ID de Prueba:	1.3.6.1.4.1.25623.1.0.805414
Categoría:	Denial of Service
Título:	PHP Out of Bounds Read Vulnerability (Jan 2015)
Resumen:	PHP is prone to an out of bounds read vulnerability.
Descripción:	Summary: PHP is prone to an out of bounds read vulnerability. Vulnerability Insight: An out of bounds read error exists in sapi/cgi/cgi_main.c in the CGI component in PHP. Vulnerability Impact: Successful exploitation will allow remote attackers to obtain sensitive information and trigger unexpected code execution. Affected Software/OS: PHP versions through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4. Solution: Update to version 5.4.37 or 5.5.21 or 5.6.5 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-9427 http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html BugTraq ID: 71833 http://www.securityfocus.com/bid/71833 https://security.gentoo.org/glsa/201503-03 HPdes Security Advisory: HPSBMU03380 http://marc.info/?l=bugtraq&m=143748090628601&w=2 HPdes Security Advisory: HPSBMU03409 http://marc.info/?l=bugtraq&m=144050155601375&w=2 http://www.mandriva.com/security/advisories?name=MDVSA-2015:032 http://openwall.com/lists/oss-security/2014/12/31/6 http://openwall.com/lists/oss-security/2015/01/01/1 http://openwall.com/lists/oss-security/2015/01/03/4 RedHat Security Advisories: RHSA-2015:1053 http://rhn.redhat.com/errata/RHSA-2015-1053.html RedHat Security Advisories: RHSA-2015:1066 http://rhn.redhat.com/errata/RHSA-2015-1066.html SuSE Security Announcement: SUSE-SU-2015:0365 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html SuSE Security Announcement: openSUSE-SU-2015:0325 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.