Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Masonm

#37595of 53,624
7.5Total CVSS
Vulnerabilities · 1
PT-2016-2121
7.5
2016-04-21
Php · Php · CVE-2015-8867
**Name of the Vulnerable Software and Affected Versions** PHP versions prior to 5.4.44 PHP versions 5.5.x prior to 5.5.28 PHP versions 5.6.x prior to 5.6.12 **Description** The issue is related to the incorrect interaction of the openssl random pseudo bytes function with the deprecated RAND pseudo bytes function in PHP. This can allow a remote attacker to defeat cryptographic protection mechanisms. **Recommendations** For PHP versions prior to 5.4.44, update to version 5.4.44 or later. For PHP versions 5.5.x prior to 5.5.28, update to version 5.5.28 or later. For PHP versions 5.6.x prior to 5.6.12, update to version 5.6.12 or later.