Lucene search
Gentoo FoundationGLSA-201711-15HistoryNov 19, 2017 - 12:00 a.m.
PHPUnit: Remote code execution
2017-11-1900:00:00
Gentoo Foundation
security.gentoo.org
82
0.975 High
EPSS
Percentile
100.0%
Background
PHPUnit is a programmer-oriented testing framework for PHP. It is an instance of the xUnit architecture for unit testing frameworks.
Description
When PHPUnit is installed in a production environment via composer and these modules are in a web accessible directory, the eval-stdin.php file in PHPUnit contains vulnerable statements that trigger the vulnerability.
Impact
A remote attacker could possibly execute arbitrary PHP code or cause a Denial of Service condition.
Workaround
There are several ways to fix or mitigate this vulnerability:
Remove PHPUnit from the production environment.
Update PHPUnit.
Manually apply the patch.
Disable direct access to the composer packages by placing .htaccess file to /vendor folder.
Resolution
All PHPUnit users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-php/phpunit-5.7.15-r1"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | dev-php/phpunit | < 5.7.15-r1 | UNKNOWN |
Related
prion
prion
Code injection
2017-06-27 17:29:00
wpexploit
wpexploit
Multiple Plugins - Unauthenticated RCE via PHPUnit
2017-08-26 00:00:00
cisa_kev
cisa_kev
PHPUnit Command Injection Vulnerability
2022-02-15 00:00:00
nuclei
nuclei
PHPUnit - Remote Code Execution
2020-08-07 08:02:28
friendsofphp
friendsofphp
RCE vulnerability in phpunit
2016-11-13 17:52:50
RCE vulnerability in phpunit
2016-11-13 17:52:50
osv
osv
CVE-2017-9841
2017-06-27 17:29:00
PrestaShop module ps_facetedsearch might be vulnerable from CVE-2017-9841
2020-01-07 17:20:47
openvas
openvas
PHPUnit 'CVE-2017-9841' RCE Vulnerability (HTTP) - Active Check
2018-04-14 00:00:00
Mageia: Security Advisory (MGASA-2017-0429)
2022-01-28 00:00:00
packetstorm
packetstorm
PHP Unit 4.8.28 Remote Code Execution
2022-02-02 00:00:00
wpvulndb
wpvulndb
Multiple Plugins - Unauthenticated RCE via PHPUnit
2017-08-26 00:00:00
qualysblog
qualysblog
Risk Fact #4: Malware in your Cloud means Exploitation is underway
2023-08-29 08:02:57
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
github
github
PrestaShop module ps_facetedsearch might be vulnerable from CVE-2017-9841
2020-01-07 17:20:47
zdt
zdt
PHP Unit 4.8.28 - Remote Code Execution (Unauthenticated) Exploit
2022-02-02 00:00:00
impervablog
impervablog
CrimeOps of the KashmirBlack Botnet – Part I
2020-10-22 13:07:28
The Resurrection of PHPUnit RCE Vulnerability
2020-02-18 18:27:41
cve
cve
CVE-2017-9841
2017-06-27 17:29:00
checkpoint_advisories
checkpoint_advisories
PHPUnit Command Injection (CVE-2017-9841)
2019-11-04 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2017-06-28 01:33:54
thn
thn
Kinsing Actors Exploiting Recent Linux Flaw to Breach Cloud Environments
2023-11-03 13:12:00
AndroxGh0st Malware Targets Laravel Apps to Steal Cloud Credentials
2024-03-21 12:48:00
nessus
nessus
GLSA-201711-15 : PHPUnit: Remote code execution
2017-11-20 00:00:00
Drupal PHPUnit/Mailchimp Code Execution Vulnerability
2019-09-06 00:00:00
ubuntucve
ubuntucve
CVE-2017-9841
2017-06-27 00:00:00
hackerone
hackerone
8x8: Exposed PHP dependencies at ██.8x8.com
2021-03-22 17:56:43
attackerkb
attackerkb
CVE-2017-9841
2017-06-27 00:00:00
debiancve
debiancve
CVE-2017-9841
2017-06-27 17:29:00
cvelist
cvelist
CVE-2017-9841
2017-06-27 17:00:00
exploitdb
exploitdb
PHP Unit 4.8.28 - Remote Code Execution (RCE) (Unauthenticated)
2022-02-02 00:00:00
threatpost
threatpost
Threatlist: Hackers Turn to Python as Attack Coding Language of Choice
2018-09-27 20:08:07
ics
ics
Known Indicators of Compromise Associated with Androxgh0st Malware
2024-01-16 12:00:00
mageia
mageia
Updated mediawiki packages fix security vulnerabilities
2017-11-29 21:52:42
cisa
cisa
CISA Adds Nine Known Exploited Vulnerabilities to Catalog
2022-02-15 00:00:00
freebsd
freebsd
mediawiki -- multiple vulnerabilities
2017-11-14 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00