The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys within the serialized properties of an object, a different vulnerability than CVE-2004-1019.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade php-xmlrpcUpgrade php-dbaUpgrade php-develUpgrade php-pgsqlUpgrade php-commonUpgrade php-mysqlUpgrade php-odbcUpgrade php-pspellUpgrade php-soapUpgrade php-pdoUpgrade php-mbstringUpgrade php-fpmUpgrade php-recodeUpgrade php-intlUpgrade php-gdUpgrade php-ldapUpgrade php-snmpUpgrade php-processUpgrade php-bcmathUpgrade php-mysqlndUpgrade phpUpgrade php-enchantUpgrade php-cliUpgrade php-embeddedUpgrade php-xml | Dec 1, 2016 | Dec 20, 2014 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Dec 20, 2014 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Dec 20, 2014 |
| Hpux | — | Update hpuxws22APCH32.MOD_JK2 to the latest versionUpdate hpuxws22APCH32.MOD_JK to the latest versionUpdate hpuxws22APACHE.APACHE to the latest versionUpdate hpuxws22APACHE.PHP to the latest versionUpdate hpuxws22APACHE.WEBPROXY2 to the latest versionUpdate hpuxws22APCH32.AUTH_LDAP to the latest versionUpdate hpuxws22APACHE.MOD_PERL to the latest versionUpdate hpuxws22APCH32.APACHE2 to the latest versionUpdate hpuxws22APCH32.AUTH_LDAP2 to the latest versionUpdate hpuxws22APCH32.MOD_PERL to the latest versionUpdate hpuxws22APACHE.AUTH_LDAP2 to the latest versionUpdate hpuxws22TOMCAT.TOMCAT to the latest versionUpdate hpuxws22APCH32.MOD_PERL2 to the latest versionUpdate hpuxws22APACHE.MOD_PERL2 to the latest versionUpdate hpuxws22APCH32.APACHE to the latest versionUpdate hpuxws22APACHE.WEBPROXY to the latest versionUpdate hpuxws22APCH32.WEBPROXY2 to the latest versionUpdate hpuxws22APCH32.WEBPROXY to the latest versionUpdate hpuxws22APCH32.PHP2 to the latest versionUpdate hpuxws22APACHE.APACHE2 to the latest versionUpdate hpuxws22APCH32.PHP to the latest versionUpdate hpuxws22APACHE.PHP2 to the latest versionUpdate hpuxws22APACHE.MOD_JK to the latest versionUpdate hpuxws22APACHE.MOD_JK2 to the latest versionUpdate hpuxws22APACHE.AUTH_LDAP to the latest version | Aug 11, 2017 | Dec 20, 2014 |
| Oracle Solaris | — | Upgrade web/php-52/extension/php-tcpwrap to version 1.1.3-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52 to version 5.2.17-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-idn to version 0.2.0-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-memcache to version 3.0.6-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-apc to version 3.1.9-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-idn to version 0.2.0-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-mysql to version 5.2.17-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-xdebug to version 2.2.0-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-common to version 11.1-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-suhosin to version 0.9.33-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-apc to version 3.0.19-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/server/apache-22/module/apache-php53 to version 5.3.29-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-xdebug to version 2.0.5-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-mysql to version 5.3.29-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-tcpwrap to version 1.1.3-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53 to version 5.3.29-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-pear to version 5.3.29-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-suhosin to version 0.9.29-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-zendopcache to version 7.0.2-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-pear to version 5.2.17-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/server/apache-22/module/apache-php52 to version 5.2.17-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-memcache to version 2.2.5-0.175.2.8.0.3.0 on Solaris 11.2 | May 29, 2017 | Dec 20, 2014 |
