USN-5300-2

Dashboard / Vulnerabilities / USN-5300-2

USN-5300-2

Summary: php7.2, php7.4 vulnerabilities

Details: USN-5300-1 fixed vulnerabilities in PHP. This update provides the corresponding updates for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that PHP incorrectly handled certain scripts. An attacker could possibly use this issue to cause a denial of service. (CVE-2015-9253, CVE-2017-8923, CVE-2017-9118, CVE-2017-9120) It was discovered that PHP incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service, or possibly obtain sensitive information. (CVE-2017-9119) It was discovered that PHP incorrectly handled certain scripts with XML parsing functions. An attacker could possibly use this issue to obtain sensitive information. (CVE-2021-21707)

References: https://ubuntu.com/security/notices/USN-5300-2, https://ubuntu.com/security/CVE-2017-8923, https://ubuntu.com/security/CVE-2017-9118, https://ubuntu.com/security/CVE-2017-9119, https://ubuntu.com/security/CVE-2017-9120, https://ubuntu.com/security/CVE-2021-21707