CVE-2013-6420 Memory corruption in n/a
Remote attackers can execute arbitrary code or cause denial of service via crafted X.509 certificates due to improper timestamp parsing in PHP's OpenSSL extension.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2013-6420?
CVE-2013-6420 is a high-severity memory corruption vulnerability in Apple Mac Os X, published on 17 Dec 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate that is not properly handled by the openssl_x509_parse function.
Weakness: CWE-119
Which versions are affected by CVE-2013-6420?
It affects 3 products.
Linux distribution packages (40)
php53 Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.3.3-22.el5_10 |
php53-bcmath Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.3.3-22.el5_10 |
php53-cli Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.3.3-22.el5_10 |
php53-common Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.3.3-22.el5_10 |
php53-dba Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.3.3-22.el5_10 |
php53-debuginfo Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.3.3-22.el5_10 |
php53-devel Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.3.3-22.el5_10 |
php53-gd Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.3.3-22.el5_10 |
php53-imap Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.3.3-22.el5_10 |
php53-intl Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.3.3-22.el5_10 |
php53-ldap Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.3.3-22.el5_10 |
php53-mbstring Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.3.3-22.el5_10 |
php53-mysql Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.3.3-22.el5_10 |
php53-odbc Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.3.3-22.el5_10 |
php53-pdo Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.3.3-22.el5_10 |
php53-pgsql Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.3.3-22.el5_10 |
php53-process Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.3.3-22.el5_10 |
php53-pspell Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.3.3-22.el5_10 |
php53-snmp Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.3.3-22.el5_10 |
php53-soap Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.3.3-22.el5_10 |
php53-xml Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.3.3-22.el5_10 |
php53-xmlrpc Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.3.3-22.el5_10 |
php53 Red Hat:enterprise_linux:5::server | All versions | 0:5.3.3-22.el5_10 |
php53-bcmath Red Hat:enterprise_linux:5::server | All versions | 0:5.3.3-22.el5_10 |
php53-cli Red Hat:enterprise_linux:5::server | All versions | 0:5.3.3-22.el5_10 |
php53-common Red Hat:enterprise_linux:5::server | All versions | 0:5.3.3-22.el5_10 |
php53-dba Red Hat:enterprise_linux:5::server | All versions | 0:5.3.3-22.el5_10 |
php53-debuginfo Red Hat:enterprise_linux:5::server | All versions | 0:5.3.3-22.el5_10 |
php53-devel Red Hat:enterprise_linux:5::server | All versions | 0:5.3.3-22.el5_10 |
php53-gd Red Hat:enterprise_linux:5::server | All versions | 0:5.3.3-22.el5_10 |
php53-imap Red Hat:enterprise_linux:5::server | All versions | 0:5.3.3-22.el5_10 |
php53-intl Red Hat:enterprise_linux:5::server | All versions | 0:5.3.3-22.el5_10 |
php53-ldap Red Hat:enterprise_linux:5::server | All versions | 0:5.3.3-22.el5_10 |
php53-mbstring Red Hat:enterprise_linux:5::server | All versions | 0:5.3.3-22.el5_10 |
php53-mysql Red Hat:enterprise_linux:5::server | All versions | 0:5.3.3-22.el5_10 |
php53-odbc Red Hat:enterprise_linux:5::server | All versions | 0:5.3.3-22.el5_10 |
php53-pdo Red Hat:enterprise_linux:5::server | All versions | 0:5.3.3-22.el5_10 |
php53-pgsql Red Hat:enterprise_linux:5::server | All versions | 0:5.3.3-22.el5_10 |
php53-process Red Hat:enterprise_linux:5::server | All versions | 0:5.3.3-22.el5_10 |
php53-pspell Red Hat:enterprise_linux:5::server | All versions | 0:5.3.3-22.el5_10 |
Products include Apple Mac Os X, Opensuse Opensuse, Php Php.
How do I fix CVE-2013-6420?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2013-6420 being exploited?
There is no known exploitation of CVE-2013-6420 in the wild and no public exploit code.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Apple Mac Os X
Sources
Also known as GHSA-m6pq-hhvx-694c, RHSA-2013:1813, RHSA-2013:1815, RHSA-2013:1824, RHSA-2013:1825, RHSA-2013:1826.