vulnerability
Oracle Solaris 11: CVE-2017-16642: Vulnerability in PHP
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:P/I:N/A:N) | Nov 7, 2017 | Apr 18, 2018 | Feb 1, 2022 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Published
Nov 7, 2017
Added
Apr 18, 2018
Modified
Feb 1, 2022
Description
In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: this is a different issue than CVE-2017-11145.
Solutions
oracle-solaris-11-3-upgrade-web-php-56-5-6-34-0-175-3-31-0-2-0oracle-solaris-11-3-upgrade-web-php-71-7-1-15-0-175-3-31-0-2-0
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.