Vulnetix
Try Vulnetix Request Demo
CVE-2017-16642 PUBLISHED

In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: this is a different issue than CVE-2017-11145.

EPSS 8.26% · 92.2th percentile

Risk Scores

EPSS Score
8.26%
92.2th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSphp7.00, 7.0.1-5, 7.0.1-6
Ubuntu:14.04:LTSphp55.5.9+dfsg-1ubuntu4.19, 5.5.9+dfsg-1ubuntu4.20, 0

Timeline

References

Open in Interactive Console →