| Package | Affected versions | Patched versions |
|---|---|---|
| php | = 5.4.0= 5.4.1= 5.4.10= 5.4.11= 5.4.12= 5.4.13= 5.4.14= 5.4.15= 5.4.16= 5.4.17= 5.4.18= 5.4.19= 5.4.2= 5.4.20= 5.4.21= 5.4.22= 5.4.23= 5.4.24= 5.4.25= 5.4.26= 5.4.27= 5.4.28= 5.4.29= 5.4.3= 5.4.30= 5.4.4= 5.4.5= 5.4.6= 5.4.7= 5.4.8= 5.4.9= 5.5.0= 5.5.1= 5.5.10= 5.5.11= 5.5.12= 5.5.13= 5.5.14= 5.5.15= 5.5.2= 5.5.3= 5.5.4= 5.5.5= 5.5.6= 5.5.7= 5.5.8= 5.5.9≤ 5.4.31 |
Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow remote DNS servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted DNS record, related to the dns_get_record function and the dn_expand function. NOTE: this issue exists because of an incomplete fix for CVE-2014-4049.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free