Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Ubuntu 13.04 USN-1872-1: Critical PHP Denial Of Service Issue

Ubuntu Large Esm H500
PHP could be made to crash or run programs if it received specially crafted input.
=========================================================================Ubuntu Security Notice USN-1872-1
June 11, 2013

php5 vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 13.04

Summary:

PHP could be made to crash or run programs if it received specially crafted
input.

Software Description:
- php5: HTML-embedded scripting language interpreter

Details:

It was discovered that PHP incorrectly handled the quoted_printable_encode
function. An attacker could use this flaw to cause PHP to crash, resulting
in a denial of service, or to possibly execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.04:
  php5                            5.4.9-4ubuntu2.1

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-1872-1
  CVE-2013-2110

Package Information:
  https://launchpad.net/ubuntu/+source/php5/5.4.9-4ubuntu2.1


Ubuntu 13.04 USN-1872-1: Critical PHP Denial Of Service Issue

ubuntu
Calendar Grey June 11, 2013
Dist Ubuntu Esm H88
The PHP version on Ubuntu 13.04 has a security flaw that can be exploited via specially designed input, necessitating immediate patching.
PHP could be made to crash or run programs if it received specially crafted input.

Summary

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 13.04: php5 5.4.9-4ubuntu2.1 In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1872-1

CVE-2013-2110

Severity
critical
Lowest
Low
Medium
High
Critical

June 11, 2013

Package Information

https://launchpad.net/ubuntu/+source/php5/5.4.9-4ubuntu2.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here