CVE-2014-9653: Input Validation
Published Mar 30, 2015
·Updated
Last updated 24 July 2024
Other sources
readelf.c in file before 5.22, as used in the Fileinfo component in PH ...
— Debian
Affected Software
50 affected componentsFixes available
File Project File<=5.21
PHP PHP<=5.4.36
PHP PHP=5.5.0
PHP PHP=5.5.0-alpha1
PHP PHP=5.5.0-alpha2
PHP PHP=5.5.0-alpha3
PHP PHP=5.5.0-alpha4
PHP PHP=5.5.0-alpha5
PHP PHP=5.5.0-alpha6
PHP PHP=5.5.0-beta1
PHP PHP=5.5.0-beta2
PHP PHP=5.5.0-beta3
PHP PHP=5.5.0-beta4
PHP PHP=5.5.0-rc1
PHP PHP=5.5.0-rc2
PHP PHP=5.5.1
PHP PHP=5.5.2
PHP PHP=5.5.3
PHP PHP=5.5.4
PHP PHP=5.5.5
PHP PHP=5.5.6
PHP PHP=5.5.7
PHP PHP=5.5.8
PHP PHP=5.5.9
PHP PHP=5.5.10
PHP PHP=5.5.11
PHP PHP=5.5.12
PHP PHP=5.5.13
PHP PHP=5.5.14
PHP PHP=5.5.15
PHP PHP=5.5.16
PHP PHP=5.5.17
PHP PHP=5.5.18
PHP PHP=5.5.19
PHP PHP=5.5.20
PHP PHP=5.6.0-alpha1
PHP PHP=5.6.0-alpha2
PHP PHP=5.6.0-alpha3
PHP PHP=5.6.0-alpha4
PHP PHP=5.6.0-alpha5
PHP PHP=5.6.0-beta1
PHP PHP=5.6.0-beta2
PHP PHP=5.6.0-beta3
PHP PHP=5.6.0-beta4
PHP PHP=5.6.1
PHP PHP=5.6.2
PHP PHP=5.6.3
PHP PHP=5.6.4
Debian Debian Linux=7.0
debian/file
1:5.39-3+deb11u11:5.44-31:5.46-5
Remediation
Event History
Mar 30, 2015
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·10:59 AM
DescriptionSeverityWeaknessAffected Software
Sep 16, 2024
Data Sourced
via Ubuntu·01:05 AM
RemedyDescriptionSeverityAffected Software
Feb 18, 2026
Data Sourced
via Debian·09:10 PM
DescriptionAffected Software
Data Sourced
via Launchpad·09:10 PM
Description
Frequently Asked Questions
1
What is CVE-2014-9653?
CVE-2014-9653 is a vulnerability in the Fileinfo component in PHP before version 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5.
2
How does CVE-2014-9653 work?
CVE-2014-9653 allows remote attackers to cause a denial of service by exploiting a flaw in the readelf.c file.
3
What is the severity of CVE-2014-9653?
CVE-2014-9653 has a severity rating of 7.5 (high).
4
Which software versions are affected by CVE-2014-9653?
The affected software versions include file before 5.22 and PHP before 5.6.5.
5
How can I fix CVE-2014-9653?
To fix CVE-2014-9653, update PHP to version 5.4.37, 5.5.21, or 5.6.5 and file to version 5.22 or later.