php: remote code execution [LWN.net]

Package(s):

php5

CVE #(s):

CVE-2012-0830

Created:

February 3, 2012

Updated:

July 2, 2012

Description:

PHP 5.3.9 contained a security update to prevent denial of service (DoS) attacks using hash collisions. Mistakes in the implementation allow hackers to inject and execute code. This has been fixed in PHP 5.3.10. See this article for details.

Alerts:

Debian	DSA-2403-1	2012-02-02
Red Hat	RHSA-2012:0092-01	2012-02-02
Red Hat	RHSA-2012:0093-01	2012-02-02
CentOS	CESA-2012:0093	2012-02-03
CentOS	CESA-2012:0093	2012-02-03
CentOS	CESA-2012:0093	2012-02-03
CentOS	CESA-2012:0092	2012-02-03
Scientific Linux	SL-php5-20120203	2012-02-03
Scientific Linux	SL-php-20120203	2012-02-03
Oracle	ELSA-2012-0093	2012-02-03
Oracle	ELSA-2012-0093	2012-02-03
Oracle	ELSA-2012-0093	2012-02-03
Oracle	ELSA-2012-0092	2012-02-03
Debian	DSA-2403-2	2012-02-06
Fedora	FEDORA-2012-1262	2012-02-08
Fedora	FEDORA-2012-1262	2012-02-08
Fedora	FEDORA-2012-1262	2012-02-08
Ubuntu	USN-1358-1	2012-02-09
Slackware	SSA:2012-041-02	2012-02-10
Fedora	FEDORA-2012-1301	2012-02-14
Fedora	FEDORA-2012-1301	2012-02-14
Fedora	FEDORA-2012-1301	2012-02-14
SUSE	SUSE-SU-2012:0411-1	2012-03-24
openSUSE	openSUSE-SU-2012:0426-1	2012-03-29
SUSE	SUSE-SU-2012:0496-1	2012-04-12
Mandriva	MDVSA-2012:065	2012-04-27
Mandriva	MDVSA-2012:071	2012-05-10
Oracle	ELSA-2012-1046	2012-06-30
Gentoo	201209-03	2012-09-23

(Log in to post comments)