Wind River Support Network

HomeDefectsLIN9-4671
Fixed

LIN9-4671 : Security Advisory - php - CVE-2016-10397

Created: Jul 13, 2017    Updated: Dec 3, 2018
Resolved Date: Aug 2, 2017
Found In Version: 9.0.0.8
Fix Version: 9.0.0.9
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

In PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the URL parser could be used by attackers to bypass hostname-specific URL checks, as demonstrated by evil.example.com:80#@good.example.com/ and evil.example.com:80?@good.example.com/ inputs to the parse_url function (implemented in the php_url_parse_ex function in ext/standard/url.c).

https://nvd.nist.gov/vuln/detail/CVE-2016-10397

Other Downloads


CVEs


Live chat
Online