p PatchFirst

CVE-2014-2053

CVE-2014-2053

This page contains facts from public vulnerability sources. Check the original advisory before updating.

getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.

EPSS 4.7% · Fix available

Published
Updated

Stack: system · php

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • php-getid3 Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.9.7-2

    Update to 1.9.7-2

  • php-getid3 Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.9.7-2

    Update to 1.9.7-2

  • php-getid3 Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.9.7-2

    Update to 1.9.7-2

  • wordpress Debian:12

    Affected ranges
    • ECOSYSTEM: < 3.9.2+dfsg-1

    Update to 3.9.2+dfsg-1

  • wordpress Debian:13

    Affected ranges
    • ECOSYSTEM: < 3.9.2+dfsg-1

    Update to 3.9.2+dfsg-1

  • wordpress Debian:14

    Affected ranges
    • ECOSYSTEM: < 3.9.2+dfsg-1

    Update to 3.9.2+dfsg-1

  • james-heinrich/getid3 Packagist

    Versions
    • v1.9.8
    Affected ranges
    • ECOSYSTEM: < 1.9.9

    Update to 1.9.9

Original sources

Check your server →