UBUNTU-CVE-2015-2331

See a problem?
Source
https://ubuntu.com/security/notices/UBUNTU-CVE-2015-2331
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2015/UBUNTU-CVE-2015-2331.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2015-2331
Related
Published
2015-03-30T10:59:00Z
Modified
2015-03-30T10:59:00Z
Summary
[none]
Details

Integer overflow in the zipcdirnew function in zipdirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a ZIP archive that contains many entries, leading to a heap-based buffer overflow.

References

Affected packages

Ubuntu:14.04:LTS / libzip

Package

Name
libzip
Purl
pkg:deb/ubuntu/libzip@0.10.1-1.2?arch=src?distro=trusty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.10.1-1.2

Affected versions

0.*

0.10.1-1.1ubuntu1

Ecosystem specific 

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "ziptorrent": "0.10.1-1.2",
            "libzip2": "0.10.1-1.2",
            "libzip-dev": "0.10.1-1.2",
            "zipmerge": "0.10.1-1.2",
            "zipcmp": "0.10.1-1.2"
        }
    ]
}

Ubuntu:14.04:LTS / php5

Package

Name
php5
Purl
pkg:deb/ubuntu/php5@5.5.9+dfsg-1ubuntu4.7?arch=src?distro=trusty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.5.9+dfsg-1ubuntu4.7

Affected versions

5.*

5.5.3+dfsg-1ubuntu2
5.5.3+dfsg-1ubuntu3
5.5.6+dfsg-1ubuntu1
5.5.6+dfsg-1ubuntu2
5.5.8+dfsg-2ubuntu1
5.5.9+dfsg-1ubuntu1
5.5.9+dfsg-1ubuntu2
5.5.9+dfsg-1ubuntu3
5.5.9+dfsg-1ubuntu4
5.5.9+dfsg-1ubuntu4.1
5.5.9+dfsg-1ubuntu4.2
5.5.9+dfsg-1ubuntu4.3
5.5.9+dfsg-1ubuntu4.4
5.5.9+dfsg-1ubuntu4.5
5.5.9+dfsg-1ubuntu4.6

Ecosystem specific 

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "php5-gd": "5.5.9+dfsg-1ubuntu4.7",
            "libphp5-embed": "5.5.9+dfsg-1ubuntu4.7",
            "php5-mysqlnd": "5.5.9+dfsg-1ubuntu4.7",
            "php5-dbg": "5.5.9+dfsg-1ubuntu4.7",
            "php-pear": "5.5.9+dfsg-1ubuntu4.7",
            "php5-cli": "5.5.9+dfsg-1ubuntu4.7",
            "php5-fpm": "5.5.9+dfsg-1ubuntu4.7",
            "php5-pspell": "5.5.9+dfsg-1ubuntu4.7",
            "php5-mysql": "5.5.9+dfsg-1ubuntu4.7",
            "php5-curl": "5.5.9+dfsg-1ubuntu4.7",
            "php5-ldap": "5.5.9+dfsg-1ubuntu4.7",
            "php5-pgsql": "5.5.9+dfsg-1ubuntu4.7",
            "php5-xsl": "5.5.9+dfsg-1ubuntu4.7",
            "php5-readline": "5.5.9+dfsg-1ubuntu4.7",
            "php5-common": "5.5.9+dfsg-1ubuntu4.7",
            "php5-enchant": "5.5.9+dfsg-1ubuntu4.7",
            "php5-dev": "5.5.9+dfsg-1ubuntu4.7",
            "libapache2-mod-php5filter": "5.5.9+dfsg-1ubuntu4.7",
            "php5": "5.5.9+dfsg-1ubuntu4.7",
            "php5-sybase": "5.5.9+dfsg-1ubuntu4.7",
            "php5-gmp": "5.5.9+dfsg-1ubuntu4.7",
            "php5-odbc": "5.5.9+dfsg-1ubuntu4.7",
            "php5-cgi": "5.5.9+dfsg-1ubuntu4.7",
            "php5-recode": "5.5.9+dfsg-1ubuntu4.7",
            "libapache2-mod-php5": "5.5.9+dfsg-1ubuntu4.7",
            "php5-snmp": "5.5.9+dfsg-1ubuntu4.7",
            "php5-sqlite": "5.5.9+dfsg-1ubuntu4.7",
            "php5-intl": "5.5.9+dfsg-1ubuntu4.7",
            "php5-xmlrpc": "5.5.9+dfsg-1ubuntu4.7",
            "php5-tidy": "5.5.9+dfsg-1ubuntu4.7"
        }
    ]
}