Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
oraclelinuxOracleLinuxELSA-2017-3221
HistoryNov 15, 2017 - 12:00 a.m.

php security update

2017-11-1500:00:00
linux.oracle.com
15

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

86.7%

JSON

[5.4.16-43]

  • gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
  • gd: Signed Integer Overflow gd_io.c CVE-2016-10168
OSVersionArchitecturePackageVersionFilename
oracle linux7srcphp< 5.4.16-43.el7_4php-5.4.16-43.el7_4.src.rpm
oracle linux7aarch64php< 5.4.16-43.el7_4php-5.4.16-43.el7_4.aarch64.rpm
oracle linux7aarch64php-bcmath< 5.4.16-43.el7_4php-bcmath-5.4.16-43.el7_4.aarch64.rpm
oracle linux7aarch64php-cli< 5.4.16-43.el7_4php-cli-5.4.16-43.el7_4.aarch64.rpm
oracle linux7aarch64php-common< 5.4.16-43.el7_4php-common-5.4.16-43.el7_4.aarch64.rpm
oracle linux7aarch64php-dba< 5.4.16-43.el7_4php-dba-5.4.16-43.el7_4.aarch64.rpm
oracle linux7aarch64php-devel< 5.4.16-43.el7_4php-devel-5.4.16-43.el7_4.aarch64.rpm
oracle linux7aarch64php-embedded< 5.4.16-43.el7_4php-embedded-5.4.16-43.el7_4.aarch64.rpm
oracle linux7aarch64php-enchant< 5.4.16-43.el7_4php-enchant-5.4.16-43.el7_4.aarch64.rpm
oracle linux7aarch64php-fpm< 5.4.16-43.el7_4php-fpm-5.4.16-43.el7_4.aarch64.rpm
Rows per page:
1-10 of 521

Related

nessus 35
ibm 1
centos 1
openvas 15
redhat 2
mageia 2
debian 3
osv 4
fedora 2
alpinelinux 2
ubuntucve 2
redhatcve 2
veracode 3
prion 2
cve 2
debiancve 2
slackware 3
f5 1
amazon 2
ubuntu 1
cloudfoundry 1
suse 4
fortinet 1
nessus
nessus
RHEL 7 : php (RHSA-2017:3221)
2017-11-15 00:00:00
Virtuozzo 7 : php / php-bcmath / php-cli / php-common / php-dba / etc (VZLSA-2017-3221)
2017-11-20 00:00:00
Scientific Linux Security Update : php on SL7.x x86_64 (20171115)
2017-11-16 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in PHP affect PowerKVM
2018-06-18 01:40:47
centos
centos
php security update
2017-11-15 21:26:52
openvas
openvas
RedHat Update for php RHSA-2017:3221-01
2017-11-15 00:00:00
Huawei EulerOS: Security Advisory for php (EulerOS-SA-2017-1302)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2020-1384)
2020-04-16 00:00:00
redhat
redhat
(RHSA-2017:3221) Moderate: php security update
2017-11-15 04:10:03
(RHSA-2018:1296) Moderate: rh-php70-php security, bug fix, and enhancement update
2018-05-03 03:21:11
mageia
mageia
Updated libwmf packages fix security vulnerability
2017-03-25 19:56:41
Updated libgd packages fix security vulnerability
2017-02-20 16:00:19
debian
debian
[SECURITY] [DLA 804-1] libgd2 security update
2017-01-29 10:06:25
[SECURITY] [DSA 3777-1] libgd2 security update
2017-01-31 18:40:49
[SECURITY] [DSA 3777-1] libgd2 security update
2017-01-31 18:40:49
osv
osv
libgd2 - security update
2017-01-29 00:00:00
CVE-2016-10168
2017-03-15 15:59:00
CVE-2016-10167
2017-03-15 15:59:00
fedora
fedora
[SECURITY] Fedora 24 Update: libwmf-0.2.8.4-50.fc24
2017-03-13 23:52:40
[SECURITY] Fedora 25 Update: libwmf-0.2.8.4-50.fc25
2017-02-10 14:25:40
alpinelinux
alpinelinux
CVE-2016-10168
2017-03-15 15:59:00
CVE-2016-10167
2017-03-15 15:59:00
ubuntucve
ubuntucve
CVE-2016-10168
2016-12-31 00:00:00
CVE-2016-10167
2016-12-31 00:00:00
redhatcve
redhatcve
CVE-2016-10167
2017-02-03 11:18:38
CVE-2016-10168
2019-10-19 12:31:11
veracode
veracode
Denial Of Service (DoS) Via Integer Overflow
2018-05-03 08:04:16
Denial Of Service (DoS)
2018-04-23 08:32:13
Use After Free
2019-05-16 02:59:58
prion
prion
Integer overflow
2017-03-15 15:59:00
Code injection
2017-03-15 15:59:00
cve
cve
CVE-2016-10168
2017-03-15 15:59:00
CVE-2016-10167
2017-03-15 15:59:00
debiancve
debiancve
CVE-2016-10168
2017-03-15 15:59:00
CVE-2016-10167
2017-03-15 15:59:00
slackware
slackware
[slackware-security] gd
2017-07-18 23:14:05
[slackware-security] php
2017-02-10 20:41:10
[slackware-security] libwmf
2018-05-01 01:19:49
f5
f5
K23731034 : PHP & libGD vulnerability CVE-2016-10167
2017-04-07 00:00:00
amazon
amazon
Medium: php56
2017-03-28 23:30:00
Medium: php70
2017-03-29 20:15:00
ubuntu
ubuntu
GD library vulnerabilities
2017-02-28 00:00:00
cloudfoundry
cloudfoundry
USN-3213-1: GD library vulnerabilities | Cloud Foundry
2017-03-31 00:00:00
suse
suse
Security update for php53 (important)
2017-02-27 18:08:46
Security update for php5 (important)
2017-02-23 15:08:17
Security update for php7 (important)
2017-02-22 15:08:24
fortinet
fortinet
LibGD security advisory [18 January 2017]
2017-07-26 00:00:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

86.7%

JSON
Related for ELSA-2017-3221
nessus35ibm1centos1openvas15redhat2mageia2debian3osv4fedora2alpinelinux2ubuntucve2redhatcve2veracode3prion2cve2debiancve2slackware3f51amazon2ubuntu1cloudfoundry1suse4fortinet1