Launchpad CVE tracker

CVE 2014-0237

The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (performance degradation) by triggering many file_printf calls.

Related bugs and status

CVE-2014-0237 (Candidate) is related to these bugs:

Bug #1307027: php5-fpm: Possible privilege escalation due to insecure default permissions of sockets

Summary				In	Importance	Status
	1307027	php5-fpm: Possible privilege escalation due to insecure default permissions of sockets		php5 (Ubuntu)	Undecided	Fix Released
	1307027	php5-fpm: Possible privilege escalation due to insecure default permissions of sockets		php	Unknown	Unknown

Bug #1324826: UPDATE REQUEST: php55u 5.5.13 is available upstream

Summary				In	Importance	Status
	1324826	UPDATE REQUEST: php55u 5.5.13 is available upstream		IUS Community Project	Undecided	Fix Released

Bug #1324827: UPDATE REQUEST: php54 5.4.29 is available upstream

Summary				In	Importance	Status
	1324827	UPDATE REQUEST: php54 5.4.29 is available upstream		IUS Community Project	Undecided	Fix Released

Bug #1411811: Please update php, mysql on ubuntu 15.04

Summary				In	Importance	Status
	1411811	Please update php, mysql on ubuntu 15.04		php5 (Ubuntu)	Undecided	Fix Released
	1411811	Please update php, mysql on ubuntu 15.04		mysql-5.6 (Ubuntu)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2014-0237

References