The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate that is not properly handled by the openssl_x509_parse function.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade php | Aug 30, 2017 | Dec 16, 2013 |
| Apple Osx Apache | — | Apply OS X security update 2014-001Upgrade macOS to the latest version | Aug 28, 2015 | Dec 16, 2013 |
| Apple Osx Php | — | Apply OS X security update 2014-001Upgrade macOS to the latest version | Mar 3, 2014 | Dec 16, 2013 |
| Centos_linux | — | Upgrade php53-develUpgrade php53-intlUpgrade php-intlUpgrade php-commonUpgrade php-mysqlUpgrade php-mbstringUpgrade php-tidyUpgrade php53-mysqlUpgrade php53-processUpgrade php-odbcUpgrade php53-commonUpgrade php-pgsqlUpgrade php-xmlUpgrade php-cliUpgrade php53-ldapUpgrade php-imapUpgrade php-xmlrpcUpgrade php53-pgsqlUpgrade php-snmpUpgrade php53-cliUpgrade php53-bcmathUpgrade php53-odbcUpgrade php-soapUpgrade php-dbaUpgrade php-ldapUpgrade php-enchantUpgrade php-processUpgrade php-develUpgrade php-ncursesUpgrade php53-soapUpgrade php53-gdUpgrade php53Upgrade php-embeddedUpgrade php-bcmathUpgrade php-fpmUpgrade php-pdoUpgrade php-pspellUpgrade php-recodeUpgrade php-ztsUpgrade php53-dbaUpgrade php53-xmlUpgrade php53-imapUpgrade php53-snmpUpgrade php53-mbstringUpgrade php53-pspellUpgrade php-gdUpgrade php53-xmlrpcUpgrade php53-pdoUpgrade php | Dec 1, 2016 | Dec 16, 2013 |
| Freebsd | — | Upgrade php55Upgrade php53Upgrade php5 | Dec 10, 2025 | Dec 14, 2013 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Dec 16, 2013 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Dec 16, 2013 |
| Oracle Solaris | — | Upgrade web/server/apache-22 to version 2.2.27-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-suhosin to version 0.9.29-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-idn to version 0.2.0-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-suhosin to version 0.9.33-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-memcache to version 3.0.6-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-mysql to version 5.2.17-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52 to version 5.2.17-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-tcpwrap to version 1.1.3-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-mysql to version 5.3.28-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/documentation to version 5.3.28-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53 to version 5.3.28-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-xdebug to version 2.2.0-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-idn to version 0.2.0-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-apc to version 3.0.19-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/server/apache-22/module/apache-php53 to version 5.3.28-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-common to version 11.1-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-memcache to version 2.2.5-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/server/apache-22/module/apache-php52 to version 5.2.17-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-tcpwrap to version 1.1.3-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-pear to version 5.3.28-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-pear to version 5.2.17-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/documentation to version 5.2.17-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-apc to version 3.1.9-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-xdebug to version 2.0.5-0.175.1.19.0.4.0 on Solaris 11.1 | May 29, 2017 | Dec 16, 2013 |
