VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 17, 2013· Updated Jun 17, 2026

CVE-2013-6420

CVE-2013-6420

Description

The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate that is not properly handled by the openssl_x509_parse function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

85
  • PHP/PHP77 versions
    cpe:2.3:a:php:php:*:*:*:*:*:*:*:*+ 76 more
    • cpe:2.3:a:php:php:*:*:*:*:*:*:*:*range: <=5.3.27
    • cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.10:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.11:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.12:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.13:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.14:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.15:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.16:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.17:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.18:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.19:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.20:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.21:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.22:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.23:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.24:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.25:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.26:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.4:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.5:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.6:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.7:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.8:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.9:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.10:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.11:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.12:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.12:rc1:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.12:rc2:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.13:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.13:rc1:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.14:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.14:rc1:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.15:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.15:rc1:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.16:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.16:rc1:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.17:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.18:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.19:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.20:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.21:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.22:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.3:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.4:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.5:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.6:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.7:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.8:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.4.9:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.5.0:alpha1:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.5.0:alpha2:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.5.0:alpha3:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.5.0:alpha4:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.5.0:alpha5:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.5.0:alpha6:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.5.0:beta1:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.5.0:beta2:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.5.0:beta3:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.5.0:beta4:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.5.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.5.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.5.4:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.5.5:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.5.6:*:*:*:*:*:*:*
    • (no CPE)range: <5.3.28 || >=5.4.0 <5.4.23 || >=5.5.0 <5.5.7
  • Apple Inc./Mac OS X
    cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
    Range: <=10.9.1
  • OpenSUSE/openSUSE4 versions
    cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*
    • cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*
    • cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*
    • cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
  • osv-coords3 versions
    pkg:rpm/opensuse/php5&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/php7&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/php8&distro=openSUSE%20Tumbleweed
    < 5.6.28-1.1+ 2 more
    • (no CPE)range: < 5.6.28-1.1
    • (no CPE)range: < 7.0.14-1.4
    • (no CPE)range: < 8.0.11-1.1

Patches

Vulnerability mechanics

References

19

News mentions

0

No linked articles in our index yet.