vulnerability
Oracle Solaris 11: CVE-2017-11147: Vulnerability in PHP
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:N/AC:L/Au:N/C:P/I:N/A:P) | Jul 10, 2017 | Apr 18, 2018 | Feb 1, 2022 |
Severity
6
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:P)
Published
Jul 10, 2017
Added
Apr 18, 2018
Modified
Feb 1, 2022
Description
In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying malicious archive files to crash the PHP interpreter or potentially disclose information due to a buffer over-read in the phar_parse_pharfile function in ext/phar/phar.c.
Solutions
oracle-solaris-11-3-upgrade-web-php-56-5-6-34-0-175-3-31-0-2-0oracle-solaris-11-3-upgrade-web-php-71-7-1-15-0-175-3-31-0-2-0
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.