CVE-2004-1019
Fixed in a distro release EPSS 8%
The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative reference index array underflow" results.
Products: openpkg, php, trustix secure_linux, ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 3 | php | 0:4.3.2-19.ent |
| Red Hat Enterprise Linux 3 | php-debuginfo | 0:4.3.2-19.ent |
| Red Hat Enterprise Linux 3 | php-devel | 0:4.3.2-19.ent |
| Red Hat Enterprise Linux 3 | php-imap | 0:4.3.2-19.ent |
| Red Hat Enterprise Linux 3 | php-ldap | 0:4.3.2-19.ent |
| Red Hat Enterprise Linux 3 | php-mysql | 0:4.3.2-19.ent |
| Red Hat Enterprise Linux 3 | php-odbc | 0:4.3.2-19.ent |
| Red Hat Enterprise Linux 3 | php-pgsql | 0:4.3.2-19.ent |
| Red Hat Enterprise Linux 4 | php | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-debuginfo | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-devel | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-domxml | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-gd | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-imap | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-ldap | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-mbstring | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-mysql | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-ncurses | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-odbc | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-pear | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-pgsql | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-snmp | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-xmlrpc | 0:4.3.9-3.2 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | php53 | 5.3.17-47.1 |