{"id":"CVE-2014-9427","aliases":["BELL-CVE-2014-9427","DSA-3117-1","EUVD-2014-9248","GHSA-jv9r-h7r8-3459","MGASA-2015-0040","RHSA-2015:1053","RHSA-2015:1066","SUSE-SU-2015:0365-1","UBUNTU-CVE-2014-9427","USN-2501-1","openSUSE-SU-2024:10290-1","openSUSE-SU-2024:10344-1","openSUSE-SU-2024:11169-1"],"status":"published","title":"sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x...","description":"sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider the mapping's length during processing of an invalid file that begins with a # character and lacks a newline character, which causes an out-of-bounds read and might (1) allow remote attackers to obtain sensitive information from php-cgi process memory by leveraging the ability to upload a .php file or (2) trigger unexpected code execution if a valid PHP script is present in memory locations adjacent to the mapping.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.1828,"percentile":0.97237,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2014-12-31T00:00:00Z","modified":"2026-06-29T10:09:17Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"php5","fixed_in":["5.5.9+dfsg-1ubuntu4.6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:7","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.36-0+deb7u1"}]}],"versions":["5.4.11-1","5.4.15-1","5.4.34-0+deb7u1","5.4.35-0+deb7u1","5.4.35-0+deb7u2","5.4.4-14","5.4.4-14+deb7u1","5.4.4-14+deb7u10","5.4.4-14+deb7u11","5.4.4-14+deb7u12","5.4.4-14+deb7u13","5.4.4-14+deb7u14","5.4.4-14+deb7u2","5.4.4-14+deb7u3","5.4.4-14+deb7u4","5.4.4-14+deb7u5","5.4.4-14+deb7u7","5.4.4-14+deb7u8","5.4.4-14+deb7u9","5.4.4-15","5.4.4-15.1","5.4.6-1","5.4.6-2","5.4.8-1","5.4.9-1","5.4.9-2","5.4.9-3","5.4.9-4"],"bundled":2},{"source":"osv","ecosystem":"Mageia:4","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.21-1.mga4"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"php-apc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.15-4.11.mga4"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"libgd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-3.2.mga4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0-1.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-tidy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0-1.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php55-scldevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0-1.el6"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0-1.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.21-2.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0-1.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php55-scldevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0-1.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-pecl-zendopcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.4-3.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-pecl-zendopcache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.4-3.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-tidy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"php54-scldevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0-1.el6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-pecl-zendopcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.4-3.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-pecl-zendopcache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.4-3.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.40-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"php54-scldevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0-1.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-11.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-11.3"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.9+dfsg-1ubuntu4.6"}]}],"versions":["5.5.3+dfsg-1ubuntu2","5.5.3+dfsg-1ubuntu3","5.5.6+dfsg-1ubuntu1","5.5.6+dfsg-1ubuntu2","5.5.8+dfsg-2ubuntu1","5.5.9+dfsg-1ubuntu1","5.5.9+dfsg-1ubuntu2","5.5.9+dfsg-1ubuntu3","5.5.9+dfsg-1ubuntu4","5.5.9+dfsg-1ubuntu4.1","5.5.9+dfsg-1ubuntu4.2","5.5.9+dfsg-1ubuntu4.3","5.5.9+dfsg-1ubuntu4.4","5.5.9+dfsg-1ubuntu4.5"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.9+dfsg-1ubuntu4.6"}]}],"versions":["5.5.3+dfsg-1ubuntu2","5.5.3+dfsg-1ubuntu3","5.5.6+dfsg-1ubuntu1","5.5.6+dfsg-1ubuntu2","5.5.8+dfsg-2ubuntu1","5.5.9+dfsg-1ubuntu1","5.5.9+dfsg-1ubuntu2","5.5.9+dfsg-1ubuntu3","5.5.9+dfsg-1ubuntu4","5.5.9+dfsg-1ubuntu4.1","5.5.9+dfsg-1ubuntu4.2","5.5.9+dfsg-1ubuntu4.3","5.5.9+dfsg-1ubuntu4.4","5.5.9+dfsg-1ubuntu4.5"],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.14-1.4"}]}],"bundled":70},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.28-1.1"}]}],"bundled":71},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"php8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.11-1.1"}]}],"bundled":97}],"products":[{"vendor":"php","product":"php"}],"references":[{"url":"https://bugs.php.net/bug.php?id=68618","tags":["x_refsource_CONFIRM","x_transferred","Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:032","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred"]},{"url":"http://openwall.com/lists/oss-security/2015/01/03/4","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://openwall.com/lists/oss-security/2014/12/31/6","tags":["mailing-list","x_refsource_MLIST","x_transferred","report"]},{"url":"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f9ad3086693fce680fbe246e4a45aa92edd2ac35","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://www.securityfocus.com/bid/71833","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://support.apple.com/HT205267","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://openwall.com/lists/oss-security/2015/01/01/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","report"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1053.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://security.gentoo.org/glsa/201503-03","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://advisories.mageia.org/MGASA-2015-0040.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1066.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9427","tags":["advisory"]},{"url":"http://git.php.net/?p=php-src.git;a=commit;h=f9ad3086693fce680fbe246e4a45aa92edd2ac35"},{"url":"https://github.com/advisories/GHSA-jv9r-h7r8-3459"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2014-9427","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0040.