Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-6199-2
HistoryOct 23, 2023 - 12:00 a.m.

PHP vulnerability

2023-10-2300:00:00
ubuntu.com
34
ubuntu
php7.0
php7.2
soap
authentication
vulnerability
information exposure

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

7.1 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

18.1%

JSON

Releases

  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM

Packages

  • php7.0 - HTML-embedded scripting language interpreter
  • php7.2 - HTML-embedded scripting language interpreter

Details

USN-6199-1 fixed a vulnerability in PHP. This update provides the
corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.

Original advisory details:

It was discovered that PHP incorrectly handled certain Digest
authentication for SOAP. An attacker could possibly use this issue
to expose sensitive information.

OSVersionArchitecturePackageVersionFilename
Ubuntu18.04noarchlibapache2-mod-php7.2< 7.2.24-0ubuntu0.18.04.17+esm1UNKNOWN
Ubuntu18.04noarchlibapache2-mod-php7.2< 7.2.24-0ubuntu0.18.04.17UNKNOWN
Ubuntu18.04noarchlibapache2-mod-php7.2-dbgsym< 7.2.24-0ubuntu0.18.04.17UNKNOWN
Ubuntu18.04noarchlibphp7.2-embed< 7.2.24-0ubuntu0.18.04.17UNKNOWN
Ubuntu18.04noarchlibphp7.2-embed-dbgsym< 7.2.24-0ubuntu0.18.04.17UNKNOWN
Ubuntu18.04noarchphp7.2< 7.2.24-0ubuntu0.18.04.17UNKNOWN
Ubuntu18.04noarchphp7.2-bcmath< 7.2.24-0ubuntu0.18.04.17UNKNOWN
Ubuntu18.04noarchphp7.2-bcmath-dbgsym< 7.2.24-0ubuntu0.18.04.17UNKNOWN
Ubuntu18.04noarchphp7.2-bz2< 7.2.24-0ubuntu0.18.04.17UNKNOWN
Ubuntu18.04noarchphp7.2-bz2-dbgsym< 7.2.24-0ubuntu0.18.04.17UNKNOWN
Rows per page:
1-10 of 1581

Related

veracode 1
nessus 32
cbl_mariner 1
openvas 11
ubuntucve 1
mageia 1
osv 13
cvelist 1
prion 1
ubuntu 1
cve 1
redhatcve 1
debiancve 1
debian 1
nvd 1
alpinelinux 1
redhat 3
almalinux 3
oraclelinux 3
rocky 3
hp 1
ics 1
oracle 1
veracode
veracode
Insufficient Random Numbers
2023-06-24 08:30:19
nessus
nessus
Ubuntu 16.04 ESM / 18.04 ESM : PHP vulnerability (USN-6199-2)
2023-10-23 00:00:00
PHP 8.0.x < 8.0.29
2023-06-22 00:00:00
SUSE SLES12 Security Update : php74 (SUSE-SU-2023:2848-1)
2023-07-18 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-3247 affecting package php for versions less than 8.1.22-1
2023-09-13 02:10:38
openvas
openvas
PHP < 8.0.29, 8.1.x < 8.1.20, 8.2.x < 8.2.7 Security Update - Windows
2023-06-09 00:00:00
openSUSE: Security Advisory for php7 (SUSE-SU-2023:2980-1)
2024-03-04 00:00:00
Debian: Security Advisory (DSA-5425-1)
2023-06-14 00:00:00
ubuntucve
ubuntucve
CVE-2023-3247
2023-06-19 00:00:00
mageia
mageia
Updated php packages fix security vulnerability
2023-07-19 22:53:31
osv
osv
php8.2 - security update
2023-06-13 00:00:00
php7.4, php8.1 vulnerability
2023-07-03 14:38:17
php7.4 - security update
2023-06-13 00:00:00
cvelist
cvelist
CVE-2023-3247 Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
2023-07-22 04:17:09
prion
prion
Authentication flaw
2023-07-22 05:15:00
ubuntu
ubuntu
PHP vulnerability
2023-07-03 00:00:00
cve
cve
CVE-2023-3247
2023-07-22 05:15:37
redhatcve
redhatcve
CVE-2023-3247
2023-07-13 11:05:11
debiancve
debiancve
CVE-2023-3247
2023-07-22 05:15:37
debian
debian
[SECURITY] [DLA 3458-1] php7.3 security update
2023-06-20 01:41:29
nvd
nvd
CVE-2023-3247
2023-07-22 05:15:37
alpinelinux
alpinelinux
CVE-2023-3247
2023-07-22 05:15:37
redhat
redhat
(RHSA-2023:5927) Important: php:8.0 security update
2023-10-19 12:45:04
(RHSA-2023:5926) Important: php security update
2023-10-19 12:43:29
(RHSA-2024:0387) Moderate: php:8.1 security update
2024-01-24 09:41:37
almalinux
almalinux
Important: php:8.0 security update
2023-10-19 00:00:00
Important: php security update
2023-10-19 00:00:00
Moderate: php:8.1 security update
2024-01-24 00:00:00
oraclelinux
oraclelinux
php security update
2023-10-22 00:00:00
php:8.0 security update
2023-10-23 00:00:00
php:8.1 security update
2024-01-25 00:00:00
rocky
rocky
php security update
2023-10-24 18:36:55
php:8.0 security update
2023-10-24 18:35:47
php:8.1 security update
2024-02-12 20:17:50
hp
hp
HP Device Manager Security Updates
2023-10-20 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

7.1 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

18.1%

JSON
Related for USN-6199-2
veracode1nessus32cbl_mariner1openvas11ubuntucve1mageia1osv13cvelist1prion1ubuntu1cve1redhatcve1debiancve1debian1nvd1alpinelinux1redhat3almalinux3oraclelinux3rocky3hp1ics1oracle1