VDB
GCVE-110-MAGEIA-2013-264
GCVE-110-MAGEIA-2013-264
Advisory Published
Updated php packages fix security vulnerability:
The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP
before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '\0' character
in a domain name in the Subject Alternative Name field of an X.509 certificate,
which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a
crafted certificate issued by a legitimate Certification Authority
(CVE-2013-4248).
Additionally it prevents php-gd and php-gd-bundled packages being installed
at the same time, which causes errors.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | php | 0 (affected), 5.3.27-1.2.mga2 (unaffected) | — |
| Mageia | php-apc | 0 (affected), 3.1.14-7.3.mga3 (unaffected) | — |
| Mageia | php-gd-bundled | 0 (affected), 5.4.19-1.mga3 (unaffected) | — |
| Mageia | php | 5.4.19-1.1.mga3 (unaffected), 0 (affected) | — |
References
Updated php packages fix CVE-2013-4248 and prevent the two gd packages being installed at once
advisory
Updated php packages fix CVE-2013-4248 and prevent the two gd packages being installed at once
issue
Updated php packages fix CVE-2013-4248 and prevent the two gd packages being installed at once
issue
Updated php packages fix CVE-2013-4248 and prevent the two gd packages being installed at once
issue
Browse GCVE Records
72,337 records in the GCVE database · Updated July 14, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.