190.57.250.99
C2 Infrastructure Lumma Indicator 190.57.250.99 Type ip Category C2 Infrastructure Family Lumma Hosting Gigared S.A. Confidence high VT Score 0/94 Source shodan First Seen 2026-04-18 05:03:23 UTC Last Seen 2026-07-15 16:00:15 UTC Shodan View on Shodan ↗
Raw JSON
{
"ip": 3191470691,
"hash": -1328780060,
"port": 80,
"transport": "tcp",
"version": "2.4.6",
"location": {
"city": "Buenos Aires",
"region_code": "C",
"area_code": null,
"longitude": -58.37723,
"latitude": -34.61315,
"country_code": "AR",
"country_name": "Argentina"
},
"vulns": {
"CVE-2022-0391": {
"verified": false,
"ranking_epss": 0.79794,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\\r' and '\\n' in the URL path. This flaw allows an attacker to input a crafted URL, leading to injection attacks. This flaw affects Python versions prior to 3.10.0b1, 3.9.5, 3.8.11, 3.7.11 and 3.6.14.",
"references": [
"https://bugs.python.org/issue43882",
"https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CSD2YBXP3ZF44E44QMIIAR5VTO35KTRB/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UDBDBAU6HUPZHISBOARTXZ5GKHF2VH5U/",
"https://security.gentoo.org/glsa/202305-02",
"https://security.netapp.com/advisory/ntap-20220225-0009/",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://bugs.python.org/issue43882",
"https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html",
"https://lists.debian.org/debian-lts-announce/2025/03/msg00013.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CSD2YBXP3ZF44E44QMIIAR5VTO35KTRB/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UDBDBAU6HUPZHISBOARTXZ5GKHF2VH5U/",
"https://security.gentoo.org/glsa/202305-02",
"https://security.netapp.com/advisory/ntap-20220225-0009/",
"https://www.oracle.com/security-alerts/cpuapr2022.html"
],
"epss": 0.01317,
"cvss": 7.5
},
"CVE-2018-10548": {
"verified": false,
"ranking_epss": 0.97921,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. ext/ldap/ldap.c allows remote LDAP servers to cause a denial of service (NULL pointer dereference and application crash) because of mishandling of the ldap_get_dn return value.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/104019",
"http://www.securitytracker.com/id/1040807",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://bugs.php.net/bug.php?id=76248",
"https://lists.debian.org/debian-lts-announce/2018/05/msg00004.html",
"https://lists.debian.org/debian-lts-announce/2018/06/msg00005.html",
"https://security.gentoo.org/glsa/201812-01",
"https://security.netapp.com/advisory/ntap-20180607-0003/",
"https://usn.ubuntu.com/3646-1/",
"https://usn.ubuntu.com/3646-2/",
"https://www.debian.org/security/2018/dsa-4240",
"https://www.tenable.com/security/tns-2018-12",
"https://www.tenable.com/security/tns-2019-07",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/104019",
"http://www.securitytracker.com/id/1040807",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://bugs.php.net/bug.php?id=76248",
"https://lists.debian.org/debian-lts-announce/2018/05/msg00004.html",
"https://lists.debian.org/debian-lts-announce/2018/06/msg00005.html",
"https://security.gentoo.org/glsa/201812-01",
"https://security.netapp.com/advisory/ntap-20180607-0003/",
"https://usn.ubuntu.com/3646-1/",
"https://usn.ubuntu.com/3646-2/",
"https://www.debian.org/security/2018/dsa-4240",
"https://www.tenable.com/security/tns-2018-12",
"https://www.tenable.com/security/tns-2019-07"
],
"epss": 0.52703,
"cvss": 7.5
},
"CVE-2018-10545": {
"verified": false,
"ranking_epss": 0.13817,
"cvss_v2": 1.9,
"cvss_version": 3,
"summary": "An issue was discovered in PHP before 5.6.35, 7.0.x before 7.0.29, 7.1.x before 7.1.16, and 7.2.x before 7.2.4. Dumpable FPM child processes allow bypassing opcache access controls because fpm_unix.c makes a PR_SET_DUMPABLE prctl call, allowing one user (in a multiuser environment) to obtain sensitive information from the process memory of a second user's PHP applications by running gcore on the PID of the PHP-FPM worker process.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/104022",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://bugs.php.net/bug.php?id=75605",
"https://lists.debian.org/debian-lts-announce/2018/05/msg00004.html",
