CVE-2013-6420

CVSS V2 High 7.5 CVSS V3 None
Description
The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate that is not properly handled by the openssl_x509_parse function.
Overview
  • CVE ID
  • CVE-2013-6420
  • Assigner
  • secalert@redhat.com
  • Vulnerability Status
  • Modified
  • Published Version
  • 2013-12-17T04:46:45
  • Last Modified Date
  • 2018-10-30T16:27:34
Weakness Enumerations
CWE URL
CWE-119 http://cwe.mitre.org/data/definitions/119.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:php:php:5.4.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.7:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.8:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.9:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.11:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.12:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.12:rc1:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.12:rc2:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.13:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.13:rc1:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.14:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.14:rc1:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.15:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.15:rc1:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.16:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.16:rc1:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.17:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.18:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.19:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.20:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.21:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.4.22:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* 1 OR 10.9.1
cpe:2.3:a:php:php:*:*:*:*:*:*:*:* 1 OR 5.3.27
cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.7:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.8:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.9:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.11:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.12:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.13:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.14:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.15:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.16:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.17:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.18:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.19:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.20:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.21:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.22:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.23:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.24:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.25:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.3.26:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.5.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.5.0:alpha1:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.5.0:alpha2:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.5.0:alpha3:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.5.0:alpha4:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.5.0:alpha5:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.5.0:alpha6:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.5.0:beta1:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.5.0:beta2:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.5.0:beta3:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.5.0:beta4:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.5.0:rc1:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.5.0:rc2:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.5.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.5.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.5.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.5.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.5.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:php:php:5.5.6:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:L/Au:N/C:P/I:P/A:P
  • Access Vector
  • NETWORK
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • PARTIAL
  • Integrity Impact
  • PARTIAL
  • Availability Impact
  • PARTIAL
  • Base Score
  • 7.5
  • Severity
  • HIGH
  • Exploitability Score
  • 10
  • Impact Score
  • 6.4
References
Reference URL Reference Tags
http://git.php.net/?p=php-src.git;a=commit;h=c1224573c773b6845e83505f717fbf820fc18415 Patch
https://bugzilla.redhat.com/show_bug.cgi?id=1036830 Patch
http://www.php.net/ChangeLog-5.php
https://www.sektioneins.de/advisories/advisory-012013-php-openssl_x509_parse-memory-corruption-vulnerability.html Exploit
http://lists.opensuse.org/opensuse-updates/2013-12/msg00125.html
http://lists.opensuse.org/opensuse-updates/2013-12/msg00126.html
http://www.securitytracker.com/id/1029472
http://support.apple.com/kb/HT6150
http://secunia.com/advisories/59652
https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04463322
http://www.securityfocus.com/bid/64225
http://www.ubuntu.com/usn/USN-2055-1
http://www.debian.org/security/2013/dsa-2816
http://rhn.redhat.com/errata/RHSA-2013-1826.html
http://rhn.redhat.com/errata/RHSA-2013-1825.html
http://rhn.redhat.com/errata/RHSA-2013-1824.html
http://rhn.redhat.com/errata/RHSA-2013-1815.html
http://rhn.redhat.com/errata/RHSA-2013-1813.html
http://forums.interworx.com/threads/8000-InterWorx-Version-5-0-14-Released-on-Beta-Channel!
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2013-6420
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420
History
Created Old Value New Value Data Type Notes
2022-05-10 17:56:27 Added to TrackCVE
2022-12-01 21:15:47 2013-12-17T04:46Z 2013-12-17T04:46:45 CVE Published Date updated
2022-12-01 21:15:47 2018-10-30T16:27:34 CVE Modified Date updated
2022-12-01 21:15:47 Modified Vulnerability Status updated