Vulnetix
Try Vulnetix Request Demo
CVE-2017-11144 PUBLISHED

In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check the return value of the OpenSSL sealing function, which could lead to a crash of the PHP interpreter, related to an interpretation conflict for a negative number in ext/openssl/openssl.c, and an OpenSSL documentation omission.

EPSS 31.03% · 96.7th percentile

Risk Scores

EPSS Score
31.03%
96.7th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSphp7.00, 7.0.1-5, 7.0.1-6
Ubuntu:14.04:LTSphp55.5.9+dfsg-1ubuntu4.17, 5.5.9+dfsg-1ubuntu4.19, 0

Timeline

References

Open in Interactive Console →