Deskripsi CVE

Integer overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an argument to the unserialize function that triggers calculation of a large length value.

Informasi CVE

Kelemahan Terkait

CWE-ID	Nama Kelemahan	Sumber
CWE-189	Category : Numeric Errors Weaknesses in this category are related to improper calculation or conversion of numbers.

Metrik

Metrik	Skor	Tingkat keparahan	CVSS Vektor	Sumber
V2	7.5		AV:N/AC:L/Au:N/C:P/I:P/A:P	nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Produk yang Disebutkan

Konfigurasi 0

Php>>Php >> Version Hingga (termasuk) 5.4.33

Php>>Php >> Version 5.4.0

Php>>Php >> Version 5.4.1

Php>>Php >> Version 5.4.2

Php>>Php >> Version 5.4.3

Php>>Php >> Version 5.4.4

Php>>Php >> Version 5.4.5

Php>>Php >> Version 5.4.6

Php>>Php >> Version 5.4.7

Php>>Php >> Version 5.4.8

Php>>Php >> Version 5.4.9

Php>>Php >> Version 5.4.10

Php>>Php >> Version 5.4.11

Php>>Php >> Version 5.4.12

Php>>Php >> Version 5.4.13

Php>>Php >> Version 5.4.14

Php>>Php >> Version 5.4.15

Php>>Php >> Version 5.4.16

Php>>Php >> Version 5.4.17

Php>>Php >> Version 5.4.18

Php>>Php >> Version 5.4.19

Php>>Php >> Version 5.4.20

Php>>Php >> Version 5.4.21

Php>>Php >> Version 5.4.22

Php>>Php >> Version 5.4.23

Php>>Php >> Version 5.4.24

Php>>Php >> Version 5.4.25

Php>>Php >> Version 5.4.26

Php>>Php >> Version 5.4.27

Php>>Php >> Version 5.4.28

Php>>Php >> Version 5.4.29

Php>>Php >> Version 5.4.30

Php>>Php >> Version 5.4.31

Php>>Php >> Version 5.4.32

Php>>Php >> Version 5.5.0

Php>>Php >> Version 5.5.1

Php>>Php >> Version 5.5.2

Php>>Php >> Version 5.5.3

Php>>Php >> Version 5.5.4

Php>>Php >> Version 5.5.5

Php>>Php >> Version 5.5.6

Php>>Php >> Version 5.5.7

Php>>Php >> Version 5.5.8

Php>>Php >> Version 5.5.9

Php>>Php >> Version 5.5.10

Php>>Php >> Version 5.5.11

Php>>Php >> Version 5.5.12

Php>>Php >> Version 5.5.13

Php>>Php >> Version 5.5.14

Php>>Php >> Version 5.5.15

Php>>Php >> Version 5.5.16

Php>>Php >> Version 5.5.17

Php>>Php >> Version 5.6.0

Php>>Php >> Version 5.6.1

Referensi

http://rhn.redhat.com/errata/RHSA-2014-1824.html
Tags : vendor-advisory, x_refsource_REDHAT

http://secunia.com/advisories/59967
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.opensuse.org/opensuse-updates/2014-11/msg00034.html
Tags : vendor-advisory, x_refsource_SUSE

http://rhn.redhat.com/errata/RHSA-2014-1767.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.ubuntu.com/usn/USN-2391-1
Tags : vendor-advisory, x_refsource_UBUNTU

https://support.apple.com/HT204659
Tags : x_refsource_CONFIRM

http://lists.opensuse.org/opensuse-updates/2014-11/msg00024.html
Tags : vendor-advisory, x_refsource_SUSE

http://secunia.com/advisories/61982
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/61763
Tags : third-party-advisory, x_refsource_SECUNIA

http://linux.oracle.com/errata/ELSA-2014-1767.html
Tags : x_refsource_CONFIRM

http://rhn.redhat.com/errata/RHSA-2014-1766.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.debian.org/security/2014/dsa-3064
Tags : vendor-advisory, x_refsource_DEBIAN

http://linux.oracle.com/errata/ELSA-2014-1768.html
Tags : x_refsource_CONFIRM

http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=56754a7f9eba0e4f559b6ca081d9f2a447b3f159
Tags : x_refsource_CONFIRM

http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
Tags : x_refsource_CONFIRM

