[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-4353-1 php7.0 -- php7.0

ID: oval:org.secpod.oval:def:603587Date: (C)2018-12-11   (M)2023-12-05
Class: PATCHFamily: unix




Multiple security issues were found in PHP, a widely-used open source general purpose scripting language: The EXIF module was susceptible to denial of service/information disclosure when parsing malformed images, the Apache module allowed cross-site-scripting via the body of a Transfer-Encoding: chunked request and the IMAP extension performed insufficient input validation which can result in the execution of arbitrary shell commands in the imap_open function and denial of service in the imap_mail function.

Platform:
Debian 9.x
Product:
libphp7.0-embed
php7.0
libapache2-mod-php7.0
Reference:
DSA-4353-1
CVE-2018-14851
CVE-2018-14883
CVE-2018-17082
CVE-2018-19518
CVE-2018-19935
CVE-2018-20783
CVE    6
CVE-2018-14883
CVE-2018-19518
CVE-2018-14851
CVE-2018-17082
...
CPE    5
cpe:/o:debian:debian_linux:9.0
cpe:/a:php:php
cpe:/o:debian:debian_linux:9.x
cpe:/o:debian:debian_linux:8.0
...

© SecPod Technologies