Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debianDebianDEBIAN:DLA-1591-1:BE93D
HistoryNov 23, 2018 - 9:41 a.m.

[SECURITY] [DLA 1591-1] libphp-phpmailer security update

2018-11-2309:41:54
lists.debian.org
199

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8

Confidence

High

EPSS

0.923

Percentile

99.0%

JSON

Package : libphp-phpmailer
Version : 5.2.9+dfsg-2+deb8u4
CVE IDs : CVE-2017-5223 CVE-2018-19296

It was discovered that there were two vulnerabilities libphp-phpmailer, an
email library for the PHP programming language:

  • CVE-2017-5223: Local file disclosure vulnerability via relative path
    HTML transformations.

  • CVE-2018-19296: Object injection attack.

For Debian 8 "Jessie", this issue has been fixed in libphp-phpmailer version
5.2.9+dfsg-2+deb8u4.

We recommend that you upgrade your libphp-phpmailer packages.

Regards,

  ,''`.
 : :'  :     Chris Lamb
 `. `'`      [email protected] / chris-lamb.co.uk
   `-
OSVersionArchitecturePackageVersionFilename
Debian8alllibphp-phpmailer< 5.2.9+dfsg-2+deb8u4libphp-phpmailer_5.2.9+dfsg-2+deb8u4_all.deb

Related

osv 14
openvas 23
nessus 14
debian 5
fedora 9
mageia 2
prion 3
veracode 2
debiancve 3
friendsofphp 3
cvelist 3
cve 3
freebsd 2
nvd 3
ubuntucve 3
github 3
seebug 1
packetstorm 1
zdt 1
exploitpack 1
exploitdb 1
altlinux 1
checkpoint_advisories 1
wpvulndb 1
ubuntu 2
redhatcve 1
osv
osv
libphp-phpmailer - security update
2018-11-23 00:00:00
Phar object injection in PHPMailer
2020-03-05 22:08:55
libphp-phpmailer - security update
2018-12-07 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-1591-1)
2018-11-22 00:00:00
Fedora Update for php-PHPMailer FEDORA-2018-a2e9bd6eae
2019-05-07 00:00:00
Fedora Update for php-PHPMailer FEDORA-2018-f73869d61e
2018-12-04 00:00:00
nessus
nessus
FreeBSD : phpmailer -- Multiple vulnerability (b036faba-edd8-11e8-b3b7-00e04c1ea73d)
2018-11-23 00:00:00
Fedora 28 : php-PHPMailer (2018-f73869d61e)
2019-01-03 00:00:00
Debian DSA-4351-1 : libphp-phpmailer - security update
2018-12-10 00:00:00
debian
debian
[SECURITY] [DLA 1591-2] libphp-phpmailer regression update
2018-12-28 04:46:46
[SECURITY] [DSA 4351-1] libphp-phpmailer security update
2018-12-07 14:51:30
[SECURITY] [DSA 4351-1] libphp-phpmailer security update
2018-12-07 14:51:30
fedora
fedora
[SECURITY] Fedora 27 Update: php-phpmailer6-6.0.6-1.fc27
2018-11-27 03:13:45
[SECURITY] Fedora 27 Update: php-PHPMailer-5.2.27-1.fc27
2018-11-27 03:13:43
[SECURITY] Fedora 28 Update: php-PHPMailer-5.2.27-1.fc28
2018-11-27 17:13:29
mageia
mageia
Updated php-phpmailer package fixes security vulnerability
2019-01-05 21:30:16
Updated php-phpmailer packages fix security vulnerabilities
2017-01-27 12:19:09
prion
prion
Design/Logic Flaw
2018-11-16 09:29:00
Design/Logic Flaw
2017-01-16 06:59:00
Deserialization of untrusted data
2021-04-28 03:15:00
veracode
veracode
Object Injection Attack
2018-11-19 05:29:39
Local File Inclusion
2017-07-25 08:04:33
debiancve
debiancve
CVE-2018-19296
2018-11-16 09:29:00
CVE-2017-5223
2017-01-16 06:59:00
CVE-2020-36326
2021-04-28 03:15:07
friendsofphp
friendsofphp
Object injection
2017-07-26 00:41:32
Local File Disclosure
2016-01-06 21:35:04
Object injection via local phar file
2021-04-29 12:16:00
cvelist
cvelist
CVE-2018-19296
2018-11-16 09:00:00
CVE-2017-5223
2017-01-16 06:00:00
CVE-2020-36326
2021-04-28 02:21:53
cve
cve
CVE-2018-19296
2018-11-16 09:29:00
CVE-2017-5223
2017-01-16 06:59:00
CVE-2020-36326
2021-04-28 03:15:07
freebsd
freebsd
phpmailer -- Multiple vulnerability
2018-11-16 00:00:00
phpmailer -- Remote Code Execution
2017-01-10 00:00:00
nvd
nvd
CVE-2018-19296
2018-11-16 09:29:00
CVE-2017-5223
2017-01-16 06:59:00
CVE-2020-36326
2021-04-28 03:15:07
ubuntucve
ubuntucve
CVE-2018-19296
2018-11-16 00:00:00
CVE-2017-5223
2017-01-16 00:00:00
CVE-2020-36326
2021-04-28 00:00:00
github
github
Phar object injection in PHPMailer
2020-03-05 22:08:55
Local file disclosure in PHPMailer
2020-03-05 22:09:10
Object injection in PHPMailer/PHPMailer
2021-05-04 17:42:13
seebug
seebug
PHPMailer local file read Vulnerability (CVE-2017-5223)
2017-01-12 00:00:00
packetstorm
packetstorm
PHPMailer 5.2.21 Local File Disclosure
2017-10-26 00:00:00
zdt
zdt
PHPMailer 5.2.21 Local File Disclosure Exploit
2017-10-26 00:00:00
exploitpack
exploitpack
PHPMailer 5.2.21 - Local File Disclosure
2017-10-25 00:00:00
exploitdb
exploitdb
PHPMailer &lt; 5.2.21 - Local File Disclosure
2017-10-25 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package phpipam version 1.27.002-alt1
2017-01-10 00:00:00
checkpoint_advisories
checkpoint_advisories
PHPMailer Local Information Disclosure (CVE-2017-5223) - Ver2
2018-04-11 00:00:00
wpvulndb
wpvulndb
WordPress 3.7 to 5.7.1 - Object Injection in PHPMailer
2021-05-13 00:00:00
ubuntu
ubuntu
PHPMailer vulnerabilities
2023-03-15 00:00:00
PHPMailer vulnerability
2023-03-15 00:00:00
redhatcve
redhatcve
CVE-2020-36326
2022-05-21 00:22:19

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8

Confidence

High

EPSS

0.923

Percentile

99.0%

JSON
Related for DEBIAN:DLA-1591-1:BE93D
osv14openvas23nessus14debian5fedora9mageia2prion3veracode2debiancve3friendsofphp3cvelist3cve3freebsd2nvd3ubuntucve3github3seebug1packetstorm1zdt1exploitpack1exploitdb1altlinux1checkpoint_advisories1wpvulndb1ubuntu2redhatcve1