34 matches found
[SECURITY] [DSA 4353-1] php7.0 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4353-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 10, 2018 https://www.debian.org/security/faq -...
GLSA-201812-01 : PHP: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201812-01 PHP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in PHP. Please review the referenced CVE identifiers for details. Impact : An attacker could cause a Denial of Service condition or obtain...
openSUSE: Security Advisory for php7 (openSUSE-SU-2018:3062-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Amazon Linux AMI : php56 / php70, php71, php72 (ALAS-2018-1090)
The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a 'Transfer-Encoding: chunked' request, because the bucket brigade is mishandled in the phphandler function in sapi/apache2handler/sapiapache2.c. CVE-2018-17082...
openSUSE Security Update : php5 (openSUSE-2018-1130)
This update for php5 fixes the following issue : - CVE-2018-17082: The Apache2 component in PHP allowed XSS via the body of a 'Transfer-Encoding: chunked' request, because the bucket brigade was mishandled in the phphandler function bsc1108753 This update was imported from the SUSE:SLE-12:Update...
openSUSE Security Update : php7 (openSUSE-2018-1131)
This update for php7 fixes the following issues : This security issue was fixed : - CVE-2018-17082: The Apache2 component in PHP allowed XSS via the body of a 'Transfer-Encoding: chunked' request, because the bucket brigade was mishandled in the phphandler function bsc1108753 This non-security...
SUSE SLES11 Security Update : php53 (SUSE-SU-2018:3018-1)
This update for php53 fixes the following issue : CVE-2018-17082: The Apache2 component in PHP allowed XSS via the body of a 'Transfer-Encoding: chunked' request, because the bucket brigade was mishandled in the phphandler function bsc1108753 Note that Tenable Network Security has extracted the...
openSUSE: Security Advisory for php5 (openSUSE-SU-2018:3056-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE: Security Advisory for php7 (openSUSE-SU-2018:2929-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2018-17082
The CVE-2018-17082 entry covers a cross-site scripting vulnerability in the Apache2 module of PHP. Affected releases are PHP with Apache2 handler: PHP 5.6.38 and earlier in 5.6.x; 7.0.x before 7.0.32; 7.1.x before 7.1.22; and 7.2.x before 7.2.10. The root cause is mishandling of the bucket brigad...
CVE-2018-17082
Removed by vendor...
Microsoft Windows GDI Information Disclosure Vulnerability (CNVD-2018-17082)
Microsoft Windows 7 SP1 and others are a series of operating systems released by Microsoft.Windows Graphics Device Interface GDI is one of the graphics device interfaces. An information disclosure vulnerability exists in Microsoft Windows GDI. A remote attacker could exploit this vulnerability to...
