Vulnerability Bulletins |
DSA-3074 php5 - security update |
|
| Affected software | Debian |
|
Francisco Alonso of Red Hat Product Security found an issue in the fileutility, whose code is embedded in PHP, a general-purpose scriptinglanguage. When checking ELF files, note headers are incorrectlychecked, thus potentially allowing attackers to cause a denial ofservice (out-of-bounds read and application crash) by supplying aspecially crafted ELF file. More info: https://www.debian.org/security/2014/dsa-3074 |
|