Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2017-16642
Description:In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: this is a different issue than CVE-2017-11145.
Test IDs: 1.3.6.1.4.1.25623.1.0.812073   1.3.6.1.4.1.25623.1.0.704080   1.3.6.1.4.1.25623.1.0.812072   1.3.6.1.4.1.25623.1.0.704081  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2017-16642
BugTraq ID: 101745
http://www.securityfocus.com/bid/101745
Debian Security Information: DSA-4080 (Google Search)
https://www.debian.org/security/2018/dsa-4080
Debian Security Information: DSA-4081 (Google Search)
https://www.debian.org/security/2018/dsa-4081
https://www.exploit-db.com/exploits/43133/
RedHat Security Advisories: RHSA-2018:1296
https://access.redhat.com/errata/RHSA-2018:1296
RedHat Security Advisories: RHSA-2019:2519
https://access.redhat.com/errata/RHSA-2019:2519
https://usn.ubuntu.com/3566-1/




© 1998-2025 E-Soft Inc. All rights reserved.