Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

PHP 7.1.x < 7.1.7 Multiple Vulnerabilities

🗓️ 09 Jan 2019 00:00:00Reported by This script is Copyright (C) 2019-2026 and is owned by Tenable, Inc. or an Affiliate thereof.Type 
nessus
 nessus🔗 www.tenable.com👁 75 Views

PHP 7.1.x < 7.1.7 Multiple Vulnerabilities. Remote attackers can exploit out-of-bounds read and write errors in GD Graphics Library, Oniguruma, and PHP, leading to memory disclosure, denial of service, or arbitrary code execution. Improper input validation in INI parsing API and stack-based buffer overflow in PHP also pose risks

Related
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: Vulnerabilities in php53 affect IBM BladeCenter Advanced Management Module (AMM) (CVE-2017-9227, CVE-2017-9226, CVE-2017-9224)
14 Apr 202314:32
–ibm
IBM Security Bulletins		Security Bulletin: A vulnerability in PHP affects PowerKVM
18 Jun 201801:42
–ibm
IBM Security Bulletins		Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabilities in php
27 Jul 201801:22
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in php5 affect IBM Flex System Manager (FSM) (CVE-2017-9227, CVE-2017-9226 CVE-2017-9224)
18 Jun 201801:38
–ibm
IBM Security Bulletins		Security Bulletin: Multiple Security Issues in IBM Tealeaf Customer Experience PCA
23 Jun 201803:45
–ibm
IBM Security Bulletins		Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in php5 (CVE-2017-9228 CVE-2017-9229)
7 Dec 202322:31
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in PHP affect IBM Chassis Management Module (CVE-2017-9227, CVE-2017-9226, CVE-2017-9224)
31 Jan 201902:25
–ibm
ALT Linux		Security fix for the ALT Linux 8 package oniguruma version 6.4.0-alt1
12 Jul 201700:00
–altlinux
FreeBSD		php-gd and gd -- Buffer over-read into uninitialized memory
2 Aug 201700:00
–freebsd
FreeBSD		oniguruma -- multiple vulnerabilities
6 Jul 201700:00
–freebsd
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
14 Mar 2023 00:00Current
9.7High risk
Vulners AI Score9.7
CVSS 27.5
CVSS 39.8
CVSS 3.19.8
EPSS0.40698
php 7.1.xvulnerabilitiesremote attackersmemory disclosuredenial of servicearbitrary code executionimproper input validationstack-based buffer overflow
75