CVE-2017-7963
CVE-2017-7963
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
The GNU Multiple Precision Arithmetic Library (GMP) interfaces for PHP through 7.1.4 allow attackers to cause a denial of service (memory consumption and application crash) via operations on long strings. NOTE: the vendor disputes this, stating "There is no security issue here, because GMP safely aborts in case of an OOM condition. The only attack vector here is denial of service. However, if you allow attacker-controlled, unbounded allocations you have a DoS vector regardless of GMP's OOM behavior.
CVSS 7.5 · Élevée · EPSS 2,0%
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
n/a
- Versions du logiciel
- n/a: Concernée
Aucun correctif publié
php5 Ubuntu:Pro:14.04:LTS
- Versions du logiciel
- 5.5.3+dfsg-1ubuntu2
- 5.5.3+dfsg-1ubuntu3
- 5.5.6+dfsg-1ubuntu1
- 5.5.6+dfsg-1ubuntu2
- 5.5.8+dfsg-2ubuntu1
- 5.5.9+dfsg-1ubuntu1
- 5.5.9+dfsg-1ubuntu2
- 5.5.9+dfsg-1ubuntu3
- 5.5.9+dfsg-1ubuntu4
- 5.5.9+dfsg-1ubuntu4.1
- 5.5.9+dfsg-1ubuntu4.2
- 5.5.9+dfsg-1ubuntu4.3
- 5.5.9+dfsg-1ubuntu4.4
- 5.5.9+dfsg-1ubuntu4.5
- 5.5.9+dfsg-1ubuntu4.6
- 5.5.9+dfsg-1ubuntu4.7
- 5.5.9+dfsg-1ubuntu4.9
- 5.5.9+dfsg-1ubuntu4.11
- 5.5.9+dfsg-1ubuntu4.12
- 5.5.9+dfsg-1ubuntu4.13
- 5.5.9+dfsg-1ubuntu4.14
- 5.5.9+dfsg-1ubuntu4.16
- 5.5.9+dfsg-1ubuntu4.17
- 5.5.9+dfsg-1ubuntu4.19
- 5.5.9+dfsg-1ubuntu4.20
- 5.5.9+dfsg-1ubuntu4.21
- 5.5.9+dfsg-1ubuntu4.22
- 5.5.9+dfsg-1ubuntu4.23
- 5.5.9+dfsg-1ubuntu4.24
- 5.5.9+dfsg-1ubuntu4.25
- 5.5.9+dfsg-1ubuntu4.26
- 5.5.9+dfsg-1ubuntu4.27
- 5.5.9+dfsg-1ubuntu4.29
- 5.5.9+dfsg-1ubuntu4.29+esm1
- 5.5.9+dfsg-1ubuntu4.29+esm2
- 5.5.9+dfsg-1ubuntu4.29+esm3
- 5.5.9+dfsg-1ubuntu4.29+esm4
- 5.5.9+dfsg-1ubuntu4.29+esm5
- 5.5.9+dfsg-1ubuntu4.29+esm6
- 5.5.9+dfsg-1ubuntu4.29+esm8
- 5.5.9+dfsg-1ubuntu4.29+esm10
- 5.5.9+dfsg-1ubuntu4.29+esm11
- 5.5.9+dfsg-1ubuntu4.29+esm12
- 5.5.9+dfsg-1ubuntu4.29+esm13
- 5.5.9+dfsg-1ubuntu4.29+esm14
- 5.5.9+dfsg-1ubuntu4.29+esm15
- 5.5.9+dfsg-1ubuntu4.29+esm16
- 5.5.9+dfsg-1ubuntu4.29+esm17
- 5.5.9+dfsg-1ubuntu4.29+esm18
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié