-5+squeeze65.04-5+squeeze75.04-5+squeeze85.04-5+squeeze9
5.04-5+squeeze10
file
Debian:7
 before 5.11-2+deb7u8, plus listed versions
5.11-25.11-2+deb7u15.11-2+deb7u25.11-2+deb7u35.11-2+deb7u45.11-2+deb7u55.11-2+deb7u65.11-2+deb7u7
5.11-2+deb7u8
file-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:5.11-31.el7
0:5.11-31.el7
file-devel
Red Hat:enterprise_linux:7::client
 before 0:5.11-31.el7
0:5.11-31.el7
file-static
Red Hat:enterprise_linux:7::client
 before 0:5.11-31.el7
0:5.11-31.el7
file
Red Hat:enterprise_linux:7::client
 before 0:5.11-31.el7
0:5.11-31.el7
file-libs
Red Hat:enterprise_linux:7::client
 before 0:5.11-31.el7
0:5.11-31.el7
python-magic
Red Hat:enterprise_linux:7::client
 before 0:5.11-31.el7
0:5.11-31.el7
file-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:5.11-31.el7
0:5.11-31.el7
file-devel
Red Hat:enterprise_linux:7::computenode
 before 0:5.11-31.el7
0:5.11-31.el7
file-static
Red Hat:enterprise_linux:7::computenode
 before 0:5.11-31.el7
0:5.11-31.el7
file
Red Hat:enterprise_linux:7::computenode
 before 0:5.11-31.el7
0:5.11-31.el7
file-libs
Red Hat:enterprise_linux:7::computenode
 before 0:5.11-31.el7
0:5.11-31.el7
python-magic
Red Hat:enterprise_linux:7::computenode
 before 0:5.11-31.el7
0:5.11-31.el7
file-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:5.11-31.el7
0:5.11-31.el7
file-devel
Red Hat:enterprise_linux:7::server
 before 0:5.11-31.el7
0:5.11-31.el7
file-static
Red Hat:enterprise_linux:7::server
 before 0:5.11-31.el7
0:5.11-31.el7
file
Red Hat:enterprise_linux:7::server
 before 0:5.11-31.el7
0:5.11-31.el7
file-libs
Red Hat:enterprise_linux:7::server
 before 0:5.11-31.el7
0:5.11-31.el7
python-magic
Red Hat:enterprise_linux:7::server
 before 0:5.11-31.el7
0:5.11-31.el7
file-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:5.11-31.el7
0:5.11-31.el7
file-devel
Red Hat:enterprise_linux:7::workstation
 before 0:5.11-31.el7
0:5.11-31.el7
file-static
Red Hat:enterprise_linux:7::workstation
 before 0:5.11-31.el7
0:5.11-31.el7
file
Red Hat:enterprise_linux:7::workstation
 before 0:5.11-31.el7
0:5.11-31.el7
file-libs
Red Hat:enterprise_linux:7::workstation
 before 0:5.11-31.el7
0:5.11-31.el7
python-magic
Red Hat:enterprise_linux:7::workstation
 before 0:5.11-31.el7
0:5.11-31.el7
file-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:5.04-30.el6
0:5.04-30.el6
file-devel
Red Hat:enterprise_linux:6::client
 before 0:5.04-30.el6
0:5.04-30.el6
file-static
Red Hat:enterprise_linux:6::client
 before 0:5.04-30.el6
0:5.04-30.el6
file
Red Hat:enterprise_linux:6::client
 before 0:5.04-30.el6
0:5.04-30.el6
file-libs
Red Hat:enterprise_linux:6::client
 before 0:5.04-30.el6
0:5.04-30.el6
python-magic
Red Hat:enterprise_linux:6::client
 before 0:5.04-30.el6
0:5.04-30.el6
file-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:5.04-30.el6
0:5.04-30.el6
file-devel
Red Hat:enterprise_linux:6::computenode
 before 0:5.04-30.el6
0:5.04-30.el6
file-static
Red Hat:enterprise_linux:6::computenode
 before 0:5.04-30.el6
0:5.04-30.el6
file
