VDB
BDU%3A2017-01654
BDU%3A2017-01654
PUBLISHED
CVSS 7.5 HIGH
Уязвимость реализации службы SplObjectStorage в ext/spl/spl_observer.c интерпретатора PHP, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
Risk Scores
CVSS 2.0
7.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| PHP Group | PHP |
Timeline
- Jul 14, 2017 CVE Published
- Mar 23, 2021 CVE Updated
References
- https://bugs.php.net/bug.php?id=73257 url
- http://www.securityfocus.com/bid/95152 url
- http://blog.checkpoint.com/2016/12/27/check-point-discovers-three-zero-day-vulnerabilities-web-programming-language-php-7 url
- http://blog.checkpoint.com/wp-content/uploads/2016/12/PHP_Technical_Report.pdf url
- http://php.net/ChangeLog-7.php url
- https://github.com/php/php-src/commit/61cdd1255d5b9c8453be71aacbbf682796ac77d4 url
- https://www.youtube.com/watch?v=LDcaPstAuPk url