ELSA-2012-1046 Moderate: Oracle Linux php security update

Back to Search

ELSA-2012-1046 Moderate: Oracle Linux php security update

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

Published

09/28/2010

Created

07/25/2018

Added

07/17/2012

Modified

04/11/2019

Description

Integer overflow in the phar_parse_tarfile function in tar.c in the phar extension in PHP before 5.3.14 and 5.4.x before 5.4.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted tar file that triggers a heap-based buffer overflow.

Solution(s)

oracle-linux-upgrade-php
oracle-linux-upgrade-php-bcmath
oracle-linux-upgrade-php-cli
oracle-linux-upgrade-php-common
oracle-linux-upgrade-php-dba
oracle-linux-upgrade-php-devel
oracle-linux-upgrade-php-embedded
oracle-linux-upgrade-php-enchant
oracle-linux-upgrade-php-gd
oracle-linux-upgrade-php-imap
oracle-linux-upgrade-php-intl
oracle-linux-upgrade-php-ldap
oracle-linux-upgrade-php-mbstring
oracle-linux-upgrade-php-mysql
oracle-linux-upgrade-php-odbc
oracle-linux-upgrade-php-pdo
oracle-linux-upgrade-php-pgsql
oracle-linux-upgrade-php-process
oracle-linux-upgrade-php-pspell
oracle-linux-upgrade-php-recode
oracle-linux-upgrade-php-snmp
oracle-linux-upgrade-php-soap
oracle-linux-upgrade-php-tidy
oracle-linux-upgrade-php-xml
oracle-linux-upgrade-php-xmlrpc
oracle-linux-upgrade-php-zts

Related Vulnerabilities

APPLE-SA-2011-03-21-1
APPLE-SA-2011-10-12-3
APPLE-SA-2012-02-01-1
APPLE-SA-2012-05-09-1
APPLE-SA-2012-09-19-2
46365
46843
46967
46969
46970
46975
46977
48259
49241
50907
51193
51830
520827
673343
903934
CVE - 2010-2950
CVE - 2011-0708
CVE - 2011-1148
CVE - 2011-1466
CVE - 2011-1468
CVE - 2011-1469
CVE - 2011-1470
CVE - 2011-1471
CVE - 2011-1938
CVE - 2011-2202
CVE - 2011-2483
CVE - 2011-4153
CVE - 2011-4566
CVE - 2011-4885
CVE - 2012-0057
CVE - 2012-0781
CVE - 2012-0789
CVE - 2012-0830
CVE - 2012-1172
CVE - 2012-1823
CVE - 2012-2143
CVE - 2012-2336
CVE - 2012-2386
DSA-2266
DSA-2340
DSA-2399
DSA-2403
DSA-2465
DSA-2491
RHSA-2011:1377
RHSA-2011:1378
RHSA-2011:1423
RHSA-2012:0019
RHSA-2012:0071
RHSA-2012:0092
RHSA-2012:0546
RHSA-2012:0547
RHSA-2012:0568
RHSA-2012:0569
RHSA-2012:0570
RHSA-2012:1037
SUSE-SA:2011:035
http://oss.oracle.com/pipermail/el-errata/2012-June/002894.html
66080
67606
67999
69319
71612
72021
72908
72911

View ifre

References

oracle-linux-upgrade-php
oracle-linux-upgrade-php-bcmath
oracle-linux-upgrade-php-cli
oracle-linux-upgrade-php-common
oracle-linux-upgrade-php-dba
oracle-linux-upgrade-php-devel
oracle-linux-upgrade-php-embedded
oracle-linux-upgrade-php-enchant
oracle-linux-upgrade-php-gd
oracle-linux-upgrade-php-imap
oracle-linux-upgrade-php-intl
oracle-linux-upgrade-php-ldap
oracle-linux-upgrade-php-mbstring
oracle-linux-upgrade-php-mysql
oracle-linux-upgrade-php-odbc
oracle-linux-upgrade-php-pdo
oracle-linux-upgrade-php-pgsql
oracle-linux-upgrade-php-process
oracle-linux-upgrade-php-pspell
oracle-linux-upgrade-php-recode
oracle-linux-upgrade-php-snmp
oracle-linux-upgrade-php-soap
oracle-linux-upgrade-php-tidy
oracle-linux-upgrade-php-xml
oracle-linux-upgrade-php-xmlrpc
oracle-linux-upgrade-php-zts

Advanced vulnerability management analytics and reporting.

Key Features

Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;

Rapid7 VulnDB

ELSA-2012-1046 Moderate: Oracle Linux php security update