Back to Database
Status published
Medium
CVE-2014-0237
The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in...
Vulnerability Description
The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (performance degradation) by triggering many file_printf calls.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-0237
Credits & Attribution
No credits recorded in the NVD database.
References
- http://secunia.com/advisories/59329
- https://github.com/file/file/commit/b8acc83781d5a24cc5101e525d15efe0482c280d
- http://secunia.com/advisories/59418
- https://support.apple.com/HT204659
- http://www.securityfocus.com/bid/67759
- http://www-01.ibm.com/support/docview.wss?uid=swg21683486
- http://rhn.redhat.com/errata/RHSA-2014-1766.html
- http://www.debian.org/security/2014/dsa-3021
- http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://secunia.com/advisories/59061
- http://www.php.net/ChangeLog-5.php
- http://secunia.com/advisories/60998
- http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
- http://support.apple.com/kb/HT6443
- http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
- http://rhn.redhat.com/errata/RHSA-2014-1765.html
- https://bugs.php.net/bug.php?id=67328
More from php
View All →CVE-2022-27158
pearweb < 1.32 suffers from Deserialization of Untrusted Data....
Critical
9.8
CVE-2022-27157
pearweb < 1.32 is suffers from a Weak Password Recovery...
Critical
9.8
CVE-2022-26635
PHP-Memcached v2.2.0 and below contains an improper NULL termination which...
Critical
9.8
CVE-2021-32610
In Archive_Tar before 1.4.14, symlinks can refer to targets outside...
High
7.1
CVE-2020-36193
Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory...
Unknown
0
Affected Vendor
Affected Software
php, debian linux
Vulnerable Versions:
0, 5.4.0, 5.5.0, 7.0, 8.0
Timeline
Official Publish:
June 1st, 2014
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.