Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.704081
Category:Debian Local Security Checks
Title:Debian Security Advisory DSA 4081-1 (php5 - security update)
Summary:Several vulnerabilities were found in PHP, a widely-used open source;general purpose scripting language:;;CVE-2017-11142;Denial of service via overly long form variables;;CVE-2017-11143;Invalid free() in wddx_deserialize();;CVE-2017-11144;Denial of service in openssl extension due to incorrect return value;check of OpenSSL sealing function.;;CVE-2017-11145;Out-of-bounds read in wddx_deserialize();;CVE-2017-11628;Buffer overflow in PHP INI parsing API;;CVE-2017-12933;Buffer overread in finish_nested_data();;CVE-2017-16642;Out-of-bounds read in timelib_meridian()
Description:Summary:
Several vulnerabilities were found in PHP, a widely-used open source
general purpose scripting language:

CVE-2017-11142
Denial of service via overly long form variables

CVE-2017-11143
Invalid free() in wddx_deserialize()

CVE-2017-11144
Denial of service in openssl extension due to incorrect return value
check of OpenSSL sealing function.

CVE-2017-11145
Out-of-bounds read in wddx_deserialize()

CVE-2017-11628
Buffer overflow in PHP INI parsing API

CVE-2017-12933
Buffer overread in finish_nested_data()

CVE-2017-16642
Out-of-bounds read in timelib_meridian()

Affected Software/OS:
php5 on Debian Linux

Solution:
For the oldstable distribution (jessie), these problems have been fixed
in version 5.6.33+dfsg-0+deb8u1.

We recommend that you upgrade your php5 packages.

CVSS Score:
7.8

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2017-11142
Common Vulnerability Exposure (CVE) ID: CVE-2017-11143
Common Vulnerability Exposure (CVE) ID: CVE-2017-11144
Common Vulnerability Exposure (CVE) ID: CVE-2017-11145
Common Vulnerability Exposure (CVE) ID: CVE-2017-11628
Common Vulnerability Exposure (CVE) ID: CVE-2017-12933
Common Vulnerability Exposure (CVE) ID: CVE-2017-16642
CopyrightCopyright (C) 2018 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2024 E-Soft Inc. All rights reserved.