The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite loop or out-of-bounds memory access) via a vector that (1) has zero length or (2) is too long.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade php | Aug 30, 2017 | Jun 1, 2014 |
| Apple Osx Adminframework | — | Upgrade macOS to the latest versionApply OS X security update 2015-004 | Aug 28, 2015 | Jun 1, 2014 |
| Apple Osx Apachemodphp | — | Upgrade macOS to the latest version | Sep 22, 2014 | Jun 1, 2014 |
| Apple Osx Note | — | Upgrade macOS to the latest versionApply OS X security update 2014-004 | Aug 28, 2015 | Jun 1, 2014 |
| Apple Osx Php | — | Upgrade macOS to the latest versionApply OS X security update 2015-004 | Mar 29, 2016 | Jun 1, 2014 |
| Centos_linux | — | Upgrade php-cliUpgrade php-snmpUpgrade php-mysqlndUpgrade php-commonUpgrade php53-soapUpgrade php53-intlUpgrade php-odbcUpgrade php53-mysqlUpgrade php-mysqlUpgrade php53-cliUpgrade php53-develUpgrade php53-ldapUpgrade php53-bcmathUpgrade php-xmlUpgrade php-recodeUpgrade php-mbstringUpgrade php-intlUpgrade php-xmlrpcUpgrade php-tidyUpgrade php-processUpgrade php53-pgsqlUpgrade php-imapUpgrade php53-xmlrpcUpgrade php53-processUpgrade php53-imapUpgrade php-dbaUpgrade php-soapUpgrade php-pspellUpgrade php-gdUpgrade php53-odbcUpgrade phpUpgrade php53-mbstringUpgrade php-develUpgrade php-embeddedUpgrade php-bcmathUpgrade php-enchantUpgrade php53-pspellUpgrade php-pdoUpgrade php53-gdUpgrade php53-snmpUpgrade php-pgsqlUpgrade php53Upgrade php-ztsUpgrade php53-commonUpgrade php53-dbaUpgrade php53-xmlUpgrade php-ldapUpgrade php53-pdoUpgrade php-fpm | Dec 1, 2016 | Jun 1, 2014 |
| Debian | — | Upgrade fileUpgrade php5 | Jul 30, 2024 | Jun 1, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 16, 2015 |
| Freebsd | — | Upgrade php53 | Dec 10, 2025 | Aug 18, 2014 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Jun 1, 2014 |
| Oracle Solaris | — | Upgrade web/php-53/extension/php-zendopcache to version 7.0.2-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-pear to version 5.3.29-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-pear to version 5.2.17-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52 to version 5.2.17-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-tcpwrap to version 1.1.3-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-idn to version 0.2.0-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-apc to version 3.0.19-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-tcpwrap to version 1.1.3-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-apc to version 3.1.9-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-mysql to version 5.3.29-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-memcache to version 2.2.5-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-xdebug to version 2.2.0-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53 to version 5.3.29-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-idn to version 0.2.0-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-common to version 11.1-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/server/apache-22/module/apache-php53 to version 5.3.29-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-suhosin to version 0.9.33-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-suhosin to version 0.9.29-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-xdebug to version 2.0.5-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-memcache to version 3.0.6-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/server/apache-22/module/apache-php52 to version 5.2.17-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-mysql to version 5.2.17-0.175.2.8.0.3.0 on Solaris 11.2 | May 29, 2017 | Jun 1, 2014 |
| Oracle_linux | — | Upgrade fileUpgrade file-libsUpgrade file-staticUpgrade file-develUpgrade python-magic | Oct 16, 2024 | Jun 1, 2014 |
| Php | — | Upgrade to PHP version 5.5.13Upgrade to PHP version 5.4.29 | Jun 5, 2014 | Jun 1, 2014 |
| Suse | — | Upgrade php53-pspellUpgrade php7-calendarUpgrade php5-suhosinUpgrade php7-fastcgiUpgrade php5-sysvshmUpgrade php5-exifUpgrade php7-sysvshmUpgrade php7-fileinfoUpgrade php5-intlUpgrade php53-snmpUpgrade php53-jsonUpgrade php7-bcmathUpgrade php53-develUpgrade php7-develUpgrade php53-intlUpgrade php53-zlibUpgrade php53-dbaUpgrade php7-odbcUpgrade php7-socketsUpgrade php5-ldapUpgrade php5-enchantUpgrade php53Upgrade php7-mcryptUpgrade php53-tokenizerUpgrade php5-odbcUpgrade php53-domUpgrade php5-pspellUpgrade php7-opcacheUpgrade php7-sysvsemUpgrade php53-opensslUpgrade php7-snmpUpgrade php7-pear-archive_tarUpgrade php7-mysqlUpgrade php5-fileinfoUpgrade php7-pspellUpgrade php7-zlibUpgrade php53-bcmathUpgrade php5-dbaUpgrade php7-ctypeUpgrade php7-xmlwriterUpgrade php53-exifUpgrade php72-develUpgrade php53-ctypeUpgrade php53-mysqlUpgrade php53-pgsqlUpgrade php5-iconvUpgrade php53-xmlrpcUpgrade php5-tokenizerUpgrade php5-curlUpgrade php53-fastcgiUpgrade php7-zipUpgrade php53-pcntlUpgrade php5-sqliteUpgrade php53-xmlwriterUpgrade php53-bz2Upgrade php53-xslUpgrade php7-wddxUpgrade php7-shmopUpgrade php5-shmopUpgrade php7-ldapUpgrade php7-enchantUpgrade apache2-mod_php53Upgrade php53-pearUpgrade php5-zlibUpgrade php53-gmpUpgrade php5-fpmUpgrade php7-sqliteUpgrade php5-gdUpgrade php5-pgsqlUpgrade php5-domUpgrade php5-mbstringUpgrade php7-pearUpgrade php5-ctypeUpgrade php53-ftpUpgrade php53-odbcUpgrade php5-mcryptUpgrade php5-snmpUpgrade php5-opensslUpgrade php5-pdoUpgrade php53-sqliteUpgrade apache2-mod_php5Upgrade php53-gdUpgrade php5-wddxUpgrade php53-imapUpgrade apache2-mod_php7Upgrade php7-pgsqlUpgrade php5-gmpUpgrade php5-gettextUpgrade php7-gdUpgrade php53-tidyUpgrade php5-zipUpgrade php7-xmlreaderUpgrade php53-sysvsemUpgrade php5-sysvsemUpgrade php53-wddxUpgrade php7-posixUpgrade php7-exifUpgrade php7-sysvmsgUpgrade php53-calendarUpgrade php5-pearUpgrade php5-bcmathUpgrade php7Upgrade php53-mbstringUpgrade php53-gettextUpgrade php7-pcntlUpgrade php7-iconvUpgrade php5-xmlrpcUpgrade php5-xmlreaderUpgrade php5-fastcgiUpgrade php53-pdoUpgrade php53-xmlreaderUpgrade php53-zipUpgrade php5-socketsUpgrade php5-sysvmsgUpgrade php7-fpmUpgrade php5-mysqlUpgrade php5-soapUpgrade php7-xmlrpcUpgrade php7-curlUpgrade php53-fileinfoUpgrade php53-socketsUpgrade php5-pcntlUpgrade php53-posixUpgrade php53-ldapUpgrade php5Upgrade php7-opensslUpgrade php53-curlUpgrade php5-develUpgrade php7-mbstringUpgrade php53-suhosinUpgrade php7-jsonUpgrade php5-xmlwriterUpgrade php7-pdoUpgrade php53-iconvUpgrade php7-ftpUpgrade php7-imapUpgrade php7-gmpUpgrade php7-domUpgrade php5-jsonUpgrade php7-bz2Upgrade php5-ftpUpgrade php53-soapUpgrade php5-bz2Upgrade php5-xslUpgrade php7-tokenizerUpgrade php53-shmopUpgrade php53-sysvmsgUpgrade php7-intlUpgrade php5-calendarUpgrade php7-gettextUpgrade php7-pharUpgrade php7-xslUpgrade php7-soapUpgrade php7-dbaUpgrade php53-mcryptUpgrade php53-readlineUpgrade php53-sysvshm | Dec 18, 2015 | Jun 1, 2014 |
| Ubuntu | — | Upgrade php5-fpmUpgrade php5-cliUpgrade php5-cgiUpgrade libapache2-mod-php5 | Nov 8, 2024 | Jun 1, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub