Fluid Attacks Database

Description

An out of bounds read flaw was found in the way the xmlrpc extension parsed dates in the ISO 8601 format. A specially crafted XML-RPC request or response could possibly cause a PHP application to crash.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel6	php	<0:5.3.3-40.el6_6	0:5.3.3-40.el6_6
rpm rhel7	php	<0:5.4.16-23.el7_0.3	0:5.4.16-23.el7_0.3
rpm rhel5	php53	<0:5.3.3-26.el5_11	0:5.3.3-26.el5_11

Aliases

1. CVE-2014-36682. NVD-2014-36683. OSV-2014-3668

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.