Skip to content
OpenAdvisories
Low USN-6199-2 1 CVE

php7.0, php7.2 vulnerability

Published Oct 23, 2023 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

USN-6199-1 fixed a vulnerability in PHP. This update provides the
corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.

Original advisory details:

It was discovered that PHP incorrectly handled certain Digest
authentication for SOAP. An attacker could possibly use this issue
to expose sensitive information.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS php7.0 7.0.33-0ubuntu0.16.04.16+esm7
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS php7.2 7.2.24-0ubuntu0.18.04.17+esm1

Vulnerabilities 1

  • Low 2.6
    CVE-2023-3247

    Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP

    In PHP versions 8.0.* before 8.0.29, 8.1.* before 8.1.20, 8.2.* before 8.2.7 when using SOAP HTTP Digest Authentication, random value generator was not checked for failure, and was using narrower range of values than it should have. In case of random generato…

    PHP Group PHP php5 php7.0 Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2023-3247