Логотип exploitDog
bind:"BDU:2022-02631" OR bind:"CVE-2013-6420"
Консоль
Логотип exploitDog

exploitDog

bind:"BDU:2022-02631" OR bind:"CVE-2013-6420"

Количество 12

Количество 12

fstec логотип

BDU:2022-02631

больше 11 лет назад

Уязвимость функции asn1_time_to_time_t (ext/openssl/openssl.c) интерпретатора языка программирования PHP, позволяющая нарушителю выполнить произвольный код

CVSS3: 5.6
EPSS: Средний
ubuntu логотип

CVE-2013-6420

больше 11 лет назад

The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate that is not properly handled by the openssl_x509_parse function.

CVSS2: 7.5
EPSS: Средний
redhat логотип

CVE-2013-6420

больше 11 лет назад

The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate that is not properly handled by the openssl_x509_parse function.

CVSS2: 7.5
EPSS: Средний
nvd логотип

CVE-2013-6420

больше 11 лет назад

The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate that is not properly handled by the openssl_x509_parse function.

CVSS2: 7.5
EPSS: Средний
debian логотип

CVE-2013-6420

больше 11 лет назад

The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP befor ...

CVSS2: 7.5
EPSS: Средний
github логотип

GHSA-m6pq-hhvx-694c

около 3 лет назад

The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate that is not properly handled by the openssl_x509_parse function.

EPSS: Средний
oracle-oval логотип

ELSA-2013-1813

больше 11 лет назад

ELSA-2013-1813: php53 and php security update (CRITICAL)

EPSS: Низкий
oracle-oval логотип

ELSA-2013-1814

больше 11 лет назад

ELSA-2013-1814: php security update (CRITICAL)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2015:1265-1

больше 10 лет назад

Security update for php53

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2015:1018-1

больше 10 лет назад

Security update for php53

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2015:0436-1

больше 10 лет назад

Security update for php53

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2015:0370-1

больше 10 лет назад

Security update for php53

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2022-02631

Уязвимость функции asn1_time_to_time_t (ext/openssl/openssl.c) интерпретатора языка программирования PHP, позволяющая нарушителю выполнить произвольный код

CVSS3: 5.6
48%
Средний
больше 11 лет назад
ubuntu логотип
CVE-2013-6420

The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate that is not properly handled by the openssl_x509_parse function.

CVSS2: 7.5
48%
Средний
больше 11 лет назад
redhat логотип
CVE-2013-6420

The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate that is not properly handled by the openssl_x509_parse function.

CVSS2: 7.5
48%
Средний
больше 11 лет назад
nvd логотип
CVE-2013-6420

The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate that is not properly handled by the openssl_x509_parse function.

CVSS2: 7.5
48%
Средний
больше 11 лет назад
debian логотип
CVE-2013-6420

The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP befor ...

CVSS2: 7.5
48%
Средний
больше 11 лет назад
github логотип
GHSA-m6pq-hhvx-694c

The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate that is not properly handled by the openssl_x509_parse function.

48%
Средний
около 3 лет назад
oracle-oval логотип
ELSA-2013-1813

ELSA-2013-1813: php53 and php security update (CRITICAL)

больше 11 лет назад
oracle-oval логотип
ELSA-2013-1814

ELSA-2013-1814: php security update (CRITICAL)

больше 11 лет назад
suse-cvrf логотип
SUSE-SU-2015:1265-1

Security update for php53

больше 10 лет назад
suse-cvrf логотип
SUSE-SU-2015:1018-1

Security update for php53

больше 10 лет назад
suse-cvrf логотип
SUSE-SU-2015:0436-1

Security update for php53

больше 10 лет назад
suse-cvrf логотип
SUSE-SU-2015:0370-1

Security update for php53

больше 10 лет назад

Уязвимостей на страницу