Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-4049

Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS TXT record, related to the dns_get_record function.

Published

2014-06-18T19:55:05.683

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.1 (MEDIUM)

CVSSv2 Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: HIGH
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

4.9

Impact Score

6.4

Weaknesses

Type: Primary
CWE-119

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	opensuse	opensuse	11.3	Yes
Application	php	php	< 5.3.29	Yes
Application	php	php	< 5.4.30	Yes
Application	php	php	< 5.5.14	Yes
Application	php	php	5.6.0	Yes
Application	php	php	5.6.0	Yes
Application	php	php	5.6.0	Yes
Application	php	php	5.6.0	Yes
Application	php	php	5.6.0	Yes
Application	php	php	5.6.0	Yes
Application	php	php	5.6.0	Yes
Application	php	php	5.6.0	Yes
Operating System	debian	debian_linux	7.0	Yes
Operating System	debian	debian_linux	8.0	Yes

References

http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00001.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-updates/2014-06/msg00051.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-updates/2014-07/msg00032.html Mailing List, Third Party Advisory ([email protected])
http://marc.info/?l=bugtraq&m=141017844705317&w=2 Mailing List, Third Party Advisory ([email protected])
http://marc.info/?l=bugtraq&m=141017844705317&w=2 Mailing List, Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2014-1765.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2014-1766.html Third Party Advisory ([email protected])
http://secunia.com/advisories/59270 Third Party Advisory ([email protected])
http://secunia.com/advisories/59329 Third Party Advisory ([email protected])
http://secunia.com/advisories/59418 Third Party Advisory ([email protected])
http://secunia.com/advisories/59496 Third Party Advisory ([email protected])
http://secunia.com/advisories/59513 Third Party Advisory ([email protected])
http://secunia.com/advisories/59652 Third Party Advisory ([email protected])
http://secunia.com/advisories/60998 Third Party Advisory ([email protected])
http://support.apple.com/kb/HT6443 Third Party Advisory ([email protected])
http://www-01.ibm.com/support/docview.wss?uid=swg21683486 Third Party Advisory ([email protected])
http://www.debian.org/security/2014/dsa-2961 Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2014/06/13/4 Mailing List, Third Party Advisory ([email protected])
http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html Third Party Advisory ([email protected])
http://www.securityfocus.com/bid/68007 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1030435 Third Party Advisory, VDB Entry ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=1108447 Issue Tracking ([email protected])
https://github.com/php/php-src/commit/b34d7849ed90ced9345f8ea1c59bc8d101c18468 Patch, Third Party Advisory ([email protected])
https://support.apple.com/HT204659 Third Party Advisory ([email protected])
http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00001.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-updates/2014-06/msg00051.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-updates/2014-07/msg00032.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=141017844705317&w=2 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=141017844705317&w=2 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2014-1765.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2014-1766.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/59270 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/59329 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/59418 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/59496 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/59513 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/59652 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/60998 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://support.apple.com/kb/HT6443 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www-01.ibm.com/support/docview.wss?uid=swg21683486 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2014/dsa-2961 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2014/06/13/4 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/68007 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1030435 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=1108447 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/php/php-src/commit/b34d7849ed90ced9345f8ea1c59bc8d101c18468 Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT204659 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)