DeutschShown in its original language — a full translation is planned for a future version.
PHP: Mehrere Schwachstellen
view advisory published 2017-06-18
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um einen Server Side Request Forgery (SSRF) durchzuführen, vertrauliche Daten einzusehen oder Code zur Ausführung zu bringen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-9227US | critical9.8 | — | ||
An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs in mbc_enc_len() dur… | ||||
| CVE-2017-9226US | critical9.8 | — | ||
An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write or read occurs in next_stat… | ||||
| CVE-2017-9224US | critical9.8 | — | ||
An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs in match_at() during… | ||||
| CVE-2017-7272US | high7.4 | — | ||
PHP through 7.1.11 enables potential SSRF in applications that accept an fsockopen or pfsockopen hostname argument with an expectation that the port number is constrained. Because… | ||||
02
references
External citations — patches, advisories, analysis.
- Ubuntu Security Notice USN-3382-1 vom 2017-08-10external
- Ubuntu Security Notice USN-3382-2 vom 2017-12-18external
- Red Hat Security Advisory RHSA-2018:1296 vom 2018-05-04external
- Amazon Linux Security Advisory ALAS2-2023-2311 vom 2023-10-20external
- Amazon Linux Security Advisory ALAS-2024-2520 vom 2024-04-18external
- Amazon Linux Security Advisory ALAS-2025-2832 vom 2025-04-16external
- NetApp Security Advisory NTAP-20180112-0001 vom 2018-01-12external
- WID-SEC-W-2023-2719 - CSAF Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan