The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate that is not properly handled by the openssl_x509_parse function.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade php | Aug 30, 2017 | Dec 16, 2013 |
| Apple Osx Apache | — | Apply OS X security update 2014-001Upgrade macOS to the latest version | Aug 28, 2015 | Dec 16, 2013 |
| Apple Osx Php | — | Upgrade macOS to the latest versionApply OS X security update 2014-001 | Mar 3, 2014 | Dec 16, 2013 |
| Centos_linux | — | Upgrade php-xmlUpgrade php53-commonUpgrade php53-pgsqlUpgrade php-intlUpgrade php-mbstringUpgrade php53-ldapUpgrade php-imapUpgrade php53-develUpgrade php53-cliUpgrade php-tidyUpgrade php53-processUpgrade php53-bcmathUpgrade php53-mysqlUpgrade php53-intlUpgrade php-mysqlUpgrade php-pgsqlUpgrade php-snmpUpgrade php-odbcUpgrade php-commonUpgrade php-cliUpgrade php-xmlrpcUpgrade phpUpgrade php-develUpgrade php53-imapUpgrade php53-dbaUpgrade php-enchantUpgrade php53-mbstringUpgrade php-fpmUpgrade php-bcmathUpgrade php-recodeUpgrade php53-odbcUpgrade php53-gdUpgrade php53-xmlrpcUpgrade php53-pspellUpgrade php53-pdoUpgrade php-dbaUpgrade php53-soapUpgrade php-gdUpgrade php-ldapUpgrade php53-xmlUpgrade php-ncursesUpgrade php-processUpgrade php-embeddedUpgrade php-ztsUpgrade php53Upgrade php53-snmpUpgrade php-pspellUpgrade php-pdoUpgrade php-soap | Dec 1, 2016 | Dec 16, 2013 |
| Freebsd | — | Upgrade php55Upgrade php53Upgrade php5 | Dec 10, 2025 | Dec 14, 2013 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Dec 16, 2013 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Dec 16, 2013 |
| Oracle Solaris | — | Upgrade web/php-52/extension/php-pear to version 5.2.17-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-tcpwrap to version 1.1.3-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-apc to version 3.1.9-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-pear to version 5.3.28-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-memcache to version 2.2.5-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-xdebug to version 2.0.5-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-common to version 11.1-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/documentation to version 5.2.17-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/server/apache-22/module/apache-php52 to version 5.2.17-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/documentation to version 5.3.28-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-apc to version 3.0.19-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-tcpwrap to version 1.1.3-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-mysql to version 5.3.28-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-suhosin to version 0.9.29-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52 to version 5.2.17-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-idn to version 0.2.0-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/server/apache-22/module/apache-php53 to version 5.3.28-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-suhosin to version 0.9.33-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-xdebug to version 2.2.0-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-mysql to version 5.2.17-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-idn to version 0.2.0-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53 to version 5.3.28-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-memcache to version 3.0.6-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/server/apache-22 to version 2.2.27-0.175.1.19.0.4.0 on Solaris 11.1 | May 29, 2017 | Dec 16, 2013 |
