Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2017-8923HistoryMay 12, 2017 - 8:29 p.m.
CVE-2017-8923
2017-05-1220:29:00
Debian Security Bug Tracker
security-tracker.debian.org
20
0.005 Low
EPSS
Percentile
77.4%
The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script’s use of .= with a long string.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | php7.0 | <= 7.0.33-0+deb9u8 | php7.0_7.0.33-0+deb9u8_all.deb |
Related
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:0699-1)
2022-03-04 00:00:00
openSUSE: Security Advisory for php7 (openSUSE-SU-2022:0699-1)
2022-03-05 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:0530-1)
2022-02-22 00:00:00
ubuntucve
ubuntucve
CVE-2017-8923
2017-05-12 00:00:00
nessus
nessus
SUSE SLES12 Security Update : php74 (SUSE-SU-2022:0530-1)
2022-02-22 00:00:00
openSUSE 15 Security Update : php7 (openSUSE-SU-2022:0699-1)
2022-03-05 00:00:00
SUSE SLES15 Security Update : php7 (SUSE-SU-2022:0699-1)
2022-03-22 00:00:00
cvelist
cvelist
CVE-2017-8923
2017-05-12 20:00:00
suse
suse
Security update for php7 (moderate)
2022-03-04 00:00:00
Security update for php7 (moderate)
2022-03-02 00:00:00
Security update for nodejs8 (important)
2022-03-04 00:00:00
cbl_mariner
cbl_mariner
CVE-2017-8923 affecting package php 7.4.14-3
2024-06-29 09:08:33
osv
osv
CVE-2017-8923
2017-05-12 20:29:00
php7.2, php7.4 vulnerabilities
2022-03-03 13:58:39
php7.0 vulnerabilities
2022-02-22 20:26:05
nvd
nvd
CVE-2017-8923
2017-05-12 20:29:00
redhatcve
redhatcve
CVE-2017-8923
2017-05-17 15:10:25
prion
prion
Design/Logic Flaw
2017-05-12 20:29:00
veracode
veracode
Denial Of Service (DoS)
2022-03-08 17:02:50
cve
cve
CVE-2017-8923
2017-05-12 20:29:00
ubuntu
ubuntu
PHP vulnerabilities
2022-02-22 00:00:00
PHP vulnerabilities
2022-03-07 00:00:00
PHP vulnerabilities
2022-03-03 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45