DeutschShown in its original language — a full translation is planned for a future version.
PHP: Mehrere Schwachstellen
view advisory published 2017-07-09
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um einen Denial of Service Angriff durchzuführen, Informationen offenzulegen, Dateien zu manipulieren und beliebigen Programmcode mit den Rechten des Dienstes ausführen zu können.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-11147US | critical9.1 | — | ||
In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying malicious archive files to crash the PHP interpreter or potentially disclo… | ||||
| CVE-2017-11146US | — | — | ||
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not an independent… | ||||
| CVE-2017-11145US | high7.5 | — | ||
In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelib_meridian parsing code could be used by attackers able to supply date strin… | ||||
| CVE-2017-9229US | high7.5 | — | ||
An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A SIGSEGV occurs in left_adjust_char_head() during reg… | ||||
| CVE-2017-9228US | critical9.8 | — | ||
An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitset_set_range(… | ||||
02
references
External citations — patches, advisories, analysis.
- PHP Change Log #5.6.31external
- PHP Change Log #7.0.21external
- PHP Change Log #7.1.7external
- Debian Security Advisory DSA-4080 vom 2018-01-09external
- Debian Security Advisory DSA-4081 vom 2018-01-09external
- Ubuntu Security Notice USN-3382-1 vom 2017-08-10external
- Ubuntu Security Notice USN-3382-2 vom 2017-12-18external
- Red Hat Security Advisory RHSA-2018:1296 vom 2018-05-04external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan