Lucene search
+L

Fedora Update for php-symfony FEDORA-2018-2bdfc9dc67

🗓️ 08 Jul 2018 00:00:00Reported by Copyright (C) 2018 Greenbone AGType 
openvas
 openvas
🔗 plugins.openvas.org👁 27 Views

The remote host is missing an update for the 'php-symfony' package(s) announced via the referenced advisory

Related
Refs
Code
ReporterTitlePublishedViews
Family
attackerkb
ATTACKERKB
CVE-2017-16652
13 Jun 201816:29
attackerkb
bdu_fstec
BDU FSTEC
The vulnerabilities of the DefaultAuthenticationSuccessHandler and DefaultAuthenticationFailureHandler components of the Symfony software development and web application management platform allow attackers to carry out phishing attacks and gain access to protected information.
19 Nov 201900:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of the Security component in the Symfony software development and web application management platform allows attackers to escalate their privileges.
25 Nov 201900:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of the HttpFoundation component in the Symfony software development and web application management platform allows attackers to induce a service failure.
25 Nov 201900:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of the Security component in the Symfony software development and web application management platform allows a hacker to perform cross-site forgery attacks.
25 Nov 201900:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability in the security.http.utils component of the Symfony software development and web application management platform allows attackers to carry out phishing attacks and gain access to protected information.
25 Nov 201900:00
bdu_fstec
circl
Circl
CVE-2018-11406
26 May 201816:56
circl
cnvd
CNVD
Symfony Session Fixation Vulnerability
14 Jun 201800:00
cnvd
cnvd
CNVD
Symfony Open Redirect Vulnerability
14 Jun 201800:00
cnvd
cnvd
CNVD
Symfony Authentication Bypass Vulnerability
14 Jun 201800:00
cnvd
Rows per page
# SPDX-FileCopyrightText: 2018 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.874782");
  script_version("2023-06-28T05:05:21+0000");
  script_tag(name:"last_modification", value:"2023-06-28 05:05:21 +0000 (Wed, 28 Jun 2023)");
  script_tag(name:"creation_date", value:"2018-07-08 06:05:44 +0200 (Sun, 08 Jul 2018)");
  script_cve_id("CVE-2017-16652", "CVE-2018-11385", "CVE-2018-11386", "CVE-2018-11406",
                "CVE-2018-11407", "CVE-2018-11408");
  script_tag(name:"cvss_base", value:"7.5");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_tag(name:"severity_vector", value:"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2018-08-03 12:45:00 +0000 (Fri, 03 Aug 2018)");
  script_tag(name:"qod_type", value:"package");
  script_name("Fedora Update for php-symfony FEDORA-2018-2bdfc9dc67");
  script_tag(name:"summary", value:"The remote host is missing an update for the 'php-symfony'
  package(s) announced via the referenced advisory.");
  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present
on the target host.");
  script_tag(name:"affected", value:"php-symfony on Fedora 27");
  script_tag(name:"solution", value:"Please install the updated packages.");

  script_xref(name:"FEDORA", value:"2018-2bdfc9dc67");
  script_xref(name:"URL", value:"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZ3EMFATZORKWAJJPIBTEN56NNCCJXBQ");
  script_tag(name:"solution_type", value:"VendorFix");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2018 Greenbone AG");
  script_family("Fedora Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/fedora", "ssh/login/rpms", re:"ssh/login/release=FC27");

  exit(0);
}

include("revisions-lib.inc");
include("pkg-lib-rpm.inc");

release = rpm_get_ssh_release();
if(!release)
  exit(0);

res = "";

if(release == "FC27")
{

  if ((res = isrpmvuln(pkg:"php-symfony", rpm:"php-symfony~2.8.42~1.fc27", rls:"FC27")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if (__pkg_match) exit(99);
  exit(0);
}

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

28 Jun 2023 00:00Current
7High risk
Vulners AI Score7
CVSS 27.5
CVSS 39.8
EPSS0.02345
27