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15121","tags":["report"]},{"url":"http://php.net/ChangeLog-5.php#5.5.21","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1053","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1132446","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1175718","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1178736","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1185397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1185472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1185900","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1185904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1188599","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1188639","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1191049","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1194730","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1194737","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1194747","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1204868","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1207676","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1207682","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1226916","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1053.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8142","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8142","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8142","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9427","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9427","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9652","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9652","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9652","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9705","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9705","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9705","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9709","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9709","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9709","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0231","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0231","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0231","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0232","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0232","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0232","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0273","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0273","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0273","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-1351","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1351","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1351","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-1352","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1352","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1352","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2301","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2301","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2301","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2305","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2305","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2305","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2348","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2348","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2348","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2787","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2787","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2787","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4147","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4147","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4147","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4148","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4148","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4148","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4599","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1222538","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4599","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4599","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4600","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4600","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4600","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4601","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4601","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4601","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1066","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1055927","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1213394","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1213446","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1213449","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1223441","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1066.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2783","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2783","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2783","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3307","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3307","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3307","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3329","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3329","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3329","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3330","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3330","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3330","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3411","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1213407","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3411","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3411","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1232823","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3412","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3412","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4602","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1232923","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4602","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4602","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4603","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1232918","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4603","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4603","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1213442","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4604","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4604","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4605","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4605","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4605","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8935","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348927","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8935","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8935","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150365-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/907519","tags":["report"]},{"url":"https://bugzilla.suse.com/910659","tags":["report"]},{"url":"https://bugzilla.suse.com/911664","tags":["report"]},{"url":"https://bugzilla.suse.com/914690","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0232","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2014-9427","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2501-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-8142","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-9652","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-0231","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-0232","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-1351","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-1352","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-7243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1643","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-0996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21706","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2014-9427","description":"sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider the mapping's length during processing of an invalid file that begins with a # character and lacks a newline character, which causes an out-of-bounds read and might (1) allow remote attackers to obtain sensitive information from php-cgi process memory by leveraging the ability to upload a .php file or (2) trigger unexpected code execution if a valid PHP script is present in memory locations adjacent to the mapping.","status":"published","published":"2015-01-03T02:00:00Z","modified":"2024-08-06T13:47:41.005Z","updated_at":"2026-11-02T14:33:42.54191Z"}],"euvd":[{"id":"EUVD-2014-9248","description":"sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider the mapping's length during processing of an invalid file that begins with a # character and lacks a newline character, which causes an out-of-bounds read and might (1) allow remote attackers to obtain sensitive information from php-cgi process memory by leveraging the ability to upload a .php file or (2) trigger unexpected code execution if a valid PHP script is present in memory locations adjacent to the mapping.","status":"published","published":"2015-01-03T02:00:00Z","modified":"2024-08-06T13:47:41Z","updated_at":"2026-11-03T01:56:48.88782Z"}],"ghsa":[{"id":"GHSA-jv9r-h7r8-3459","title":"sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x...","description":"sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider the mapping's length during processing of an invalid file that begins with a # character and lacks a newline character, which causes an out-of-bounds read and might (1) allow remote attackers to obtain sensitive information from php-cgi process memory by leveraging the ability to upload a .php file or (2) trigger unexpected code execution if a valid PHP script is present in memory locations adjacent to the mapping.","status":"published","published":"2022-05-17T03:12:34Z","modified":"2025-04-12T12:44:47Z","cwes":["CWE-119"],"updated_at":"2026-11-02T15:01:20.346559Z"}],"nvd":[{"id":"CVE-2014-9427","description":"sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider the mapping's length during processing of an invalid file that begins with a # character and lacks a newline character, which causes an out-of-bounds read and might (1) allow remote attackers to obtain sensitive information from php-cgi process memory by leveraging the ability to upload a .php file or (2) trigger unexpected code execution if a valid PHP script is present in memory locations adjacent to the mapping.","status":"published","published":"2015-01-03T02:59:00.05Z","modified":"2026-06-17T00:18:20.897Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:58.030217Z"}],"osv":[{"id":"BELL-CVE-2014-9427","title":"CVE-2014-9427 does not affect BellSoft software","status":"withdrawn","published":"2015-01-03T02:59:00Z","modified":"2026-01-28T07:21:32.598943Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"RHSA-2015:1066","title":"Red Hat Security Advisory: php54 security and bug fix update","status":"published","published":"2024-09-13T12:26:05Z","modified":"2026-06-29T10:09:17Z","cvss":[{"version":"3.0","score":3.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"DSA-3117-1","title":"php5 - security update","status":"published","published":"2014-12-31T00:00:00Z","modified":"2026-03-09T01:18:50.335834Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2015-0040","title":"Updated php packages fix security vulnerabilities","description":"Updated php and libgd packages fix security vulnerabilities:\n\nDouble free vulnerability in the zend_ts_hash_graceful_destroy function in\nzend_ts_hash.c in the Zend Engine in PHP before 5.5.21 allows remote\nattackers to cause a denial of service or possibly have unspecified other\nimpact via unknown vectors (CVE-2014-9425).\n\nsapi/cgi/cgi_main.c in the CGI component in PHP before 5.5.21, when mmap is\nused to read a .php file, does not properly consider the mapping's length\nduring processing of an invalid file that begins with a # character and lacks\na newline character, which causes an out-of-bounds read and might allow remote\nattackers to obtain sensitive information from php-cgi process memory by\nleveraging the ability to upload a .php file or trigger unexpected code\nexecution if a valid PHP script is present in memory locations adjacent to the\nmapping (CVE-2014-9427).