PT-2017-19450 · Php · Php

Publicado 2017-11-16 · Atualizado 2017-11-16

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions PHP (affected versions not specified)

Description The issue involves security vulnerabilities in PHP, including an Out-Of-Bounds Read in the timelib meridian() function within the Date module and a crash in the php-mcrypt module due to the Arcfour encryption stream filter.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2017-0412

Produtos afetados

Php

Referências · 4

• https://bugs.mageia.org/show_bug.cgi?id=21991 · Nota
• http://php.net/ChangeLog-5.php#5.6.32 · Nota
• https://advisories.mageia.org/MGASA-2017-0412.html · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2017-0412 · Aviso do Fabricante