Количество 17
Количество 17

BDU:2022-02530
Уязвимость функции phar_parse_tarfile интерпретатора языка программирования PHP, позволяющая нарушителю вызвать отказ в обслуживании

CVE-2015-4021
The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that the first character of a filename is different from the \0 character, which allows remote attackers to cause a denial of service (integer underflow and memory corruption) via a crafted entry in a tar archive.

CVE-2015-4021
The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that the first character of a filename is different from the \0 character, which allows remote attackers to cause a denial of service (integer underflow and memory corruption) via a crafted entry in a tar archive.

CVE-2015-4021
The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that the first character of a filename is different from the \0 character, which allows remote attackers to cause a denial of service (integer underflow and memory corruption) via a crafted entry in a tar archive.
CVE-2015-4021
The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41 ...
GHSA-42r5-64j2-gjmp
The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that the first character of a filename is different from the \0 character, which allows remote attackers to cause a denial of service (integer underflow and memory corruption) via a crafted entry in a tar archive.
ELSA-2015-1219
ELSA-2015-1219: php54-php security update (MODERATE)

SUSE-SU-2015:1253-2
Security update for php5

SUSE-SU-2015:1253-1
Security update for php5
ELSA-2015-1186
ELSA-2015-1186: php55-php security update (IMPORTANT)
ELSA-2015-1218
ELSA-2015-1218: php security update (MODERATE)
ELSA-2015-1135
ELSA-2015-1135: php security and bug fix update (IMPORTANT)

SUSE-SU-2015:1265-1
Security update for php53

SUSE-SU-2015:1018-1
Security update for php53

SUSE-SU-2015:0436-1
Security update for php53

SUSE-SU-2015:0370-1
Security update for php53

SUSE-SU-2016:1638-1
Security update for php53
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
---|---|---|---|---|
![]() | BDU:2022-02530 Уязвимость функции phar_parse_tarfile интерпретатора языка программирования PHP, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 4 | 42% Средний | около 10 лет назад |
![]() | CVE-2015-4021 The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that the first character of a filename is different from the \0 character, which allows remote attackers to cause a denial of service (integer underflow and memory corruption) via a crafted entry in a tar archive. | CVSS2: 5 | 42% Средний | около 10 лет назад |
![]() | CVE-2015-4021 The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that the first character of a filename is different from the \0 character, which allows remote attackers to cause a denial of service (integer underflow and memory corruption) via a crafted entry in a tar archive. | CVSS2: 5.1 | 42% Средний | около 10 лет назад |
![]() | CVE-2015-4021 The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that the first character of a filename is different from the \0 character, which allows remote attackers to cause a denial of service (integer underflow and memory corruption) via a crafted entry in a tar archive. | CVSS2: 5 | 42% Средний | около 10 лет назад |
CVE-2015-4021 The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41 ... | CVSS2: 5 | 42% Средний | около 10 лет назад | |
GHSA-42r5-64j2-gjmp The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that the first character of a filename is different from the \0 character, which allows remote attackers to cause a denial of service (integer underflow and memory corruption) via a crafted entry in a tar archive. | 42% Средний | около 3 лет назад | ||
ELSA-2015-1219 ELSA-2015-1219: php54-php security update (MODERATE) | больше 9 лет назад | |||
![]() | SUSE-SU-2015:1253-2 Security update for php5 | почти 10 лет назад | ||
![]() | SUSE-SU-2015:1253-1 Security update for php5 | почти 10 лет назад | ||
ELSA-2015-1186 ELSA-2015-1186: php55-php security update (IMPORTANT) | больше 9 лет назад | |||
ELSA-2015-1218 ELSA-2015-1218: php security update (MODERATE) | почти 10 лет назад | |||
ELSA-2015-1135 ELSA-2015-1135: php security and bug fix update (IMPORTANT) | почти 10 лет назад | |||
![]() | SUSE-SU-2015:1265-1 Security update for php53 | больше 10 лет назад | ||
![]() | SUSE-SU-2015:1018-1 Security update for php53 | больше 10 лет назад | ||
![]() | SUSE-SU-2015:0436-1 Security update for php53 | больше 10 лет назад | ||
![]() | SUSE-SU-2015:0370-1 Security update for php53 | больше 10 лет назад | ||
![]() | SUSE-SU-2016:1638-1 Security update for php53 | почти 9 лет назад |
Уязвимостей на страницу