Skip to content
OpenAdvisories
High WID-SEC-2023-2718 5 CVEs

PHP: Mehrere Schwachstellen

Published Jul 9, 2017 · Updated Dec 4, 2023 · Revision 17 · de-DE

Vendor: amazon Vendor: Debian Vendor: NETAPP Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: Data ONTAP Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um einen Denial of Service Angriff durchzuführen, Informationen offenzulegen, Dateien zu manipulieren und beliebigen Programmcode mit den Rechten des Dienstes ausführen zu können.

Product

PHP ist eine Programmiersprache, die zur Implementierung von Web-Applikationen genutzt wird.

Vulnerabilities 5

  • Unscored —
    CVE-2017-11145

    In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelib_meridian pars…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2017-11146 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…

  • Unscored —
    CVE-2017-11147

    In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying malicious arc…

    php5 Ubuntu
  • Unscored —
    CVE-2017-9228

    An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through …

    php5 php7.0 php7 php5 Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-9229

    An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through …

    php5 php7.0 php7 php5 Debian Ubuntu Alpine

Revision history

  1. #17

    Neue Updates von Amazon aufgenommen

  2. #16

    Neue Updates von Amazon aufgenommen

  3. #15

    New remediations available

  4. #13

    New remediations available

  5. #14

    Version nicht vorhanden

  6. #12

    New remediations available

  7. #11

    New remediations available

  8. #10

    New remediations available

  9. #9

    New remediations available

  10. #8

    New remediations available

  11. #7

    Added references

  12. #6

    New remediations available

  13. #5

    New remediations available

  14. #4

    New remediations available

  15. #2

    CVEs added

  16. #3

    Version nicht vorhanden

  17. #1

    Initial Release

References