The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Stack-based buffer overflow in the date_from_ISO8601 function in ext/xmlrpc/libxmlrpc/xmlrpc.c in PHP before 5.2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by including a timezone field in a date, leading to improper XML-RPC encoding.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade php-cliUpgrade php-develUpgrade php-mysqlUpgrade php-mbstringUpgrade phpUpgrade php-imapUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-snmpUpgrade php-bcmathUpgrade php-ncursesUpgrade php-odbcUpgrade php-soapUpgrade php-pgsqlUpgrade php-pdoUpgrade php-gdUpgrade php-commonUpgrade php-dbaUpgrade php-ldap | Dec 1, 2016 | Nov 22, 2014 |
| Oracle_linux | — | Upgrade php-mbstringUpgrade php-imapUpgrade php-mysqlUpgrade php-commonUpgrade php-odbcUpgrade php-cliUpgrade php-xmlUpgrade php-snmpUpgrade php-xmlrpcUpgrade php-dbaUpgrade php-ncursesUpgrade php-ldapUpgrade php-gdUpgrade php-develUpgrade phpUpgrade php-soapUpgrade php-bcmathUpgrade php-pdoUpgrade php-pgsql | Oct 16, 2024 | Nov 23, 2014 |
| Php | — | Upgrade to PHP version 5.2.7 | Dec 1, 2014 | Nov 22, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub