Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2017-11145
Description:In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelib_meridian parsing code could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: the correct fix is in the e8b7698f5ee757ce2c8bd10a192a491a498f891c commit, not the bd77ac90d3bdf31ce2a5251ad92e9e75 gist.
Test IDs: 1.3.6.1.4.1.25623.1.0.704080   1.3.6.1.4.1.25623.1.0.891034   1.3.6.1.4.1.25623.1.0.704081  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2017-11145
BugTraq ID: 99550
http://www.securityfocus.com/bid/99550
Debian Security Information: DSA-4080 (Google Search)
https://www.debian.org/security/2018/dsa-4080
Debian Security Information: DSA-4081 (Google Search)
https://www.debian.org/security/2018/dsa-4081
https://gist.github.com/anonymous/bd77ac90d3bdf31ce2a5251ad92e9e75
RedHat Security Advisories: RHSA-2018:1296
https://access.redhat.com/errata/RHSA-2018:1296




© 1998-2025 E-Soft Inc. All rights reserved.