"https://lists.debian.org/debian-lts-announce/2018/06/msg00005.html",
"https://security.gentoo.org/glsa/201812-01",
"https://security.netapp.com/advisory/ntap-20180607-0003/",
"https://usn.ubuntu.com/3646-1/",
"https://usn.ubuntu.com/3646-2/",
"https://www.debian.org/security/2018/dsa-4240",
"https://www.tenable.com/security/tns-2018-12",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/104022",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://bugs.php.net/bug.php?id=75605",
"https://lists.debian.org/debian-lts-announce/2018/05/msg00004.html",
"https://lists.debian.org/debian-lts-announce/2018/06/msg00005.html",
"https://security.gentoo.org/glsa/201812-01",
"https://security.netapp.com/advisory/ntap-20180607-0003/",
"https://usn.ubuntu.com/3646-1/",
"https://usn.ubuntu.com/3646-2/",
"https://www.debian.org/security/2018/dsa-4240",
"https://www.tenable.com/security/tns-2018-12"
],
"epss": 0.00045,
"cvss": 4.7
},
"CVE-2018-10547": {
"verified": false,
"ranking_epss": 0.94989,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. There is Reflected XSS on the PHAR 403 and 404 error pages via request data of a request for a .phar file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-5712.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securitytracker.com/id/1040807",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://bugs.php.net/bug.php?id=76129",
"https://lists.debian.org/debian-lts-announce/2018/05/msg00004.html",
"https://lists.debian.org/debian-lts-announce/2018/06/msg00005.html",
"https://security.netapp.com/advisory/ntap-20180607-0003/",
"https://usn.ubuntu.com/3646-1/",
"https://usn.ubuntu.com/3646-2/",
"https://www.debian.org/security/2018/dsa-4240",
"https://www.tenable.com/security/tns-2018-12",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securitytracker.com/id/1040807",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://bugs.php.net/bug.php?id=76129",
"https://lists.debian.org/debian-lts-announce/2018/05/msg00004.html",
"https://lists.debian.org/debian-lts-announce/2018/06/msg00005.html",
"https://security.netapp.com/advisory/ntap-20180607-0003/",
"https://usn.ubuntu.com/3646-1/",
"https://usn.ubuntu.com/3646-2/",
"https://www.debian.org/security/2018/dsa-4240",
"https://www.tenable.com/security/tns-2018-12"
],
"epss": 0.17239,
"cvss": 6.1
},
"CVE-2018-10546": {
"verified": false,
"ranking_epss": 0.98455,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. An infinite loop exists in ext/iconv/iconv.c because the iconv stream filter does not reject invalid multibyte sequences.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/104019",
"http://www.securitytracker.com/id/1040807",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://bugs.php.net/bug.php?id=76249",
"https://lists.debian.org/debian-lts-announce/2018/06/msg00005.html",
"https://security.gentoo.org/glsa/201812-01",
"https://security.netapp.com/advisory/ntap-20180607-0003/",
"https://usn.ubuntu.com/3646-1/",
"https://www.debian.org/security/2018/dsa-4240",
"https://www.tenable.com/security/tns-2018-12",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/104019",
"http://www.securitytracker.com/id/1040807",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://bugs.php.net/bug.php?id=76249",
"https://lists.debian.org/debian-lts-announce/2018/06/msg00005.html",
"https://security.gentoo.org/glsa/201812-01",
"https://security.netapp.com/advisory/ntap-20180607-0003/",
"https://usn.ubuntu.com/3646-1/",
"https://www.debian.org/security/2018/dsa-4240",
"https://www.tenable.com/security/tns-2018-12"
],
"epss": 0.64864,
"cvss": 7.5
},
"CVE-2020-35452": {
"verified": false,
"ranking_epss": 0.93285,
"cvss_v2": 6.8,
"cvss_version": 3,
"summary": "Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP Server team could create one, though some particular compiler and/or compilation option might make it possible, with limited consequences anyway due to the size (a single byte) and the value (zero byte) of the overflow",
"references": [
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://www.openwall.com/lists/oss-security/2021/06/10/5",
"https://lists.apache.org/thread.html/r7f2b70b621651548f4b6f027552f1dd91705d7111bb5d15cda0a68dd%40%3Cdev.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rccb1b8225583a48c6360edc7a93cc97ae8b0215791e455dc607e7602%40%3Cannounce.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re026d3da9d7824bd93b9f871c0fdda978d960c7e62d8c43cba8d0bf3%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2021/07/msg00006.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/",
"https://security.gentoo.org/glsa/202107-38",
"https://security.netapp.com/advisory/ntap-20210702-0001/",
"https://www.debian.org/security/2021/dsa-4937",
"https://www.oracle.com/security-alerts/cpuoct2021.html",
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://www.openwall.com/lists/oss-security/2021/06/10/5",
"https://lists.apache.org/thread.html/r7f2b70b621651548f4b6f027552f1dd91705d7111bb5d15cda0a68dd%40%3Cdev.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rccb1b8225583a48c6360edc7a93cc97ae8b0215791e455dc607e7602%40%3Cannounce.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re026d3da9d7824bd93b9f871c0fdda978d960c7e62d8c43cba8d0bf3%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2021/07/msg00006.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/",
"https://security.gentoo.org/glsa/202107-38",
"https://security.netapp.com/advisory/ntap-20210702-0001/",
"https://www.debian.org/security/2021/dsa-4937",
"https://www.oracle.com/security-alerts/cpuoct2021.html"
],
"epss": 0.10695,
"cvss": 7.3
},
"CVE-2015-0231": {
"verified": false,
"ranking_epss": 0.99444,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate numerical keys within the serialized properties of an object. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-8142.",
"references": [
"http://advisories.mageia.org/MGASA-2015-0040.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html",
"http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://www.debian.org/security/2015/dsa-3195",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:032",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:079",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/72539",
"https://bugs.php.net/bug.php?id=68710",
"https://bugzilla.redhat.com/show_bug.cgi?id=1185397",
"https://github.com/php/php-src/commit/b585a3aed7880a5fa5c18e2b838fc96f40e075bd",
"https://security.gentoo.org/glsa/201503-03",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205267",
"http://advisories.mageia.org/MGASA-2015-0040.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html",
"http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://www.debian.org/security/2015/dsa-3195",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:032",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:079",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/72539",
"https://bugs.php.net/bug.php?id=68710",
"https://bugzilla.redhat.com/show_bug.cgi?id=1185397",
"https://github.com/php/php-src/commit/b585a3aed7880a5fa5c18e2b838fc96f40e075bd",
"https://security.gentoo.org/glsa/201503-03",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205267"
],
"epss": 0.87284,
"cvss": 7.5
},
"CVE-2015-0232": {
"verified": false,
"ranking_epss": 0.98588,
"cvss_v2": 6.8,
"cvss_version": 2,
"summary": "The exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free and application crash) via crafted EXIF data in a JPEG image.",
"references": [
"http://advisories.mageia.org/MGASA-2015-0040.html",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=21bc7464f454fec18a9ec024c738f195602fee2a",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2fc178cf448d8e1b95d1314e47eeef610729e0df",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=55001de6d8c6ed2aada870a76de1e4b4558737bf",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html",
"http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.debian.org/security/2015/dsa-3195",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:032",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/72541",
"https://bugs.php.net/bug.php?id=68799",
"https://bugzilla.redhat.com/show_bug.cgi?id=1185472",
"https://security.gentoo.org/glsa/201503-03",
"https://support.apple.com/HT205267",
