NVD

Id
32102  
Name
CVE-2014-4049  
Description
Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS TXT record, related to the dns_get_record function.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-06-18  
Modified Date
2017-01-06  
Seq
2014-4049  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
168886 32102 CVE-2014-4049 APPLE-SA-2015-04-08-2  View
168887 32102 CVE-2014-4049 SUSE-SU-2014:0868  View
168888 32102 CVE-2014-4049 SUSE-SU-2014:0869  View
168889 32102 CVE-2014-4049 openSUSE-SU-2014:0942  View
168890 32102 CVE-2014-4049 SSRT101681  View
168891 32102 CVE-2014-4049 RHSA-2014:1765  View
168892 32102 CVE-2014-4049 RHSA-2014:1766  View
168893 32102 CVE-2014-4049 59329  View
168894 32102 CVE-2014-4049 59418  View
168895 32102 CVE-2014-4049 59496  View
168896 32102 CVE-2014-4049 59513  View
168897 32102 CVE-2014-4049 60998  View
168898 32102 CVE-2014-4049 http://support.apple.com/kb/HT6443  View
168899 32102 CVE-2014-4049 http://www-01.ibm.com/support/docview.wss?uid=swg21683486  View
168900 32102 CVE-2014-4049 DSA-2961  View
168901 32102 CVE-2014-4049 [oss-security] 20140613 Re: CVE request: PHP heap-based buffer overflow in DNS TXT record parsing  View
168902 32102 CVE-2014-4049 http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html  View
168903 32102 CVE-2014-4049 68007  View
168904 32102 CVE-2014-4049 1030435  View
168905 32102 CVE-2014-4049 https://bugzilla.redhat.com/show_bug.cgi?id=1108447  View
168906 32102 CVE-2014-4049 https://github.com/php/php-src/commit/b34d7849ed90ced9345f8ea1c59bc8d101c18468  View
168907 32102 CVE-2014-4049 https://support.apple.com/HT204659  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14117 JVNDB-2014-002992 PHP の ext/standard/dns.c 内の php_parserr 関数におけるヒープベースのバッファオーバーフローの脆弱性 PHP の ext/standard/dns.c 内の php_parserr 関数には、dns_get_record 関数に関する処理に不備があるため、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2014-4049 71337 CVE-2014-4049 32102 5.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002992.html 2014-06-12 2015-04-13 View