http://php.net/ChangeLog-5.php
Tags : x_refsource_CONFIRM

https://bugzilla.redhat.com/show_bug.cgi?id=1154500
Tags : x_refsource_CONFIRM

https://bugs.php.net/bug.php?id=68044
Tags : x_refsource_CONFIRM

http://www.securityfocus.com/bid/70611
Tags : vdb-entry, x_refsource_BID

http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
Tags : vendor-advisory, x_refsource_APPLE

http://secunia.com/advisories/61970
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.opensuse.org/opensuse-updates/2015-01/msg00006.html
Tags : vendor-advisory, x_refsource_SUSE

http://rhn.redhat.com/errata/RHSA-2014-1765.html
Tags : vendor-advisory, x_refsource_REDHAT

http://rhn.redhat.com/errata/RHSA-2014-1768.html
Tags : vendor-advisory, x_refsource_REDHAT

http://secunia.com/advisories/60699
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/60630
Tags : third-party-advisory, x_refsource_SECUNIA

Tanggal	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	8.23%	–	–
2022-03-13	–	–	8.23%	–	–
2022-04-03	–	–	8.23%	–	–
2023-03-12	–	–	–	95.2%	–
2023-05-28	–	–	–	94.58%	–
2023-07-09	–	–	–	94.45%	–
2024-06-02	–	–	–	93.74%	–
2024-10-27	–	–	–	93.53%	–
2024-12-15	–	–	–	93.38%	–
2024-12-22	–	–	–	94.25%	–
2025-01-19	–	–	–	94.25%	–
2025-03-18	–	–	–	–	63.29%
2025-04-12	–	–	–	–	69.07%
2025-05-01	–	–	–	–	46.88%
2025-05-03	–	–	–	–	45.9%
2025-05-04	–	–	–	–	66.58%
2025-05-09	–	–	–	–	65.25%
2025-06-01	–	–	–	–	44.6%
2025-06-04	–	–	–	–	65.25%
2025-07-01	–	–	–	–	44.6%
2025-07-04	–	–	–	–	65.25%
2025-07-07	–	–	–	–	55.96%
2025-07-17	–	–	–	–	65.25%
2025-07-30	–	–	–	–	49.51%
2025-08-01	–	–	–	–	26.21%
2025-08-04	–	–	–	–	49.51%
2025-08-17	–	–	–	–	51.15%
2025-10-01	–	–	–	–	45.9%
2025-10-04	–	–	–	–	66.58%
2025-10-27	–	–	–	–	51.15%
2025-10-28	–	–	–	–	66.58%
2025-11-01	–	–	–	–	45.9%
2025-11-04	–	–	–	–	66.58%
2025-11-18	–	–	–	–	66.58%
2025-11-21	–	–	–	–	66.58%
2025-12-01	–	–	–	–	45.9%
2025-12-04	–	–	–	–	66.58%
2025-12-27	–	–	–	–	51.15%
2025-12-28	–	–	–	–	66.58%
2026-01-01	–	–	–	–	45.9%
2026-01-04	–	–	–	–	66.58%
2026-03-01	–	–	–	–	45.9%
2026-03-08	–	–	–	–	66.58%
2026-03-29	–	–	–	–	65.25%
2026-05-10	–	–	–	–	55.96%
2026-06-14	–	–	–	–	49.59%

Tanggal	Persentil
2022-02-06	82%
2022-03-13	83%
2022-04-03	93%
2023-03-12	99%
2023-05-28	99%
2023-07-09	99%
2024-06-02	99%
2024-10-27	99%
2024-12-15	99%
2024-12-22	99%
2025-01-19	99%
2025-03-18	98%
2025-04-12	99%
2025-05-01	98%
2025-05-03	97%
2025-05-04	98%
2025-05-09	98%
2025-06-01	97%
2025-06-04	98%
2025-07-01	97%
2025-07-04	98%
2025-07-07	98%
2025-07-17	98%
2025-07-30	98%
2025-08-01	96%
2025-08-04	98%
2025-08-17	98%
2025-10-01	98%
2025-10-04	98%
2025-10-27	98%
2025-10-28	98%
2025-11-01	98%
2025-11-04	98%
2025-11-18	99%
2025-11-21	98%
2025-12-01	97%
2025-12-04	98%
2025-12-27	98%
2025-12-28	98%
2026-01-01	98%
2026-01-04	98%
2026-03-01	98%
2026-03-08	99%
2026-03-29	98%
2026-05-10	98%
2026-06-14	98%

CVE-2014-3669 : Detail

CVE-2014-3669