https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 22:35:17 +0000 https://cve.radiocsirt.org/vuln/cve-2017-16642 <p>In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension&#39;s timelib_meridian handling of &#39;front of&#39; and &#39;back of&#39; directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: this is a different issue than CVE-2017-11145.</p> <p>In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension&#39;s timelib_meridian handling of &#39;front of&#39; and &#39;back of&#39; directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: this is a different issue than CVE-2017-11145.</p> https://cve.radiocsirt.org/vuln/cve-2017-16642 https://cve.radiocsirt.org/vuln/usn-3566-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: php5</p> <p>It was discovered that PHP incorrectly handled the PHAR 404 error page. A remote attacker could possibly use this issue to conduct cross-site scripting (XSS) attacks. (CVE-2018-5712)</p> <p>It was discovered that PHP incorrectly handled memory when unserializing certain data. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-12933)</p> <p>It was discovered that PHP incorrectly handled &#39;front of&#39; and &#39;back of&#39; date directives. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2017-16642)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: php5</p> <p>It was discovered that PHP incorrectly handled the PHAR 404 error page. A remote attacker could possibly use this issue to conduct cross-site scripting (XSS) attacks. (CVE-2018-5712)</p> <p>It was discovered that PHP incorrectly handled memory when unserializing certain data. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-12933)</p> <p>It was discovered that PHP incorrectly handled &#39;front of&#39; and &#39;back of&#39; date directives. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2017-16642)</p> https://cve.radiocsirt.org/vuln/usn-3566-1