USN-5300-1
Dashboard / Vulnerabilities / USN-5300-1
USN-5300-1
Summary: php7.0 vulnerabilities
Details: It was discovered that PHP incorrectly handled certain scripts. An attacker could possibly use this issue to cause a denial of service. (CVE-2015-9253, CVE-2017-8923, CVE-2017-9118, CVE-2017-9120) It was discovered that PHP incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service, or possibly obtain sensitive information. (CVE-2017-9119) It was discovered that PHP incorrectly handled certain scripts with XML parsing functions. An attacker could possibly use this issue to obtain sensitive information. (CVE-2021-21707)
References: https://ubuntu.com/security/notices/USN-5300-1, https://ubuntu.com/security/CVE-2015-9253, https://ubuntu.com/security/CVE-2017-8923, https://ubuntu.com/security/CVE-2017-9118, https://ubuntu.com/security/CVE-2017-9119, https://ubuntu.com/security/CVE-2017-9120, https://ubuntu.com/security/CVE-2021-21707
Affected packages
Package
Name: php7.0
Purl: pkg:deb/ubuntu/php7.0?arch=source&distro=esm-infra%2Fxenial
Affected ranges
Type: ECOSYSTEM
Events:
