[SECURITY] [DSA 4081-1] php5 security update

🗓️ 08 Jan 2018 22:33:54Reported by DebianType

debian

debian🔗 lists.debian.org👁 70 Views

PHP5 Denial of Service and Buffer Overflow CVE

Reporter	Title	Published	Views	Family All 242
0day.today	PHP 7.1.8 - Heap-Based Buffer Overflow Vulnerability	15 Nov 201700:00	–	zdt
IBM Security Bulletins	Security Bulletin: Multiple Security Issues in IBM Tealeaf Customer Experience PCA	23 Jun 201803:45	–	ibm
ATTACKERKB	CVE-2017-16642	7 Nov 201721:29	–	attackerkb
BDU FSTEC	The vulnerability of the PHP interpreter allows attackers to trigger a service failure for the central processor.	20 Jul 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `finish_nested_data` function in the PHP interpreter allows a attacker to potentially compromise the integrity of data.	13 Sep 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the wddx_deserialize() function in the PHP programming language lies in the use of memory after it is freed, allowing an attacker to trigger a denial-of-service attack.	20 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the zend_ini_do_op() function in the PHP interpreter allows a hacker to execute arbitrary PHP code.	20 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the timelib_meridian() function in the PHP programming language allows a attacker to compromise the confidentiality of sensitive information.	20 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the ext/date/lib/parse_date.c component of the PHP interpreter allows a attacker to compromise the confidentiality of information.	20 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the openssl extension (ext/openssl/openssl.c) in the PHP programming language interpreter allows a attacker to cause a service failure.	20 Apr 202200:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	8	amd64	libapache2-mod-php5	5.6.33+dfsg-0+deb8u1	libapache2-mod-php5_5.6.33+dfsg-0+deb8u1_amd64.deb
Debian	8	arm64	libapache2-mod-php5	5.6.33+dfsg-0+deb8u1	libapache2-mod-php5_5.6.33+dfsg-0+deb8u1_arm64.deb
Debian	8	armel	libapache2-mod-php5	5.6.33+dfsg-0+deb8u1	libapache2-mod-php5_5.6.33+dfsg-0+deb8u1_armel.deb
Debian	8	armhf	libapache2-mod-php5	5.6.33+dfsg-0+deb8u1	libapache2-mod-php5_5.6.33+dfsg-0+deb8u1_armhf.deb
Debian	8	i386	libapache2-mod-php5	5.6.33+dfsg-0+deb8u1	libapache2-mod-php5_5.6.33+dfsg-0+deb8u1_i386.deb
Debian	8	mips	libapache2-mod-php5	5.6.33+dfsg-0+deb8u1	libapache2-mod-php5_5.6.33+dfsg-0+deb8u1_mips.deb
Debian	8	mipsel	libapache2-mod-php5	5.6.33+dfsg-0+deb8u1	libapache2-mod-php5_5.6.33+dfsg-0+deb8u1_mipsel.deb
Debian	8	powerpc	libapache2-mod-php5	5.6.33+dfsg-0+deb8u1	libapache2-mod-php5_5.6.33+dfsg-0+deb8u1_powerpc.deb
Debian	8	ppc64el	libapache2-mod-php5	5.6.33+dfsg-0+deb8u1	libapache2-mod-php5_5.6.33+dfsg-0+deb8u1_ppc64el.deb
Debian	8	s390x	libapache2-mod-php5	5.6.33+dfsg-0+deb8u1	libapache2-mod-php5_5.6.33+dfsg-0+deb8u1_s390x.deb

08 Jan 2018 22:33Current

10High risk

Vulners AI Score10

CVSS 39.8

CVSS 27.8

EPSS0.26373

php5 denial of service buffer overflow cve-2017-11142 cve-2017-11143 cve-2017-11144 cve-2017-11145 cve-2017-11628 cve-2017-12933 cve-2017-16642 openssl wddx_deserialize timelib_meridian php ini parsing api finish_nested_data