| Oracle_linux | — | Upgrade php-ldapUpgrade php54-php-ldapUpgrade php55-php-xmlUpgrade php55-php-imapUpgrade php54-php-mbstringUpgrade php-bcmathUpgrade php55-php-pgsqlUpgrade php55-php-mbstringUpgrade php-pgsqlUpgrade php-mysqlndUpgrade php54-php-dbaUpgrade php55-php-intlUpgrade php-enchantUpgrade php54-php-imapUpgrade php-commonUpgrade php-dbaUpgrade php54-php-fpmUpgrade php55-php-gdUpgrade php-cliUpgrade php-odbcUpgrade php54-php-pdoUpgrade php54-php-odbcUpgrade php55-php-pspellUpgrade php-snmpUpgrade php55-php-recodeUpgrade php54-php-mysqlndUpgrade php54-php-soapUpgrade php54-php-processUpgrade php55-php-soapUpgrade php-intlUpgrade php-soapUpgrade php55-php-gmpUpgrade php54-php-enchantUpgrade phpUpgrade php55Upgrade php54-php-gdUpgrade php-recodeUpgrade php54-scldevelUpgrade php-embeddedUpgrade php54-php-pecl-zendopcacheUpgrade php55-php-odbcUpgrade php55-runtimeUpgrade php54-php-commonUpgrade php55-php-enchantUpgrade php54-php-tidyUpgrade php55-php-pdoUpgrade php-xmlrpcUpgrade php-develUpgrade php54-php-xmlUpgrade php54-php-intlUpgrade php55-php-tidyUpgrade php55-php-cliUpgrade php55-php-opcacheUpgrade php55-phpUpgrade php55-php-fpmUpgrade php55-php-dbaUpgrade php55-php-processUpgrade php-pdoUpgrade php54-php-pspellUpgrade php55-php-xmlrpcUpgrade php54-php-pgsqlUpgrade php54Upgrade php-processUpgrade php55-php-ldapUpgrade php55-php-commonUpgrade php54-runtimeUpgrade php55-php-mysqlndUpgrade php-fpmUpgrade php-pspellUpgrade php54-php-bcmathUpgrade php54-php-snmpUpgrade php-gdUpgrade php54-phpUpgrade php-xmlUpgrade php55-php-bcmathUpgrade php-mysqlUpgrade php55-scldevelUpgrade php54-php-recodeUpgrade php54-php-cliUpgrade php55-php-snmpUpgrade php54-php-develUpgrade php-mbstringUpgrade php54-php-xmlrpcUpgrade php55-php-devel | Oct 16, 2024 | Dec 20, 2014 |
| Php | — | Upgrade to PHP version 5.5.20Upgrade to PHP version 5.6.4Upgrade to PHP version 5.4.36 | Jan 12, 2015 | Dec 20, 2014 |
| Suse | — | Upgrade php5-pcntlUpgrade php53-sqliteUpgrade php53-opensslUpgrade php5-curlUpgrade php5-pgsqlUpgrade php53-intlUpgrade php53-domUpgrade php53-jsonUpgrade php53-tokenizerUpgrade php5-calendarUpgrade php5-enchantUpgrade php53-dbaUpgrade php5-fpmUpgrade php5-develUpgrade php53-ldapUpgrade php5-intlUpgrade php5-tokenizerUpgrade php53-ctypeUpgrade php5-shmopUpgrade apache2-mod_php53Upgrade php5-odbcUpgrade php53-develUpgrade php5-soapUpgrade php53-xslUpgrade php53-pearUpgrade php53-mcryptUpgrade php53-snmpUpgrade php5-pspellUpgrade php5-gdUpgrade php5-fileinfoUpgrade php5-pearUpgrade php5-sysvmsgUpgrade php5-sqliteUpgrade php53-xmlrpcUpgrade php5-socketsUpgrade php5-bz2Upgrade php5-zlibUpgrade php53-zlibUpgrade php5-sysvshmUpgrade php53-exifUpgrade php5-dbaUpgrade php5-ctypeUpgrade php5-bcmathUpgrade php53-fileinfoUpgrade php5-ldapUpgrade php5-suhosinUpgrade php53-mysqlUpgrade php5Upgrade php53-xmlwriterUpgrade php5-exifUpgrade php53-pgsqlUpgrade php5-mbstringUpgrade php5-gettextUpgrade php53-gettextUpgrade php5-snmpUpgrade php53-fastcgiUpgrade php5-gmpUpgrade php53-zipUpgrade php53-imapUpgrade php5-zipUpgrade php53Upgrade php5-ftpUpgrade php53-shmopUpgrade php53-sysvshmUpgrade php53-sysvsemUpgrade php53-wddxUpgrade php5-fastcgiUpgrade php5-jsonUpgrade php5-domUpgrade php53-sysvmsgUpgrade php5-xslUpgrade php5-iconvUpgrade php53-tidyUpgrade php5-xmlwriterUpgrade php5-opensslUpgrade php53-socketsUpgrade php53-mbstringUpgrade php5-mcryptUpgrade php53-curlUpgrade php53-ftpUpgrade php5-xmlrpcUpgrade php53-posixUpgrade php5-wddxUpgrade php53-odbcUpgrade php53-pspellUpgrade php5-sysvsemUpgrade php53-soapUpgrade php5-pdoUpgrade php53-iconvUpgrade php53-readlineUpgrade php53-xmlreaderUpgrade php53-pcntlUpgrade php53-suhosinUpgrade php53-pdoUpgrade php53-calendarUpgrade php5-xmlreaderUpgrade php53-gdUpgrade php5-mysqlUpgrade php53-bcmathUpgrade php53-gmpUpgrade apache2-mod_php5Upgrade php53-bz2 | Dec 18, 2015 | Dec 20, 2014 |
| Ubuntu | — | Upgrade php5-cliUpgrade libapache2-mod-php5Upgrade php5-cgiUpgrade php5-fpmUpgrade php5-pgsql | Nov 8, 2024 | Dec 20, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub