PT-2017-19450 · Php · Php

Published 2017-11-16 · Updated 2017-11-16

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions PHP (affected versions not specified)

Description The issue involves security vulnerabilities in PHP, including an Out-Of-Bounds Read in the timelib meridian() function within the Date module and a crash in the php-mcrypt module due to the Arcfour encryption stream filter.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2017-0412

Affected Products

Php

References · 4

• https://advisories.mageia.org/MGASA-2017-0412.html · Security Note
• https://osv.dev/vulnerability/MGASA-2017-0412 · Vendor Advisory
• https://bugs.mageia.org/show_bug.cgi?id=21991 · Note
• http://php.net/ChangeLog-5.php#5.6.32 · Note