"http://advisories.mageia.org/MGASA-2015-0040.html",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=21bc7464f454fec18a9ec024c738f195602fee2a",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2fc178cf448d8e1b95d1314e47eeef610729e0df",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=55001de6d8c6ed2aada870a76de1e4b4558737bf",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html",
"http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.debian.org/security/2015/dsa-3195",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:032",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/72541",
"https://bugs.php.net/bug.php?id=68799",
"https://bugzilla.redhat.com/show_bug.cgi?id=1185472",
"https://security.gentoo.org/glsa/201503-03",
"https://support.apple.com/HT205267"
],
"epss": 0.68266,
"cvss": 6.8
},
"CVE-2015-0235": {
"verified": false,
"ranking_epss": 0.99415,
"cvss_v2": 10,
"cvss_version": 2,
"summary": "Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka \"GHOST.\"",
"references": [
"http://blogs.sophos.com/2015/01/29/sophos-products-and-the-ghost-vulnerability-affecting-linux/",
"http://linux.oracle.com/errata/ELSA-2015-0090.html",
"http://linux.oracle.com/errata/ELSA-2015-0092.html",
"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html",
"http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://marc.info/?l=bugtraq&m=142296726407499&w=2",
"http://marc.info/?l=bugtraq&m=142721102728110&w=2",
"http://marc.info/?l=bugtraq&m=142722450701342&w=2",
"http://marc.info/?l=bugtraq&m=142781412222323&w=2",
"http://marc.info/?l=bugtraq&m=143145428124857&w=2",
"http://packetstormsecurity.com/files/130171/Exim-ESMTP-GHOST-Denial-Of-Service.html",
"http://packetstormsecurity.com/files/130768/EMC-Secure-Remote-Services-GHOST-SQL-Injection-Command-Injection.html",
"http://packetstormsecurity.com/files/130974/Exim-GHOST-glibc-gethostbyname-Buffer-Overflow.html",
"http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html",
"http://packetstormsecurity.com/files/164014/Moxa-Command-Injection-Cross-Site-Scripting-Vulnerable-Software.html",
"http://packetstormsecurity.com/files/167552/Nexans-FTTO-GigaSwitch-Outdated-Components-Hardcoded-Backdoor.html",
"http://rhn.redhat.com/errata/RHSA-2015-0126.html",
"http://seclists.org/fulldisclosure/2015/Jan/111",
"http://seclists.org/fulldisclosure/2019/Jun/18",
"http://seclists.org/fulldisclosure/2021/Sep/0",
"http://seclists.org/fulldisclosure/2022/Jun/36",
"http://seclists.org/oss-sec/2015/q1/269",
"http://seclists.org/oss-sec/2015/q1/274",
"http://secunia.com/advisories/62517",
"http://secunia.com/advisories/62640",
"http://secunia.com/advisories/62667",
"http://secunia.com/advisories/62680",
"http://secunia.com/advisories/62681",
"http://secunia.com/advisories/62688",
"http://secunia.com/advisories/62690",
"http://secunia.com/advisories/62691",
"http://secunia.com/advisories/62692",
"http://secunia.com/advisories/62698",
"http://secunia.com/advisories/62715",
"http://secunia.com/advisories/62758",
"http://secunia.com/advisories/62812",
"http://secunia.com/advisories/62813",
"http://secunia.com/advisories/62816",
"http://secunia.com/advisories/62865",
"http://secunia.com/advisories/62870",
"http://secunia.com/advisories/62871",
"http://secunia.com/advisories/62879",
"http://secunia.com/advisories/62883",
"http://support.apple.com/kb/HT204942",
"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150128-ghost",
"http://www-01.ibm.com/support/docview.wss?uid=swg21695695",
"http://www-01.ibm.com/support/docview.wss?uid=swg21695774",
"http://www-01.ibm.com/support/docview.wss?uid=swg21695835",
"http://www-01.ibm.com/support/docview.wss?uid=swg21695860",
"http://www-01.ibm.com/support/docview.wss?uid=swg21696131",
"http://www-01.ibm.com/support/docview.wss?uid=swg21696243",
"http://www-01.ibm.com/support/docview.wss?uid=swg21696526",
"http://www-01.ibm.com/support/docview.wss?uid=swg21696600",
"http://www-01.ibm.com/support/docview.wss?uid=swg21696602",
"http://www-01.ibm.com/support/docview.wss?uid=swg21696618",
"http://www.debian.org/security/2015/dsa-3142",
"http://www.idirect.net/Partners/~/media/Files/CVE/iDirect-Posted-Common-Vulnerabilities-and-Exposures.pdf",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:039",
"http://www.openwall.com/lists/oss-security/2021/05/04/7",
"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html",
"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html",
