Lucene search

K
mageiaGentoo FoundationMGASA-2023-0234
HistoryJul 19, 2023 - 10:53 p.m.

Updated php packages fix security vulnerability

2023-07-1922:53:31
Gentoo Foundation
advisories.mageia.org
20
php
security vulnerability
soap bug
http digest authentication
unix

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

21.5%

Fixed SOAP bug GHSA-76gg-c692-v2mw (Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP). (CVE-2023-3247)

OSVersionArchitecturePackageVersionFilename
Mageia8noarchphp< 8.0.29-1php-8.0.29-1.mga8

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

21.5%