Wind River Support Network

HomeDefectsLIN8-7111
Fixed

LIN8-7111 : Security Advisory - php - CVE-2016-10397

Created: Jul 13, 2017    Updated: Dec 3, 2018
Resolved Date: Jul 21, 2017
Found In Version: 8.0.0.19
Fix Version: 8.0.0.20
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

In PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the URL parser could be used by attackers to bypass hostname-specific URL checks, as demonstrated by evil.example.com:80#@good.example.com/ and evil.example.com:80?@good.example.com/ inputs to the parse_url function (implemented in the php_url_parse_ex function in ext/standard/url.c).

https://nvd.nist.gov/vuln/detail/CVE-2016-10397

Other Downloads


CVEs


Live chat
Online