"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html",
"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html",
"http://www.securityfocus.com/archive/1/534845/100/0/threaded",
"http://www.securityfocus.com/bid/72325",
"http://www.securityfocus.com/bid/91787",
"http://www.securitytracker.com/id/1032909",
"http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0",
"https://bto.bluecoat.com/security-advisory/sa90",
"https://cert-portal.siemens.com/productcert/pdf/ssa-994726.pdf",
"https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability",
"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04874668",
"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes",
"https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10671",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10100",
"https://seclists.org/bugtraq/2019/Jun/14",
"https://security.gentoo.org/glsa/201503-04",
"https://security.netapp.com/advisory/ntap-20150127-0001/",
"https://support.apple.com/HT205267",
"https://support.apple.com/HT205375",
"https://www.arista.com/en/support/advisories-notices/security-advisories/1053-security-advisory-9",
"https://www.f-secure.com/en/web/labs_global/fsc-2015-1",
"https://www.qualys.com/research/security-advisories/GHOST-CVE-2015-0235.txt",
"https://www.sophos.com/en-us/support/knowledgebase/121879.aspx",
"http://blogs.sophos.com/2015/01/29/sophos-products-and-the-ghost-vulnerability-affecting-linux/",
"http://linux.oracle.com/errata/ELSA-2015-0090.html",
"http://linux.oracle.com/errata/ELSA-2015-0092.html",
"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html",
"http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://marc.info/?l=bugtraq&m=142296726407499&w=2",
"http://marc.info/?l=bugtraq&m=142721102728110&w=2",
"http://marc.info/?l=bugtraq&m=142722450701342&w=2",
"http://marc.info/?l=bugtraq&m=142781412222323&w=2",
"http://marc.info/?l=bugtraq&m=143145428124857&w=2",
"http://packetstormsecurity.com/files/130171/Exim-ESMTP-GHOST-Denial-Of-Service.html",
"http://packetstormsecurity.com/files/130768/EMC-Secure-Remote-Services-GHOST-SQL-Injection-Command-Injection.html",
"http://packetstormsecurity.com/files/130974/Exim-GHOST-glibc-gethostbyname-Buffer-Overflow.html",
"http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html",
"http://packetstormsecurity.com/files/164014/Moxa-Command-Injection-Cross-Site-Scripting-Vulnerable-Software.html",
"http://packetstormsecurity.com/files/167552/Nexans-FTTO-GigaSwitch-Outdated-Components-Hardcoded-Backdoor.html",
"http://rhn.redhat.com/errata/RHSA-2015-0126.html",
"http://seclists.org/fulldisclosure/2015/Jan/111",
"http://seclists.org/fulldisclosure/2019/Jun/18",
"http://seclists.org/fulldisclosure/2021/Sep/0",
"http://seclists.org/fulldisclosure/2022/Jun/36",
"http://seclists.org/oss-sec/2015/q1/269",
"http://seclists.org/oss-sec/2015/q1/274",
"http://secunia.com/advisories/62517",
"http://secunia.com/advisories/62640",
"http://secunia.com/advisories/62667",
"http://secunia.com/advisories/62680",
"http://secunia.com/advisories/62681",
"http://secunia.com/advisories/62688",
"http://secunia.com/advisories/62690",
"http://secunia.com/advisories/62691",
"http://secunia.com/advisories/62692",
"http://secunia.com/advisories/62698",
"http://secunia.com/advisories/62715",
"http://secunia.com/advisories/62758",
"http://secunia.com/advisories/62812",
"http://secunia.com/advisories/62813",
"http://secunia.com/advisories/62816",
"http://secunia.com/advisories/62865",
"http://secunia.com/advisories/62870",
"http://secunia.com/advisories/62871",
"http://secunia.com/advisories/62879",
"http://secunia.com/advisories/62883",
"http://support.apple.com/kb/HT204942",
"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150128-ghost",
"http://www-01.ibm.com/support/docview.wss?uid=swg21695695",
"http://www-01.ibm.com/support/docview.wss?uid=swg21695774",
"http://www-01.ibm.com/support/docview.wss?uid=swg21695835",
"http://www-01.ibm.com/support/docview.wss?uid=swg21695860",
"http://www-01.ibm.com/support/docview.wss?uid=swg21696131",
"http://www-01.ibm.com/support/docview.wss?uid=swg21696243",
"http://www-01.ibm.com/support/docview.wss?uid=swg21696526",
"http://www-01.ibm.com/support/docview.wss?uid=swg21696600",