\n\nUse after free vulnerability in unserialize() in PHP before 5.5.21\n(CVE-2015-0231).\n\nFree called on an uninitialized pointer in php-exif in PHP before 5.5.21\n(CVE-2015-0232).\n\nThe readelf.c source file has been removed from PHP's bundled copy of file's\nlibmagic, eliminating exposure to denial of service issues in ELF file parsing\nsuch as CVE-2014-8116, CVE-2014-8117, CVE-2014-9620 and CVE-2014-9621 in PHP's\nfileinfo module.\n\nA buffer read overflow in gd_gif_in.c in the php#68601 bug referenced in the\nPHP 5.5.21 ChangeLog has been fixed in the libgd package.\n\nThe php package has been updated to version 5.5.21 to fix these issues and\nother bugs. Please see the upstream ChangeLog for more information.\n","status":"published","published":"2015-01-27T21:08:29Z","modified":"2026-04-16T06:25:14.853747496Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2024:10290-1","title":"apache2-mod_php7-7.0.14-1.4 on GA media","description":"These are all security issues fixed in the apache2-mod_php7-7.0.14-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:00:03.261343Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:10344-1","title":"apache2-mod_php5-5.6.28-1.1 on GA media","description":"These are all security issues fixed in the apache2-mod_php5-5.6.28-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:58:15.40421Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:11169-1","title":"php8-8.0.11-1.1 on GA media","description":"These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:14:38.718583Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"RHSA-2015:1053","title":"Red Hat Security Advisory: php55 security and bug fix update","status":"published","published":"2024-09-13T10:36:11Z","modified":"2026-06-29T10:09:16Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2015:0365-1","title":"Security update for php5","description":"php5 was updated to fix four security issues.\n\nThese security issues were fixed:\n- CVE-2015-0231: Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allowed remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate numerical keys within the serialized properties of an object.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-8142 (bnc#910659).\n- CVE-2014-9427: sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, did not properly consider the mapping's length during processing of an invalid file that begins with a # character and lacks a newline character, which caused an out-of-bounds read and might (1) allow remote attackers to obtain sensitive information from php-cgi process memory by leveraging the ability to upload a .php file or (2) trigger unexpected code execution if a valid PHP script is present in memory locations adjacent to the mapping (bnc#911664).\n- CVE-2015-0232: The exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allowed remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free and application crash) via crafted EXIF data in a JPEG image (bnc#914690).\n- CVE-2014-8142: Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allowed remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys within the serialized properties of an object, a different vulnerability than CVE-2004-1019 (bnc#910659).\n\nAdditionally a fix was included that protects against a possible NULL pointer use (bnc#910659). \n\nThis non-security issue was fixed:\n- php53 ignored default_socket_timeout on outgoing SSL connection (bnc#907519).\n","status":"published","published":"2015-02-13T01:35:12Z","modified":"2026-02-04T02:30:00.788203Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"UBUNTU-CVE-2014-9427","description":"sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider the mapping's length during processing of an invalid file that begins with a # character and lacks a newline character, which causes an out-of-bounds read and might (1) allow remote attackers to obtain sensitive information from php-cgi process memory by leveraging the ability to upload a .php file or (2) trigger unexpected code execution if a valid PHP script is present in memory locations adjacent to the mapping.","status":"published","published":"2015-01-02T00:00:00Z","modified":"2026-04-22T09:55:33.141862Z","updated_at":"2026-11-02T15:54:09.378953Z"},{"id":"USN-2501-1","title":"php5 vulnerabilities","description":"Stefan Esser discovered that PHP incorrectly handled unserializing objects.\nA remote attacker could use this issue to cause PHP to crash, resulting in\na denial of service, or possibly execute arbitrary code. (CVE-2014-8142,\nCVE-2015-0231)\n\nBrian Carpenter discovered that the PHP CGI component incorrectly handled\ninvalid files. A local attacker could use this issue to obtain sensitive\ninformation, or possibly execute arbitrary code. This issue only affected\nUbuntu 14.04 LTS and Ubuntu 14.10. (CVE-2014-9427)\n\nIt was discovered that PHP incorrectly handled certain pascal strings in\nthe fileinfo extension. A remote attacker could possibly use this issue to\ncause PHP to crash, resulting in a denial of service. This issue only\naffected Ubuntu 14.04 LTS and Ubuntu 14.10. (CVE-2014-9652)\n\nAlex Eubanks discovered that PHP incorrectly handled EXIF data in JPEG\nimages. A remote attacker could use this issue to cause PHP to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\nThis issue only affected Ubuntu 14.04 LTS and Ubuntu 14.10. (CVE-2015-0232)\n\nIt was discovered that the PHP opcache component incorrectly handled\nmemory. A remote attacker could possibly use this issue to cause PHP to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. This issue only affected Ubuntu 14.04 LTS and Ubuntu 14.10.\n(CVE-2015-1351)\n\nIt was discovered that the PHP PostgreSQL database extension incorrectly\nhandled certain pointers. A remote attacker could possibly use this issue\nto cause PHP to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. This issue only affected Ubuntu 14.04 LTS and\nUbuntu 14.10. (CVE-2015-1352)\n","status":"published","published":"2015-02-17T18:14:16Z","modified":"2026-04-22T09:08:18.321791Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}