NVD

Id
31819  
Name
CVE-2014-3668  
Description
Buffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc/xmlrpc.c in the XMLRPC extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to cause a denial of service (application crash) via (1) a crafted first argument to the xmlrpc_set_type function or (2) a crafted argument to the xmlrpc_decode function, related to an out-of-bounds read operation.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-10-29  
Modified Date
2016-10-17  
Seq
2014-3668  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
167710 31819 CVE-2014-3668 http://git.php.net/?p=php-src.git;a=commit;h=88412772d295ebf7dd34409534507dc9bcac726e  View
167711 31819 CVE-2014-3668 http://linux.oracle.com/errata/ELSA-2014-1767.html  View
167712 31819 CVE-2014-3668 http://linux.oracle.com/errata/ELSA-2014-1768.html  View
167713 31819 CVE-2014-3668 APPLE-SA-2015-04-08-2  View
167714 31819 CVE-2014-3668 openSUSE-SU-2014:1377  View
167715 31819 CVE-2014-3668 openSUSE-SU-2014:1391  View
167716 31819 CVE-2014-3668 openSUSE-SU-2015:0014  View
167717 31819 CVE-2014-3668 http://php.net/ChangeLog-5.php  View
167718 31819 CVE-2014-3668 RHSA-2014:1765  View
167719 31819 CVE-2014-3668 RHSA-2014:1766  View
167720 31819 CVE-2014-3668 RHSA-2014:1767  View
167721 31819 CVE-2014-3668 RHSA-2014:1768  View
167722 31819 CVE-2014-3668 DSA-3064  View
167723 31819 CVE-2014-3668 http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html  View
167724 31819 CVE-2014-3668 70666  View
167725 31819 CVE-2014-3668 USN-2391-1  View
167726 31819 CVE-2014-3668 https://bugs.php.net/bug.php?id=68027  View
167727 31819 CVE-2014-3668 https://bugzilla.redhat.com/show_bug.cgi?id=1154503  View
167728 31819 CVE-2014-3668 https://support.apple.com/HT204659  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16239 JVNDB-2014-005114 PHP の XMLRPC エクステンションにおけるバッファオーバーフローの脆弱性 PHP の XMLRPC エクステンションの libxmlrpc/xmlrpc.c の mkgmtime の実装の date_from_ISO8601 関数には、out-of-bounds read の操作に関する処理に不備があるため、バッファオーバーフローの脆弱性が存在します。 CVE-2014-3668 70956 CVE-2014-3668 31819 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005114.html 2014-10-16 2015-04-13 View