Test Kennung:	1.3.6.1.4.1.25623.1.0.805414
Kategorie:	Denial of Service
Titel:	PHP Out of Bounds Read Vulnerability (Jan 2015)
Zusammenfassung:	PHP is prone to an out of bounds read vulnerability.
Beschreibung:	Summary: PHP is prone to an out of bounds read vulnerability. Vulnerability Insight: An out of bounds read error exists in sapi/cgi/cgi_main.c in the CGI component in PHP. Vulnerability Impact: Successful exploitation will allow remote attackers to obtain sensitive information and trigger unexpected code execution. Affected Software/OS: PHP versions through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4. Solution: Update to version 5.4.37 or 5.5.21 or 5.6.5 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2014-9427 http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html BugTraq ID: 71833 http://www.securityfocus.com/bid/71833 https://security.gentoo.org/glsa/201503-03 HPdes Security Advisory: HPSBMU03380 http://marc.info/?l=bugtraq&m=143748090628601&w=2 HPdes Security Advisory: HPSBMU03409 http://marc.info/?l=bugtraq&m=144050155601375&w=2 http://www.mandriva.com/security/advisories?name=MDVSA-2015:032 http://openwall.com/lists/oss-security/2014/12/31/6 http://openwall.com/lists/oss-security/2015/01/01/1 http://openwall.com/lists/oss-security/2015/01/03/4 RedHat Security Advisories: RHSA-2015:1053 http://rhn.redhat.com/errata/RHSA-2015-1053.html RedHat Security Advisories: RHSA-2015:1066 http://rhn.redhat.com/errata/RHSA-2015-1066.html SuSE Security Announcement: SUSE-SU-2015:0365 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html SuSE Security Announcement: openSUSE-SU-2015:0325 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.