"http://www-01.ibm.com/support/docview.wss?uid=swg21696602",
"http://www-01.ibm.com/support/docview.wss?uid=swg21696618",
"http://www.debian.org/security/2015/dsa-3142",
"http://www.idirect.net/Partners/~/media/Files/CVE/iDirect-Posted-Common-Vulnerabilities-and-Exposures.pdf",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:039",
"http://www.openwall.com/lists/oss-security/2021/05/04/7",
"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html",
"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html",
"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html",
"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html",
"http://www.securityfocus.com/archive/1/534845/100/0/threaded",
"http://www.securityfocus.com/bid/72325",
"http://www.securityfocus.com/bid/91787",
"http://www.securitytracker.com/id/1032909",
"http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0",
"https://bto.bluecoat.com/security-advisory/sa90",
"https://cert-portal.siemens.com/productcert/pdf/ssa-994726.pdf",
"https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability",
"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04874668",
"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes",
"https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10671",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10100",
"https://seclists.org/bugtraq/2019/Jun/14",
"https://security.gentoo.org/glsa/201503-04",
"https://security.netapp.com/advisory/ntap-20150127-0001/",
"https://support.apple.com/HT205267",
"https://support.apple.com/HT205375",
"https://www.arista.com/en/support/advisories-notices/security-advisories/1053-security-advisory-9",
"https://www.f-secure.com/en/web/labs_global/fsc-2015-1",
"https://www.qualys.com/research/security-advisories/GHOST-CVE-2015-0235.txt",
"https://www.sophos.com/en-us/support/knowledgebase/121879.aspx"
],
"epss": 0.86662,
"cvss": 10
},
"CVE-2016-0772": {
"verified": false,
"ranking_epss": 0.90437,
"cvss_v2": 5.8,
"cvss_version": 3,
"summary": "The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a \"StartTLS stripping attack.\"",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"http://rhn.redhat.com/errata/RHSA-2016-1626.html",
"http://rhn.redhat.com/errata/RHSA-2016-1627.html",
"http://rhn.redhat.com/errata/RHSA-2016-1628.html",
"http://rhn.redhat.com/errata/RHSA-2016-1629.html",
"http://rhn.redhat.com/errata/RHSA-2016-1630.html",
"http://www.openwall.com/lists/oss-security/2016/06/14/9",
"http://www.securityfocus.com/bid/91225",
"http://www.splunk.com/view/SP-CAAAPSV",
"http://www.splunk.com/view/SP-CAAAPUE",
"https://bugzilla.redhat.com/show_bug.cgi?id=1303647",
"https://docs.python.org/3.4/whatsnew/changelog.html#python-3-4-5",
"https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-2",
"https://hg.python.org/cpython/raw-file/v2.7.12/Misc/NEWS",
"https://hg.python.org/cpython/rev/b3ce713fb9be",
"https://hg.python.org/cpython/rev/d590114c2394",
"https://lists.debian.org/debian-lts-announce/2019/02/msg00011.html",
"https://security.gentoo.org/glsa/201701-18",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"http://rhn.redhat.com/errata/RHSA-2016-1626.html",
"http://rhn.redhat.com/errata/RHSA-2016-1627.html",
"http://rhn.redhat.com/errata/RHSA-2016-1628.html",
"http://rhn.redhat.com/errata/RHSA-2016-1629.html",
"http://rhn.redhat.com/errata/RHSA-2016-1630.html",
"http://www.openwall.com/lists/oss-security/2016/06/14/9",
"http://www.securityfocus.com/bid/91225",
"http://www.splunk.com/view/SP-CAAAPSV",
"http://www.splunk.com/view/SP-CAAAPUE",
"https://bugzilla.redhat.com/show_bug.cgi?id=1303647",
"https://docs.python.org/3.4/whatsnew/changelog.html#python-3-4-5",
"https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-2",
"https://hg.python.org/cpython/raw-file/v2.7.12/Misc/NEWS",
"https://hg.python.org/cpython/rev/b3ce713fb9be",
"https://hg.python.org/cpython/rev/d590114c2394",
"https://lists.debian.org/debian-lts-announce/2019/02/msg00011.html",
"https://security.gentoo.org/glsa/201701-18"
],
"epss": 0.05778,
"cvss": 6.5
},
"CVE-2018-10549": {
"verified": false,
"ranking_epss": 0.8512,
"cvss_v2": 6.8,
"cvss_version": 3,
"summary": "An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. exif_read_data in ext/exif/exif.c has an out-of-bounds read for crafted JPEG data because exif_iif_add_value mishandles the case of a MakerNote that lacks a final '\\0' character.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/104019",
"http://www.securitytracker.com/id/1040807",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://bugs.php.net/bug.php?id=76130",
"https://lists.debian.org/debian-lts-announce/2018/06/msg00005.html",
"https://security.gentoo.org/glsa/201812-01",
"https://security.netapp.com/advisory/ntap-20180607-0003/",
"https://usn.ubuntu.com/3646-1/",
"https://www.debian.org/security/2018/dsa-4240",
"https://www.synology.com/support/security/Synology_SA_18_20",
"https://www.tenable.com/security/tns-2018-12",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/104019",
"http://www.securitytracker.com/id/1040807",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://bugs.php.net/bug.php?id=76130",
"https://lists.debian.org/debian-lts-announce/2018/06/msg00005.html",
"https://security.gentoo.org/glsa/201812-01",
"https://security.netapp.com/advisory/ntap-20180607-0003/",
"https://usn.ubuntu.com/3646-1/",
"https://www.debian.org/security/2018/dsa-4240",
"https://www.synology.com/support/security/Synology_SA_18_20",
"https://www.tenable.com/security/tns-2018-12"
],
"epss": 0.02449,
"cvss": 8.8
},
"CVE-2018-5407": {
"verified": false,
"ranking_epss": 0.70545,
"cvss_v2": 1.9,
"cvss_version": 3,
"summary": "Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.",
"references": [
"http://www.securityfocus.com/bid/105897",
"https://access.redhat.com/errata/RHSA-2019:0483",
"https://access.redhat.com/errata/RHSA-2019:0651",
"https://access.redhat.com/errata/RHSA-2019:0652",
"https://access.redhat.com/errata/RHSA-2019:2125",
"https://access.redhat.com/errata/RHSA-2019:3929",
"https://access.redhat.com/errata/RHSA-2019:3931",
"https://access.redhat.com/errata/RHSA-2019:3932",
"https://access.redhat.com/errata/RHSA-2019:3933",
"https://access.redhat.com/errata/RHSA-2019:3935",
"https://eprint.iacr.org/2018/1060.pdf",
"https://github.com/bbbrumley/portsmash",
"https://lists.debian.org/debian-lts-announce/2018/11/msg00024.html",
"https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/",
"https://security.gentoo.org/glsa/201903-10",
"https://security.netapp.com/advisory/ntap-20181126-0001/",
"https://support.f5.com/csp/article/K49711130?utm_source=f5support&%3Butm_medium=RSS",
"https://usn.ubuntu.com/3840-1/",
"https://www.debian.org/security/2018/dsa-4348",
"https://www.debian.org/security/2018/dsa-4355",
"https://www.exploit-db.com/exploits/45785/",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/security-alerts/cpujan2020.html",
"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.tenable.com/security/tns-2018-16",
"https://www.tenable.com/security/tns-2018-17",
"http://www.securityfocus.com/bid/105897",
"https://access.redhat.com/errata/RHSA-2019:0483",
"https://access.redhat.com/errata/RHSA-2019:0651",
"https://access.redhat.com/errata/RHSA-2019:0652",
"https://access.redhat.com/errata/RHSA-2019:2125",
"https://access.redhat.com/errata/RHSA-2019:3929",
"https://access.redhat.com/errata/RHSA-2019:3931",
"https://access.redhat.com/errata/RHSA-2019:3932",
"https://access.redhat.com/errata/RHSA-2019:3933",
"https://access.redhat.com/errata/RHSA-2019:3935",
"https://eprint.iacr.org/2018/1060.pdf",
"https://github.com/bbbrumley/portsmash",
"https://lists.debian.org/debian-lts-announce/2018/11/msg00024.html",
"https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/",
"https://security.gentoo.org/glsa/201903-10",
"https://security.netapp.com/advisory/ntap-20181126-0001/",
"https://support.f5.com/csp/article/K49711130?utm_source=f5support&%3Butm_medium=RSS",
"https://usn.ubuntu.com/3840-1/",
"https://www.debian.org/security/2018/dsa-4348",
"https://www.debian.org/security/2018/dsa-4355",
"https://www.exploit-db.com/exploits/45785/",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/security-alerts/cpujan2020.html",
"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.tenable.com/security/tns-2018-16",
"https://www.tenable.com/security/tns-2018-17"
],
"epss": 0.00643,
"cvss": 4.7
},
"CVE-2023-31122": {
"verified": false,
