CVE-2017-7963
CVE-2017-7963
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
The GNU Multiple Precision Arithmetic Library (GMP) interfaces for PHP through 7.1.4 allow attackers to cause a denial of service (memory consumption and application crash) via operations on long strings. NOTE: the vendor disputes this, stating "There is no security issue here, because GMP safely aborts in case of an OOM condition. The only attack vector here is denial of service. However, if you allow attacker-controlled, unbounded allocations you have a DoS vector regardless of GMP's OOM behavior.
CVSS 7.5 · Alta · EPSS 2,0%
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
php5 Ubuntu:Pro:14.04:LTS
- Versiones
- 5.5.3+dfsg-1ubuntu2
- 5.5.3+dfsg-1ubuntu3
- 5.5.6+dfsg-1ubuntu1
- 5.5.6+dfsg-1ubuntu2
- 5.5.8+dfsg-2ubuntu1
- 5.5.9+dfsg-1ubuntu1
- 5.5.9+dfsg-1ubuntu2
- 5.5.9+dfsg-1ubuntu3
- 5.5.9+dfsg-1ubuntu4
- 5.5.9+dfsg-1ubuntu4.1
- 5.5.9+dfsg-1ubuntu4.2
- 5.5.9+dfsg-1ubuntu4.3
- 5.5.9+dfsg-1ubuntu4.4
- 5.5.9+dfsg-1ubuntu4.5
- 5.5.9+dfsg-1ubuntu4.6
- 5.5.9+dfsg-1ubuntu4.7
- 5.5.9+dfsg-1ubuntu4.9
- 5.5.9+dfsg-1ubuntu4.11
- 5.5.9+dfsg-1ubuntu4.12
- 5.5.9+dfsg-1ubuntu4.13
- 5.5.9+dfsg-1ubuntu4.14
- 5.5.9+dfsg-1ubuntu4.16
- 5.5.9+dfsg-1ubuntu4.17
- 5.5.9+dfsg-1ubuntu4.19
- 5.5.9+dfsg-1ubuntu4.20
- 5.5.9+dfsg-1ubuntu4.21
- 5.5.9+dfsg-1ubuntu4.22
- 5.5.9+dfsg-1ubuntu4.23
- 5.5.9+dfsg-1ubuntu4.24
- 5.5.9+dfsg-1ubuntu4.25
- 5.5.9+dfsg-1ubuntu4.26
- 5.5.9+dfsg-1ubuntu4.27
- 5.5.9+dfsg-1ubuntu4.29
- 5.5.9+dfsg-1ubuntu4.29+esm1
- 5.5.9+dfsg-1ubuntu4.29+esm2
- 5.5.9+dfsg-1ubuntu4.29+esm3
- 5.5.9+dfsg-1ubuntu4.29+esm4
- 5.5.9+dfsg-1ubuntu4.29+esm5
- 5.5.9+dfsg-1ubuntu4.29+esm6
- 5.5.9+dfsg-1ubuntu4.29+esm8
- 5.5.9+dfsg-1ubuntu4.29+esm10
- 5.5.9+dfsg-1ubuntu4.29+esm11
- 5.5.9+dfsg-1ubuntu4.29+esm12
- 5.5.9+dfsg-1ubuntu4.29+esm13
- 5.5.9+dfsg-1ubuntu4.29+esm14
- 5.5.9+dfsg-1ubuntu4.29+esm15
- 5.5.9+dfsg-1ubuntu4.29+esm16
- 5.5.9+dfsg-1ubuntu4.29+esm17
- 5.5.9+dfsg-1ubuntu4.29+esm18
- Intervalos de versiones afectados
- ECOSYSTEM: (−∞, +∞)
Sin corrección publicada