| Oracle_linux | — | Upgrade php53-imapUpgrade php-ldapUpgrade php-intlUpgrade phpUpgrade php-enchantUpgrade php-gdUpgrade php-pspellUpgrade php-dbaUpgrade php53-xmlUpgrade php-pdoUpgrade php-tidyUpgrade php-odbcUpgrade php53-snmpUpgrade php53-dbaUpgrade php-snmpUpgrade php53Upgrade php53-odbcUpgrade php53-gdUpgrade php53-pdoUpgrade php-embeddedUpgrade php-bcmathUpgrade php-cliUpgrade php-imapUpgrade php-ncursesUpgrade php53-cliUpgrade php-recodeUpgrade php53-soapUpgrade php53-develUpgrade php53-bcmathUpgrade php-soapUpgrade php-processUpgrade php-mbstringUpgrade php-fpmUpgrade php-develUpgrade php53-pspellUpgrade php53-ldapUpgrade php53-mysqlUpgrade php53-intlUpgrade php53-mbstringUpgrade php-pgsqlUpgrade php-xmlUpgrade php-mysqlUpgrade php-xmlrpcUpgrade php53-xmlrpcUpgrade php53-commonUpgrade php53-pgsqlUpgrade php53-processUpgrade php-ztsUpgrade php-common | Oct 16, 2024 | Dec 17, 2013 |
| Php | — | Upgrade to PHP version 5.4.23Upgrade to PHP version 5.5.7Upgrade to PHP version 5.3.28 | Feb 26, 2014 | Dec 16, 2013 |
| Suse | — | Upgrade php53-bz2Upgrade php53-imapUpgrade php53-zipUpgrade php5-zipUpgrade php5-pcntlUpgrade php5-mhashUpgrade php53-socketsUpgrade php5-readlineUpgrade php5-ncursesUpgrade php5-jsonUpgrade php5-ftpUpgrade php53-dbaUpgrade php53-snmpUpgrade php5-shmopUpgrade php53-shmopUpgrade php5-fastcgiUpgrade php5-xmlreaderUpgrade php5-bcmathUpgrade php5-odbcUpgrade php5-gmpUpgrade php53-odbcUpgrade php5-mcryptUpgrade php53-calendarUpgrade php53-pearUpgrade php53-ldapUpgrade php5-pharUpgrade php53-gdUpgrade php5Upgrade php53-bcmathUpgrade php5-pdoUpgrade php5-bz2Upgrade php53-zlibUpgrade php53-posixUpgrade php53-pdoUpgrade php5-hashUpgrade php53-curlUpgrade php5-pearUpgrade php53-mbstringUpgrade php53-gettextUpgrade php5-firebirdUpgrade php53-sqliteUpgrade php53-fastcgiUpgrade php53-tidyUpgrade php5-mysqlUpgrade php5-sysvsemUpgrade php5-imapUpgrade php5-xmlwriterUpgrade php53-xmlreaderUpgrade php53-ctypeUpgrade php5-develUpgrade php53-iconvUpgrade php5-opensslUpgrade php53-pgsqlUpgrade php53-mcryptUpgrade php5-wddxUpgrade php5-calendarUpgrade php53-readlineUpgrade php5-snmpUpgrade php5-soapUpgrade php53-sysvshmUpgrade php5-gettextUpgrade php5-mssqlUpgrade php53-suhosinUpgrade php53-jsonUpgrade php5-zlibUpgrade php53-mysqlUpgrade php53-ftpUpgrade php5-ldapUpgrade php5-intlUpgrade php5-sysvshmUpgrade php5-tidyUpgrade php5-dbaseUpgrade php5-xmlrpcUpgrade php53Upgrade php5-sqliteUpgrade php53-tokenizerUpgrade php5-xslUpgrade php5-domUpgrade php53-xmlwriterUpgrade php53-domUpgrade sle-sdk-releaseUpgrade php5-suhosinUpgrade php5-fileinfoUpgrade php53-exifUpgrade php53-fileinfoUpgrade php53-sysvsemUpgrade php53-gmpUpgrade apache2-mod_php5Upgrade php53-wddxUpgrade php53-xslUpgrade php5-ctypeUpgrade php5-gdUpgrade php5-enchantUpgrade php53-develUpgrade php53-xmlrpcUpgrade php53-pspellUpgrade php5-exifUpgrade php53-soapUpgrade php5-socketsUpgrade php53-opensslUpgrade php5-iconvUpgrade php5-curlUpgrade php5-pgsqlUpgrade php53-sysvmsgUpgrade apache2-mod_php53Upgrade php5-fpmUpgrade php5-pspellUpgrade php5-sysvmsgUpgrade php53-pcntlUpgrade php5-tokenizerUpgrade php53-intlUpgrade php5-mbstringUpgrade php5-posixUpgrade php5-dba | Jan 9, 2014 | Dec 16, 2013 |
| Ubuntu | — | Upgrade php5-cgiUpgrade php5-cliUpgrade libapache2-mod-php5 | Nov 8, 2024 | Dec 17, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub