K20289222: Multiple PHP vulnerabilities

🗓️ 21 Feb 2023 18:33:24Reported by f5Type

f5🔗 my.f5.com👁 134 Views

PHP vulnerabilities in versions before 5.6.28 & 7.x before 7.0.13 allow attackers to bypass URL checks, cause denial of service, crash interpreter, and leak information

Reporter	Title	Published	Views	Family All 182
IBM Security Bulletins	Security Bulletin: Vulnerability in PHP affect IBM Chassis Management Module (CMM)	31 Jan 201902:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Issues in IBM Tealeaf Customer Experience PCA	23 Jun 201803:45	–	ibm
ATTACKERKB	CVE-2017-16642	7 Nov 201721:29	–	attackerkb
BDU FSTEC	The vulnerability of the PHP interpreter allows attackers to trigger a service failure for the central processor.	20 Jul 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the phar_parse_pharfile function (ext/phar/phar.c), a PHAR archive handler, allows a attacker to cause a service failure.	12 Jan 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the wddx_deserialize() function in the PHP programming language lies in the use of memory after it is freed, allowing an attacker to trigger a denial-of-service attack.	20 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the timelib_meridian() function in the PHP programming language allows a attacker to compromise the confidentiality of sensitive information.	20 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the openssl extension (ext/openssl/openssl.c) in the PHP programming language interpreter allows a attacker to cause a service failure.	20 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `parse_url` function in the PHP programming language allows attackers to replace the displayed URL with an alternative one.	25 Apr 202200:00	–	bdu_fstec
CNVD	PHP Denial of Service Vulnerability (CNVD-2017-22591)	11 Jul 201700:00	–	cnvd

21 Feb 2023 18:33Current

7.2High risk

Vulners AI Score7.2

CVSS 27.8

CVSS 37.5

CVSS 3.19.1

EPSS0.08255