[SECURITY] [DSA 4080-1] php7.0 security update

🗓️ 08 Jan 2018 22:30:09Reported by DebianType

php7.0 security update CVE-2017-11144, CVE-2017-11145, CVE-2017-11628, CVE-2017-12932, CVE-2017-12933, CVE-2017-12934, CVE-2017-16642 denial of service, out-of-bounds read, buffer overflow, use-after-free, buffer overread vulnerabilities fixed in version 7.0.27-0+deb9u

Reporter	Title	Published	Views	Family All 247
0day.today	PHP 7.1.8 - Heap-Based Buffer Overflow Vulnerability	15 Nov 201700:00	–	zdt
IBM Security Bulletins	Security Bulletin: Multiple Security Issues in IBM Tealeaf Customer Experience PCA	23 Jun 201803:45	–	ibm
ATTACKERKB	CVE-2017-16642	7 Nov 201721:29	–	attackerkb
BDU FSTEC	The vulnerability of the `finish_nested_data` function in the PHP interpreter allows a attacker to potentially compromise the integrity of data.	13 Sep 201700:00	–	bdu_fstec
BDU FSTEC	A vulnerability exists in the ext/standard/var_unserializer.re PHP hypertext processor, which allows an attacker to potentially compromise the integrity of data.	13 Sep 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `ext/standard/var_unserializer.re` component in the PHP programming language allows a attacker to compromise data integrity.	20 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the zend_ini_do_op() function in the PHP interpreter allows a hacker to execute arbitrary PHP code.	20 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the timelib_meridian() function in the PHP programming language allows a attacker to compromise the confidentiality of sensitive information.	20 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the ext/date/lib/parse_date.c component of the PHP interpreter allows a attacker to compromise the confidentiality of information.	20 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the openssl extension (ext/openssl/openssl.c) in the PHP programming language interpreter allows a attacker to cause a service failure.	20 Apr 202200:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	9	amd64	libapache2-mod-php7.0	7.0.27-0+deb9u1	libapache2-mod-php7.0_7.0.27-0+deb9u1_amd64.deb
Debian	9	arm64	libapache2-mod-php7.0	7.0.27-0+deb9u1	libapache2-mod-php7.0_7.0.27-0+deb9u1_arm64.deb
Debian	9	armel	libapache2-mod-php7.0	7.0.27-0+deb9u1	libapache2-mod-php7.0_7.0.27-0+deb9u1_armel.deb
Debian	9	armhf	libapache2-mod-php7.0	7.0.27-0+deb9u1	libapache2-mod-php7.0_7.0.27-0+deb9u1_armhf.deb
Debian	9	i386	libapache2-mod-php7.0	7.0.27-0+deb9u1	libapache2-mod-php7.0_7.0.27-0+deb9u1_i386.deb
Debian	9	mips	libapache2-mod-php7.0	7.0.27-0+deb9u1	libapache2-mod-php7.0_7.0.27-0+deb9u1_mips.deb
Debian	9	mips64el	libapache2-mod-php7.0	7.0.27-0+deb9u1	libapache2-mod-php7.0_7.0.27-0+deb9u1_mips64el.deb
Debian	9	mipsel	libapache2-mod-php7.0	7.0.27-0+deb9u1	libapache2-mod-php7.0_7.0.27-0+deb9u1_mipsel.deb
Debian	9	ppc64el	libapache2-mod-php7.0	7.0.27-0+deb9u1	libapache2-mod-php7.0_7.0.27-0+deb9u1_ppc64el.deb
Debian	9	s390x	libapache2-mod-php7.0	7.0.27-0+deb9u1	libapache2-mod-php7.0_7.0.27-0+deb9u1_s390x.deb

08 Jan 2018 22:30Current

10High risk

Vulners AI Score10

CVSS 27.5

CVSS 39.8

EPSS0.26373