Red Hat:enterprise_linux:6::computenode
 before 0:5.04-30.el6
0:5.04-30.el6
file-libs
Red Hat:enterprise_linux:6::computenode
 before 0:5.04-30.el6
0:5.04-30.el6
python-magic
Red Hat:enterprise_linux:6::computenode
 before 0:5.04-30.el6
0:5.04-30.el6
file-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:5.04-30.el6
0:5.04-30.el6
file-static
Red Hat:enterprise_linux:6::server
 before 0:5.04-30.el6
0:5.04-30.el6
file
Red Hat:enterprise_linux:6::server
 before 0:5.04-30.el6
0:5.04-30.el6
file-devel
Red Hat:enterprise_linux:6::server
 before 0:5.04-30.el6
0:5.04-30.el6
file-libs
Red Hat:enterprise_linux:6::server
 before 0:5.04-30.el6
0:5.04-30.el6
python-magic
Red Hat:enterprise_linux:6::server
 before 0:5.04-30.el6
0:5.04-30.el6
file-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:5.04-30.el6
0:5.04-30.el6
file-static
Red Hat:enterprise_linux:6::workstation
 before 0:5.04-30.el6
0:5.04-30.el6
file
Red Hat:enterprise_linux:6::workstation
 before 0:5.04-30.el6
0:5.04-30.el6
file-devel
Red Hat:enterprise_linux:6::workstation
 before 0:5.04-30.el6
0:5.04-30.el6
file-libs
Red Hat:enterprise_linux:6::workstation
 before 0:5.04-30.el6
0:5.04-30.el6
python-magic
Red Hat:enterprise_linux:6::workstation
 before 0:5.04-30.el6
0:5.04-30.el6
file
SUSE:Linux Enterprise Desktop 12 SP2
 before 5.22-10.3.1
5.22-10.3.1
file
SUSE:Linux Enterprise Desktop 12 SP3
 before 5.22-10.3.1
5.22-10.3.1
file
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
 before 5.22-10.3.1
5.22-10.3.1
file
SUSE:Linux Enterprise Software Development Kit 12 SP2
 before 5.22-10.3.1
5.22-10.3.1
python-magic
SUSE:Linux Enterprise Software Development Kit 12 SP2
 before 5.22-10.3.1
5.22-10.3.1
file
SUSE:Linux Enterprise Software Development Kit 12 SP3
 before 5.22-10.3.1
5.22-10.3.1
python-magic
SUSE:Linux Enterprise Software Development Kit 12 SP3
 before 5.22-10.3.1
5.22-10.3.1
file
SUSE:Linux Enterprise Server 12 SP2
 before 5.22-10.3.1
5.22-10.3.1
file
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 5.22-10.3.1
5.22-10.3.1
file
SUSE:Linux Enterprise Server 12 SP3
 before 5.22-10.3.1
5.22-10.3.1
file
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 5.22-10.3.1
5.22-10.3.1
file
Ubuntu:14.04:LTS
 before 1:5.14-2ubuntu3.4, plus listed versions
5.11-2ubuntu41:5.14-2ubuntu11:5.14-2ubuntu21:5.14-2ubuntu31:5.14-2ubuntu3.11:5.14-2ubuntu3.21:5.14-2ubuntu3.3
1:5.14-2ubuntu3.4
file
Ubuntu:16.04:LTS
 before 1:5.25-2ubuntu1.1, plus listed versions
1:5.22+15-2ubuntu11:5.25-2ubuntu1
1:5.25-2ubuntu1.1
file
Ubuntu:18.04:LTS
 before 1:5.32-2ubuntu0.1, plus listed versions
1:5.32-11:5.32-2
1:5.32-2ubuntu0.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-9653 is a high vulnerability (CVSS 7.5) in File Project File, published March 18, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.65%, the 91st percentile. Fixed in php 5.3.3-51.el6.cloudlinux.

References

Show 113 moreShow less
This page doesn't list everything

Left out here: the rest of 1 source description. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open