| Oracle_linux | — | Upgrade php53-mbstringUpgrade php53-soapUpgrade php-soapUpgrade php53-intlUpgrade php53-ldapUpgrade php-mbstringUpgrade php-ztsUpgrade php-processUpgrade php-pgsqlUpgrade php-xmlUpgrade php53-mysqlUpgrade php-develUpgrade php53-xmlrpcUpgrade php53-commonUpgrade php-xmlrpcUpgrade php-mysqlUpgrade php53-processUpgrade php53-pspellUpgrade php-fpmUpgrade php53-pgsqlUpgrade php-commonUpgrade php53-develUpgrade php53-bcmathUpgrade php53-imapUpgrade php53-cliUpgrade php53-odbcUpgrade php-pdoUpgrade php-bcmathUpgrade php53-pdoUpgrade php53-snmpUpgrade php-tidyUpgrade php-gdUpgrade php53Upgrade php-imapUpgrade phpUpgrade php-pspellUpgrade php-odbcUpgrade php-ncursesUpgrade php-cliUpgrade php-recodeUpgrade php-snmpUpgrade php53-gdUpgrade php-embeddedUpgrade php-ldapUpgrade php53-dbaUpgrade php-intlUpgrade php-enchantUpgrade php-dbaUpgrade php53-xml | Oct 16, 2024 | Dec 17, 2013 |
| Php | — | Upgrade to PHP version 5.3.28Upgrade to PHP version 5.4.23Upgrade to PHP version 5.5.7 | Feb 26, 2014 | Dec 16, 2013 |
| Suse | — | Upgrade php5-mbstringUpgrade php53-pcntlUpgrade php53-mysqlUpgrade php53-fileinfoUpgrade php53-domUpgrade php53-xmlwriterUpgrade php53-intlUpgrade php53-ftpUpgrade php5-pgsqlUpgrade php5-iconvUpgrade php5-xmlrpcUpgrade php53-develUpgrade php53-wddxUpgrade php5-dbaseUpgrade php5-tokenizerUpgrade php5-fpmUpgrade php53-tokenizerUpgrade php5-sysvshmUpgrade php5-curlUpgrade php53-pspellUpgrade php5-sqliteUpgrade php5-zlibUpgrade php53Upgrade php5-tidyUpgrade php53-opensslUpgrade php53-gmpUpgrade php5-posixUpgrade php5-ctypeUpgrade php53-jsonUpgrade php53-exifUpgrade php5-sysvmsgUpgrade php5-enchantUpgrade php53-xmlrpcUpgrade php53-soapUpgrade php5-pspellUpgrade php53-xslUpgrade php5-fileinfoUpgrade sle-sdk-releaseUpgrade php5-exifUpgrade php5-ldapUpgrade php5-socketsUpgrade php5-domUpgrade apache2-mod_php53Upgrade php53-sysvsemUpgrade php5-suhosinUpgrade php5-gdUpgrade php5-xslUpgrade apache2-mod_php5Upgrade php53-sysvmsgUpgrade php5-dbaUpgrade php5-intlUpgrade php5-pcntlUpgrade php5-readlineUpgrade php53-suhosinUpgrade php53-pearUpgrade php53-ctypeUpgrade php5-ncursesUpgrade php53-zipUpgrade php53-socketsUpgrade php5-soapUpgrade php53-bz2Upgrade php5Upgrade php5-jsonUpgrade php5-mssqlUpgrade php53-imapUpgrade php53-shmopUpgrade php53-tidyUpgrade php5-calendarUpgrade php53-iconvUpgrade php53-readlineUpgrade php5-mcryptUpgrade php5-fastcgiUpgrade php5-mhashUpgrade php5-xmlreaderUpgrade php53-gettextUpgrade php53-dbaUpgrade php5-odbcUpgrade php53-pdoUpgrade php53-xmlreaderUpgrade php53-odbcUpgrade php5-firebirdUpgrade php53-gdUpgrade php53-sysvshmUpgrade php5-snmpUpgrade php5-bz2Upgrade php5-gmpUpgrade php5-bcmathUpgrade php5-xmlwriterUpgrade php53-zlibUpgrade php53-calendarUpgrade php53-mbstringUpgrade php53-sqliteUpgrade php5-wddxUpgrade php53-bcmathUpgrade php5-gettextUpgrade php5-imapUpgrade php5-sysvsemUpgrade php5-pearUpgrade php53-fastcgiUpgrade php5-develUpgrade php5-hashUpgrade php53-curlUpgrade php53-ldapUpgrade php5-zipUpgrade php5-shmopUpgrade php53-snmpUpgrade php5-ftpUpgrade php53-posixUpgrade php53-pgsqlUpgrade php5-pdoUpgrade php5-pharUpgrade php5-opensslUpgrade php5-mysqlUpgrade php53-mcrypt | Jan 9, 2014 | Dec 16, 2013 |
| Ubuntu | — | Upgrade libapache2-mod-php5Upgrade php5-cgiUpgrade php5-cli | Nov 8, 2024 | Dec 17, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub