Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | |||
Test ID: | 1.3.6.1.4.1.25623.1.0.704081 |
Category: | Debian Local Security Checks |
Title: | Debian Security Advisory DSA 4081-1 (php5 - security update) |
Summary: | Several vulnerabilities were found in PHP, a widely-used open source;general purpose scripting language:;;CVE-2017-11142;Denial of service via overly long form variables;;CVE-2017-11143;Invalid free() in wddx_deserialize();;CVE-2017-11144;Denial of service in openssl extension due to incorrect return value;check of OpenSSL sealing function.;;CVE-2017-11145;Out-of-bounds read in wddx_deserialize();;CVE-2017-11628;Buffer overflow in PHP INI parsing API;;CVE-2017-12933;Buffer overread in finish_nested_data();;CVE-2017-16642;Out-of-bounds read in timelib_meridian() |
Description: | Summary: Several vulnerabilities were found in PHP, a widely-used open source general purpose scripting language: CVE-2017-11142 Denial of service via overly long form variables CVE-2017-11143 Invalid free() in wddx_deserialize() CVE-2017-11144 Denial of service in openssl extension due to incorrect return value check of OpenSSL sealing function. CVE-2017-11145 Out-of-bounds read in wddx_deserialize() CVE-2017-11628 Buffer overflow in PHP INI parsing API CVE-2017-12933 Buffer overread in finish_nested_data() CVE-2017-16642 Out-of-bounds read in timelib_meridian() Affected Software/OS: php5 on Debian Linux Solution: For the oldstable distribution (jessie), these problems have been fixed in version 5.6.33+dfsg-0+deb8u1. We recommend that you upgrade your php5 packages. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C |
Cross-Ref: |
Common Vulnerability Exposure (CVE) ID: CVE-2017-11142 Common Vulnerability Exposure (CVE) ID: CVE-2017-11143 Common Vulnerability Exposure (CVE) ID: CVE-2017-11144 Common Vulnerability Exposure (CVE) ID: CVE-2017-11145 Common Vulnerability Exposure (CVE) ID: CVE-2017-11628 Common Vulnerability Exposure (CVE) ID: CVE-2017-12933 Common Vulnerability Exposure (CVE) ID: CVE-2017-16642 |
Copyright | Copyright (C) 2018 Greenbone Networks GmbH |
This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |