The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted interval specification.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade php | Aug 30, 2017 | Nov 27, 2013 |
| Apple Osx Adminframework | — | Upgrade macOS to the latest versionApply OS X security update 2015-004 | Aug 28, 2015 | Nov 27, 2013 |
| Apple Osx Php | — | Apply OS X security update 2015-004Upgrade macOS to the latest version | Mar 29, 2016 | Nov 27, 2013 |
| Centos_linux | — | Upgrade php53-intlUpgrade php-mysqlUpgrade php53-ldapUpgrade php53-xmlrpcUpgrade php53-mysqlUpgrade php53-develUpgrade php-mbstringUpgrade php53-commonUpgrade php-odbcUpgrade php53-processUpgrade php-commonUpgrade php53-pgsqlUpgrade php-fpmUpgrade php-pgsqlUpgrade php53-dbaUpgrade php-xmlrpcUpgrade php53-bcmathUpgrade php-processUpgrade php53-mbstringUpgrade php-develUpgrade php-snmpUpgrade php53-cliUpgrade php-imapUpgrade php-enchantUpgrade php-dbaUpgrade php-bcmathUpgrade php-ztsUpgrade php53-pspellUpgrade phpUpgrade php53-imapUpgrade php53-xmlUpgrade php-embeddedUpgrade php53-gdUpgrade php-ldapUpgrade php53-odbcUpgrade php53Upgrade php-xmlUpgrade php-recodeUpgrade php53-snmpUpgrade php-cliUpgrade php-pdoUpgrade php-intlUpgrade php-tidyUpgrade php53-pdoUpgrade php53-soapUpgrade php-soapUpgrade php-gdUpgrade php-pspell | Dec 1, 2016 | Nov 27, 2013 |
| Freebsd | — | Upgrade php53 | Dec 10, 2025 | Aug 18, 2014 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Nov 27, 2013 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Nov 27, 2013 |
| Oracle Solaris | — | Upgrade web/server/apache-22/module/apache-php52 to version 5.2.17-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-mysql to version 5.2.17-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-memcache to version 2.2.5-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-pear to version 5.3.28-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52 to version 5.2.17-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-apc to version 3.1.9-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-common to version 11.1-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/documentation to version 5.3.28-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-xdebug to version 2.0.5-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-tcpwrap to version 1.1.3-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-suhosin to version 0.9.29-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/documentation to version 5.2.17-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-xdebug to version 2.2.0-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53 to version 5.3.28-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/server/apache-22 to version 2.2.27-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/server/apache-22/module/apache-php53 to version 5.3.28-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-tcpwrap to version 1.1.3-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-memcache to version 3.0.6-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-idn to version 0.2.0-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-mysql to version 5.3.28-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-suhosin to version 0.9.33-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-apc to version 3.0.19-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-idn to version 0.2.0-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-pear to version 5.2.17-0.175.1.19.0.4.0 on Solaris 11.1 | May 29, 2017 | Nov 27, 2013 |
| Oracle_linux | — | Upgrade php53-intlUpgrade php53-cliUpgrade php53-dbaUpgrade php-intlUpgrade php53-gdUpgrade php-cliUpgrade php-imapUpgrade phpUpgrade php53-xmlrpcUpgrade php-embeddedUpgrade php-tidyUpgrade php-pspellUpgrade php53Upgrade php-processUpgrade php-snmpUpgrade php-ldapUpgrade php53-snmpUpgrade php-recodeUpgrade php53-pdoUpgrade php-odbcUpgrade php53-pspellUpgrade php53-processUpgrade php-dbaUpgrade php-soapUpgrade php-fpmUpgrade php-ztsUpgrade php53-odbcUpgrade php53-develUpgrade php53-soapUpgrade php-xmlrpcUpgrade php-develUpgrade php53-mbstringUpgrade php53-imapUpgrade php-mbstringUpgrade php-gdUpgrade php-pgsqlUpgrade php53-bcmathUpgrade php-mysqlUpgrade php53-xmlUpgrade php-enchantUpgrade php53-pgsqlUpgrade php53-ldapUpgrade php-pdoUpgrade php-bcmathUpgrade php53-commonUpgrade php53-mysqlUpgrade php-xmlUpgrade php-common | Oct 16, 2024 | Nov 28, 2013 |
| Php | — | Upgrade to PHP version 5.5.7 | Feb 26, 2014 | Nov 27, 2013 |
| Suse | — | Upgrade php5-pspellUpgrade php5-bz2Upgrade php53-mbstringUpgrade php5-ldapUpgrade php5-sysvmsgUpgrade php5-curlUpgrade php5-fileinfoUpgrade php5-ctypeUpgrade php53-sysvmsgUpgrade php5-gmpUpgrade php5-snmpUpgrade php53-zlibUpgrade php5-bcmathUpgrade php5-opensslUpgrade php5-tidyUpgrade php5-shmopUpgrade php5-imapUpgrade php5-iconvUpgrade php53-zipUpgrade php5-mcryptUpgrade php53-pdoUpgrade php5-fastcgiUpgrade php53-tidyUpgrade php5-soapUpgrade php5-firebirdUpgrade php53-shmopUpgrade php53-sysvsemUpgrade php53-mcryptUpgrade php53-sqliteUpgrade php5-domUpgrade php5-suhosinUpgrade php53-pcntlUpgrade php5-xmlrpcUpgrade php5-xslUpgrade php5-exifUpgrade php5-pearUpgrade php53-gdUpgrade php5-fpmUpgrade php5-gdUpgrade php5-sqliteUpgrade php53-readlineUpgrade php53Upgrade php53-sysvshmUpgrade php53-iconvUpgrade php53-fileinfoUpgrade php5-xmlreaderUpgrade php5-mbstringUpgrade php53-odbcUpgrade php53-snmpUpgrade php5-sysvsemUpgrade php5-socketsUpgrade php53-calendarUpgrade php53-soapUpgrade php53-xmlwriterUpgrade sle-sdk-releaseUpgrade php53-ctypeUpgrade apache2-mod_php53Upgrade php5-readlineUpgrade apache2-mod_php5Upgrade php5-mssqlUpgrade php53-xslUpgrade php53-curlUpgrade php5-gettextUpgrade php53-tokenizerUpgrade php5-calendarUpgrade php53-posixUpgrade php53-jsonUpgrade php53-domUpgrade php5-ftpUpgrade php53-socketsUpgrade php53-ftpUpgrade php53-gmpUpgrade php53-bcmathUpgrade php53-intlUpgrade php5-dbaUpgrade php5-xmlwriterUpgrade php5-enchantUpgrade php5-odbcUpgrade php53-opensslUpgrade php53-imapUpgrade php5-pdoUpgrade php5-pcntlUpgrade php53-ldapUpgrade php53-exifUpgrade php53-mysqlUpgrade php5-jsonUpgrade php5-zlibUpgrade php5-tokenizerUpgrade php5-posixUpgrade php5-mysqlUpgrade php53-xmlrpcUpgrade php53-pspellUpgrade php53-dbaUpgrade php5-pgsqlUpgrade php5-intlUpgrade php5-pharUpgrade php53-develUpgrade php53-suhosinUpgrade php53-gettextUpgrade php5-sysvshmUpgrade php53-wddxUpgrade php5-develUpgrade php53-xmlreaderUpgrade php53-pearUpgrade php53-pgsqlUpgrade php5Upgrade php53-bz2Upgrade php5-zipUpgrade php53-fastcgiUpgrade php5-wddx | Jan 9, 2014 | Nov 27, 2013 |
| Ubuntu | — | Upgrade php5-cgiUpgrade libapache2-mod-php5Upgrade php5-cli | Nov 8, 2024 | Nov 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub