CVE

Id
75443  
CVE No.
CVE-2014-8142  
Status
Candidate  
Description
Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys within the serialized properties of an object, a different vulnerability than CVE-2004-1019.  
Phase
Assigned (20141010)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
699640 75443 CVE-2014-8142 CONFIRM:http://git.php.net/?p=php-src.git;a=commit;h=630f9c33c23639de85c3fd306b209b538b73b4c9  View
699641 75443 CVE-2014-8142 CONFIRM:http://php.net/ChangeLog-5.php  View
699642 75443 CVE-2014-8142 CONFIRM:https://bugs.php.net/bug.php?id=68594  View
699643 75443 CVE-2014-8142 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1175718  View
699644 75443 CVE-2014-8142 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
699645 75443 CVE-2014-8142 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html  View
699646 75443 CVE-2014-8142 DEBIAN:DSA-3117  View
699647 75443 CVE-2014-8142 URL:http://www.debian.org/security/2014/dsa-3117  View
699648 75443 CVE-2014-8142 GENTOO:GLSA-201503-03  View
699649 75443 CVE-2014-8142 URL:https://security.gentoo.org/glsa/201503-03  View
699650 75443 CVE-2014-8142 HP:HPSBMU03380  View
699651 75443 CVE-2014-8142 URL:http://marc.info/?l=bugtraq&m=143748090628601&w=2  View
699652 75443 CVE-2014-8142 HP:HPSBMU03409  View
699653 75443 CVE-2014-8142 URL:http://marc.info/?l=bugtraq&m=144050155601375&w=2  View
699654 75443 CVE-2014-8142 HP:HPSBUX03337  View
699655 75443 CVE-2014-8142 URL:http://marc.info/?l=bugtraq&m=143403519711434&w=2  View
699656 75443 CVE-2014-8142 HP:SSRT102066  View
699657 75443 CVE-2014-8142 URL:http://marc.info/?l=bugtraq&m=143403519711434&w=2  View
699658 75443 CVE-2014-8142 REDHAT:RHSA-2015:1135  View
699659 75443 CVE-2014-8142 URL:http://rhn.redhat.com/errata/RHSA-2015-1135.html  View
699660 75443 CVE-2014-8142 REDHAT:RHSA-2015:1053  View
699661 75443 CVE-2014-8142 URL:http://rhn.redhat.com/errata/RHSA-2015-1053.html  View
699662 75443 CVE-2014-8142 REDHAT:RHSA-2015:1066  View
699663 75443 CVE-2014-8142 URL:http://rhn.redhat.com/errata/RHSA-2015-1066.html  View
699664 75443 CVE-2014-8142 SUSE:SUSE-SU-2015:0365  View
699665 75443 CVE-2014-8142 URL:http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html  View
699666 75443 CVE-2014-8142 SUSE:openSUSE-SU-2015:0325  View
699667 75443 CVE-2014-8142 URL:http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html  View
699668 75443 CVE-2014-8142 BID:71791  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
18808 JVNDB-2014-007683 libcurl における CRLF インジェクションの脆弱性 libcurl には、HTTP プロキシを使用する場合、CRLF インジェクションの脆弱性が存在します。 CVE-2014-8150 75443 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007683.html  View