php5: three vulnerabilities
| Package(s): | php5 | CVE #(s): | CVE-2013-7456 CVE-2015-8876 CVE-2016-5114 | ||||||||||||||||||||||||||||||||||||||||
| Created: | June 13, 2016 | Updated: | June 15, 2016 | ||||||||||||||||||||||||||||||||||||||||
| Description: | From the openSUSE advisory:
- CVE-2013-7456: imagescale out-of-bounds read (bnc#982009). - CVE-2015-8876: Zend/zend_exceptions.c in PHP did not validate certain Exception objects, which allowed remote attackers to cause a denial of service (NULL pointer dereference and application crash) or trigger unintended method execution via crafted serialized data (bsc#981049). - CVE-2016-5114: fpm_log.c memory leak and buffer overflow (bnc#982162). | ||||||||||||||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||||||||||||||