Test Kennung:	1.3.6.1.4.1.25623.1.0.811484
Kategorie:	Denial of Service
Titel:	PHP 'phar_parse_pharfile' Function DoS Vulnerability - Linux
Zusammenfassung:	PHP is prone to a denial of service (DoS) vulnerability.;; This VT has been deprecated and merged into the VT 'PHP Multiple Vulnerabilities (Jan 2017 - 01) - Linux'; (OID: 1.3.6.1.4.1.25623.1.0.108056).
Beschreibung:	Summary: PHP is prone to a denial of service (DoS) vulnerability. This VT has been deprecated and merged into the VT 'PHP Multiple Vulnerabilities (Jan 2017 - 01) - Linux' (OID: 1.3.6.1.4.1.25623.1.0.108056). Vulnerability Insight: The flaw exists due to a buffer over-read error in the 'phar_parse_pharfile' function in ext/phar/phar.c script. Vulnerability Impact: Successfully exploiting this issue allow remote attackers to supply malicious archive files to crash the PHP interpreter or potentially disclose information. Affected Software/OS: PHP versions before 5.6.30, 7.x before 7.0.15 Solution: Update to PHP version 5.6.30 or 7.0.15, or later. CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-11147 BugTraq ID: 99607 http://www.securityfocus.com/bid/99607 RedHat Security Advisories: RHSA-2018:1296 https://access.redhat.com/errata/RHSA-2018:1296
Copyright	Copyright (C) 2017 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.