Lucene search
Veracode Vulnerability DatabaseVERACODE:19309HistoryMay 16, 2019 - 2:59 a.m.
Buffer Overflow
2019-05-1602:59:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.011 Low
EPSS
Percentile
84.1%
PHP is vulnerable to buffer overflow vulnerability. The vulnerability exists in the finish_nested_data function in ext/standard/var_unserializer.re in PHP causing an unspecified impact on the integrity of PHP.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rh-php70-php | eq | 7.0.10__2.el7 | |
| rh-php70-php | eq | 7.0.10__2.el6 |
References
php.net/ChangeLog-5.php
php.net/ChangeLog-7.php
www.securityfocus.com/bid/99490
access.redhat.com/documentation/en-us/red_hat_software_collections/3/html/3.1_release_notes/chap-rhscl#sect-RHSCL-Changes-php
access.redhat.com/errata/RHSA-2018:1296
access.redhat.com/security/updates/classification/#moderate
bugs.php.net/bug.php?id=74111
usn.ubuntu.com/3566-1/
usn.ubuntu.com/3566-2/
www.debian.org/security/2018/dsa-4080
www.debian.org/security/2018/dsa-4081
Related
osv
osv
php5 - security update
2017-08-30 00:00:00
CVE-2017-12933
2017-08-18 03:29:00
php7.0 - security update
2018-01-08 00:00:00
nvd
nvd
CVE-2017-12933
2017-08-18 03:29:00
CVE-2017-1000202
2017-08-21 00:29:00
openvas
openvas
Debian: Security Advisory (DLA-1076-1)
2018-02-06 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:2518-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:2468-1)
2021-06-09 00:00:00
redhatcve
redhatcve
CVE-2017-12933
2017-08-24 12:18:53
nessus
nessus
Debian DLA-1076-1 : php5 security update
2017-08-31 00:00:00
openSUSE Security Update : php5 (openSUSE-2017-1079)
2017-09-22 00:00:00
SUSE SLES12 Security Update : php5 (SUSE-SU-2017:2518-1)
2019-01-02 00:00:00
f5
f5
K28507582 : PHP vulnerability CVE-2017-12933
2017-11-13 00:00:00
prion
prion
Design/Logic Flaw
2017-08-18 03:29:00
ubuntucve
ubuntucve
CVE-2017-12933
2017-08-17 00:00:00
debiancve
debiancve
CVE-2017-12933
2017-08-18 03:29:00
hackerone
hackerone
Internet Bug Bounty: Out of Bounds Memory Read in unserialize()
2017-08-18 13:22:28
cve
cve
CVE-2017-12933
2017-08-18 03:29:00
CVE-2017-1000202
2022-10-03 16:23:09
debian
debian
[SECURITY] [DLA 1076-1] php5 security update
2017-08-30 15:51:54
[SECURITY] [DSA 4080-1] php7.0 security update
2018-01-08 22:30:09
[SECURITY] [DSA 4081-1] php5 security update
2018-01-08 22:33:54
cvelist
cvelist
CVE-2017-12933
2017-08-18 03:00:00
threatpost
threatpost
Severe PHP Exploit Threatens WordPress Sites with Remote Code Execution
2018-08-17 18:03:08
ubuntu
ubuntu
PHP vulnerabilities
2018-02-12 00:00:00
PHP vulnerabilities
2019-05-22 00:00:00
redhat
redhat
veracode
veracode
Use After Free
2019-05-16 02:59:58
ibm
ibm
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45