PT-2016-2121 · Php+1 · Php+1

Masonm

·

Publicado

2016-04-21

·

Atualizado

2019-02-14

·

CVE-2015-8867

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.44 PHP versions 5.5.x prior to 5.5.28 PHP versions 5.6.x prior to 5.6.12
Description The issue is related to the incorrect interaction of the openssl random pseudo bytes function with the deprecated RAND pseudo bytes function in PHP. This can allow a remote attacker to defeat cryptographic protection mechanisms.
Recommendations For PHP versions prior to 5.4.44, update to version 5.4.44 or later. For PHP versions 5.5.x prior to 5.5.28, update to version 5.5.28 or later. For PHP versions 5.6.x prior to 5.6.12, update to version 5.6.12 or later.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

BDU:2016-01474
CVE-2015-8867
OPENSUSE-SU-2016_1274-1
OPENSUSE-SU-2016_1373-1
RHSA-2016:2750
SUSE-SU-2016:1277-1
SUSE-SU-2016:1310-1
SUSE-SU-2016:1581-1
SUSE-SU-2016:1638-1
USN-2952-1

Produtos afetados

Php
Suse