Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

SUSE: 2014:0923-1 Critical: php74 Vulnerability and Exploit

suse
Calendar Grey July 4, 2014
Scroller Suse
Reveals urgent security enhancement for php53 rectifying four vulnerabilities, accompanied by detailed patch directives for users.
An update that fixes four vulnerabilities is now available

Summary

php53 was updated to fix the following security vulnerabilities: * Heap-based buffer overflow in DNS TXT record parsing. (CVE-2014-4049) * Denial of service in Fileinfo component. (CVE-2014-0238) * Performance degradation by too many file_printf calls. (CVE-2014-0237) * NULL pointer dereference in GD XPM decoder. (CVE-2014-2497) Security Issues references: * CVE-2014-4049 * CVE-2014-0238 * CVE-2014-0237 * CVE-2014-2497 Patch Instructions: To install this SUSE Security Update use YaST online_update.

Topics%20covered

Topics Covered

security advisory update buffer overflow DoS important SUSE php53

References

#868624 #880904 #880905 #882992

Cross- CVE-2014-0237 CVE-2014-0238 CVE-2014-2497

CVE-2014-4049

Affected Products:

SUSE Linux Enterprise Software Development Kit 11 SP3

SUSE Linux Enterprise Server 11 SP3 for VMware

SUSE Linux Enterprise Server 11 SP3

SUSE Linux Enterprise Server 11 SP2 LTSS

https://www.suse.com/security/cve/CVE-2014-0237.html

https://www.suse.com/security/cve/CVE-2014-0238.html

https://www.suse.com/security/cve/CVE-2014-2497.html

https://www.suse.com/security/cve/CVE-2014-4049.html

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

https://scc.suse.com:443/patches/

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2014:0869-1
Rating: important

Topics%20covered

Topics Covered

security advisory update buffer overflow DoS important SUSE php53

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.