vulnerability

Huawei EulerOS: CVE-2015-8838: php security update

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
2016-05-16
Added
2021-04-30
Modified
2021-04-30

Description

ext/mysqlnd/mysqlnd.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 uses a client SSL option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152.

Solution(s)

huawei-euleros-2_0_sp3-upgrade-phphuawei-euleros-2_0_sp3-upgrade-php-clihuawei-euleros-2_0_sp3-upgrade-php-commonhuawei-euleros-2_0_sp3-upgrade-php-gdhuawei-euleros-2_0_sp3-upgrade-php-ldaphuawei-euleros-2_0_sp3-upgrade-php-mysqlhuawei-euleros-2_0_sp3-upgrade-php-odbchuawei-euleros-2_0_sp3-upgrade-php-pdohuawei-euleros-2_0_sp3-upgrade-php-pgsqlhuawei-euleros-2_0_sp3-upgrade-php-processhuawei-euleros-2_0_sp3-upgrade-php-recodehuawei-euleros-2_0_sp3-upgrade-php-soaphuawei-euleros-2_0_sp3-upgrade-php-xmlhuawei-euleros-2_0_sp3-upgrade-php-xmlrpc
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.