NVD

Id
31854  
Name
CVE-2014-3710  
Description
The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-11-05  
Modified Date
2016-12-06  
Seq
2014-3710  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
167987 31854 CVE-2014-3710 http://git.php.net/?p=php-src.git;a=commit;h=1803228597e82218a8c105e67975bc50e6f5bf0d  View
167988 31854 CVE-2014-3710 http://linux.oracle.com/errata/ELSA-2014-1767.html  View
167989 31854 CVE-2014-3710 http://linux.oracle.com/errata/ELSA-2014-1768.html  View
167990 31854 CVE-2014-3710 APPLE-SA-2015-04-08-2  View
167991 31854 CVE-2014-3710 openSUSE-SU-2014:1516  View
167992 31854 CVE-2014-3710 RHSA-2014:1765  View
167993 31854 CVE-2014-3710 RHSA-2014:1766  View
167994 31854 CVE-2014-3710 RHSA-2014:1767  View
167995 31854 CVE-2014-3710 RHSA-2014:1768  View
167996 31854 CVE-2014-3710 DSA-3072  View
167997 31854 CVE-2014-3710 http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html  View
167998 31854 CVE-2014-3710 http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html  View
167999 31854 CVE-2014-3710 http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
168000 31854 CVE-2014-3710 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
168001 31854 CVE-2014-3710 70807  View
168002 31854 CVE-2014-3710 1031344  View
168003 31854 CVE-2014-3710 USN-2391-1  View
168004 31854 CVE-2014-3710 USN-2494-1  View
168005 31854 CVE-2014-3710 https://bugs.php.net/bug.php?id=68283  View
168006 31854 CVE-2014-3710 https://bugzilla.redhat.com/show_bug.cgi?id=1155071  View
168007 31854 CVE-2014-3710 https://github.com/file/file/commit/39c7ac1106be844a5296d3eb5971946cc09ffda0  View
168008 31854 CVE-2014-3710 GLSA-201503-03  View
168009 31854 CVE-2014-3710 https://support.apple.com/HT204659  View
168010 31854 CVE-2014-3710 FreeBSD-SA-14:28  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16356 JVNDB-2014-005231 PHP の Fileinfo コンポーネントで使用される readelf.c ファイル内の donote 関数におけるサービス運用妨害 (DoS) の脆弱性 PHP の Fileinfo コンポーネントで使用される readelf.c ファイル内の donote 関数は、十分な note ヘッダが存在しているかを確認しないため、サービス運用妨害 (out-of-bounds read およびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-3710 70998 CVE-2014-3710 31854 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005231.html 2014-10-17 2015-07-30 View