![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
CVE ID: | CVE-2017-11147 |
Description: | In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying malicious archive files to crash the PHP interpreter or potentially disclose information due to a buffer over-read in the phar_parse_pharfile function in ext/phar/phar.c. |
Test IDs: | 1.3.6.1.4.1.25623.1.0.811484 1.3.6.1.4.1.25623.1.0.811483 1.3.6.1.4.1.25623.1.0.891034 |
Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2017-11147 BugTraq ID: 99607 http://www.securityfocus.com/bid/99607 RedHat Security Advisories: RHSA-2018:1296 https://access.redhat.com/errata/RHSA-2018:1296 |