Buffer overflow in PHP - CVE-2014-3668
Published: November 27, 2018
Vulnerability identifier: #VU16097
CSH Severity: Low
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2014-3668
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause DoS condition on the target system.
The vulnerability exists due to buffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc/xmlrpc.c in the XMLRPC extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2. A remote attacker can trigger memory corruption via a crafted first argument to the xmlrpc_set_type function or (2) a crafted argument to the xmlrpc_decode function, related to an out-of-bounds read operation and cause the service to crash.
Affected software
PHP
Gentoo Linux
Amazon Linux AMI
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux EUS Compute Node
Slackware Linux
Fedora
php5 (Ubuntu package)
php
Gentoo Linux
Amazon Linux AMI
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux EUS Compute Node
Slackware Linux
Fedora
php5 (Ubuntu package)
php
How to mitigate CVE-2014-3668
Install updates from vendor's website.
PHP - addressed in versions 5.4.34, 5.5.18, 5.6.2
php5 (Ubuntu package) - addressed in versions 5.3.2-1ubuntu4.28, 5.3.10-1ubuntu3.15
php - update to 5.6.2-1.fc21
php5 (Ubuntu package) - addressed in versions 5.3.2-1ubuntu4.28, 5.3.10-1ubuntu3.15
php - update to 5.6.2-1.fc21