CVE-2014-3478
Fixed in a distro release EPSS 15%CVSS 6.5
Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (application crash) via a crafted Pascal string in a FILE_PSTRING conversion.
Products: christos_zoulas file, php
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | file | 1:5.19-1 |
| Debian 13 | file | 1:5.19-1 |
| Debian 14 | file | 1:5.19-1 |
| Debian 6.0 | file | 5.04-5+squeeze6 |
| Debian 7 | file | 5.11-2+deb7u4 |
| Debian 7 | php5 | 5.4.4-14+deb7u12 |
| Red Hat Enterprise Linux 7 | file | 0:5.11-31.el7 |
| Red Hat Enterprise Linux 7 | file-debuginfo | 0:5.11-31.el7 |
| Red Hat Enterprise Linux 7 | file-devel | 0:5.11-31.el7 |
| Red Hat Enterprise Linux 7 | file-libs | 0:5.11-31.el7 |
| Red Hat Enterprise Linux 7 | file-static | 0:5.11-31.el7 |
| Red Hat Enterprise Linux 7 | php | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | php-bcmath | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | php-cli | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | php-common | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | php-dba | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | php-debuginfo | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | php-devel | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | php-embedded | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | php-enchant | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | php-fpm | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | php-gd | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | php-intl | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | php-ldap | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | php-mbstring | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | php-mysql | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | php-mysqlnd | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | php-odbc | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | php-pdo | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | php-pgsql | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | php-process | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | php-pspell | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | php-recode | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | php-snmp | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | php-soap | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | php-xml | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | php-xmlrpc | 0:5.4.16-23.el7_0.1 |
| Red Hat Enterprise Linux 7 | python-magic | 0:5.11-31.el7 |
| Red Hat rhel software collections 1 | php54-php | 0:5.4.16-22.el7 |
| Red Hat rhel software collections 1 | php54-php | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php54-php-bcmath | 0:5.4.16-22.el7 |
| Red Hat rhel software collections 1 | php54-php-bcmath | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php54-php-cli | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php54-php-cli | 0:5.4.16-22.el7 |
| Red Hat rhel software collections 1 | php54-php-common | 0:5.4.16-22.el7 |
| Red Hat rhel software collections 1 | php54-php-common | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php54-php-dba | 0:5.4.16-22.el7 |
| Red Hat rhel software collections 1 | php54-php-dba | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php54-php-debuginfo | 0:5.4.16-22.el7 |
| Red Hat rhel software collections 1 | php54-php-debuginfo | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php54-php-devel | 0:5.4.16-22.el7 |
| Red Hat rhel software collections 1 | php54-php-devel | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php54-php-enchant | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php54-php-enchant | 0:5.4.16-22.el7 |
| Red Hat rhel software collections 1 | php54-php-fpm | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php54-php-fpm | 0:5.4.16-22.el7 |
| Red Hat rhel software collections 1 | php54-php-gd | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php54-php-gd | 0:5.4.16-22.el7 |
| Red Hat rhel software collections 1 | php54-php-imap | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php54-php-intl | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php54-php-intl | 0:5.4.16-22.el7 |
| Red Hat rhel software collections 1 | php54-php-ldap | 0:5.4.16-22.el7 |
| Red Hat rhel software collections 1 | php54-php-ldap | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php54-php-mbstring | 0:5.4.16-22.el7 |
| Red Hat rhel software collections 1 | php54-php-mbstring | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php54-php-mysqlnd | 0:5.4.16-22.el7 |
| Red Hat rhel software collections 1 | php54-php-mysqlnd | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php54-php-odbc | 0:5.4.16-22.el7 |
| Red Hat rhel software collections 1 | php54-php-odbc | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php54-php-pdo | 0:5.4.16-22.el7 |
| Red Hat rhel software collections 1 | php54-php-pdo | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php54-php-pgsql | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php54-php-pgsql | 0:5.4.16-22.el7 |
| Red Hat rhel software collections 1 | php54-php-process | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php54-php-process | 0:5.4.16-22.el7 |
| Red Hat rhel software collections 1 | php54-php-pspell | 0:5.4.16-22.el7 |
| Red Hat rhel software collections 1 | php54-php-pspell | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php54-php-recode | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php54-php-recode | 0:5.4.16-22.el7 |
| Red Hat rhel software collections 1 | php54-php-snmp | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php54-php-snmp | 0:5.4.16-22.el7 |
| Red Hat rhel software collections 1 | php54-php-soap | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php54-php-soap | 0:5.4.16-22.el7 |
| Red Hat rhel software collections 1 | php54-php-tidy | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php54-php-xml | 0:5.4.16-22.el7 |
| Red Hat rhel software collections 1 | php54-php-xml | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php54-php-xmlrpc | 0:5.4.16-22.el7 |
| Red Hat rhel software collections 1 | php54-php-xmlrpc | 0:5.4.16-22.el6 |
| Red Hat rhel software collections 1 | php55-php | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-bcmath | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-bcmath | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-cli | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-cli | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-common | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-common | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-dba | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-dba | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-debuginfo | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-debuginfo | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-devel | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-devel | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-enchant | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-enchant | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-fpm | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-fpm | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-gd | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-gd | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-gmp | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-gmp | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-imap | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-intl | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-intl | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-ldap | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-ldap | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-mbstring | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-mbstring | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-mysqlnd | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-mysqlnd | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-odbc | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-odbc | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-opcache | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-opcache | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-pdo | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-pdo | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-pgsql | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-pgsql | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-process | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-process | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-pspell | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-pspell | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-recode | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-recode | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-snmp | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-snmp | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-soap | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-soap | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-tidy | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-xml | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-xml | 0:5.5.6-13.el6 |
| Red Hat rhel software collections 1 | php55-php-xmlrpc | 0:5.5.6-13.el7 |
| Red Hat rhel software collections 1 | php55-php-xmlrpc | 0:5.5.6-13.el6 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | php53 | 5.3.17-47.1 |
| Ubuntu 14.04 LTS | file | 1:5.14-2ubuntu3.1 |
| Ubuntu 14.04 LTS | php5 | 5.5.9+dfsg-1ubuntu4.3 |