"ranking_epss": 0.62432,
"cvss_v2": null,
"cvss_version": 3,
"summary": "Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.",
"references": [
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VZJTT5TEFNSBWVMKCLS6EZ7PI6EJYBCO/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZFDNHDH4VLFGDPY6MEZV2RO5N5FLFONW/",
"https://security.netapp.com/advisory/ntap-20231027-0011/",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VZJTT5TEFNSBWVMKCLS6EZ7PI6EJYBCO/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZFDNHDH4VLFGDPY6MEZV2RO5N5FLFONW/",
"https://security.netapp.com/advisory/ntap-20231027-0011/"
],
"epss": 0.0043,
"cvss": 7.5
},
"CVE-2017-17522": {
"verified": false,
"ranking_epss": 0.70838,
"cvss_v2": 6.8,
"cvss_version": 3,
"summary": "Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that exploitation is impossible because the code relies on subprocess.Popen and the default shell=False setting",
"references": [
"http://www.securityfocus.com/bid/102207",
"https://bugs.python.org/issue32367",
"https://security-tracker.debian.org/tracker/CVE-2017-17522",
"http://www.securityfocus.com/bid/102207",
"https://bugs.python.org/issue32367",
"https://security-tracker.debian.org/tracker/CVE-2017-17522"
],
"epss": 0.00654,
"cvss": 8.8
},
"CVE-2017-7679": {
"verified": false,
"ranking_epss": 0.96712,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header.",
"references": [
"http://www.debian.org/security/2017/dsa-3896",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
"http://www.securityfocus.com/bid/99170",
"http://www.securitytracker.com/id/1038711",
"https://access.redhat.com/errata/RHSA-2017:2478",
"https://access.redhat.com/errata/RHSA-2017:2479",
"https://access.redhat.com/errata/RHSA-2017:2483",
"https://access.redhat.com/errata/RHSA-2017:3193",
"https://access.redhat.com/errata/RHSA-2017:3194",
"https://access.redhat.com/errata/RHSA-2017:3195",
"https://access.redhat.com/errata/RHSA-2017:3475",
"https://access.redhat.com/errata/RHSA-2017:3476",
"https://access.redhat.com/errata/RHSA-2017:3477",
"https://github.com/gottburgm/Exploits/tree/master/CVE-2017-7679",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f4515e580dfb6eeca589a5cdebd4c4c709ce632b12924f343c3b7751%40%3Cdev.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
"https://security.gentoo.org/glsa/201710-32",
"https://security.netapp.com/advisory/ntap-20180601-0002/",
"https://support.apple.com/HT208221",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03821en_us",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",
"https://www.nomachine.com/SU08O00185",
"https://www.tenable.com/security/tns-2019-09",
"http://www.debian.org/security/2017/dsa-3896",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
"http://www.securityfocus.com/bid/99170",
"http://www.securitytracker.com/id/1038711",
"https://access.redhat.com/errata/RHSA-2017:2478",
"https://access.redhat.com/errata/RHSA-2017:2479",
"https://access.redhat.com/errata/RHSA-2017:2483",
"https://access.redhat.com/errata/RHSA-2017:3193",
"https://access.redhat.com/errata/RHSA-2017:3194",
"https://access.redhat.com/errata/RHSA-2017:3195",
"https://access.redhat.com/errata/RHSA-2017:3475",
"https://access.redhat.com/errata/RHSA-2017:3476",
"https://access.redhat.com/errata/RHSA-2017:3477",
"https://github.com/gottburgm/Exploits/tree/master/CVE-2017-7679",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f4515e580dfb6eeca589a5cdebd4c4c709ce632b12924f343c3b7751%40%3Cdev.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
"https://security.gentoo.org/glsa/201710-32",
"https://security.netapp.com/advisory/ntap-20180601-0002/",
"https://support.apple.com/HT208221",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03821en_us",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",
"https://www.nomachine.com/SU08O00185",
"https://www.tenable.com/security/tns-2019-09"
],
"epss": 0.31057,
"cvss": 9.8
},
"CVE-2016-3171": {
"verified": false,
"ranking_epss": 0.92174,
"cvss_v2": 6.8,
"cvss_version": 3,
"summary": "Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before 5.5.29, or 5.6.x before 5.6.13, might allow remote attackers to execute arbitrary code via vectors related to session data truncation.",
"references": [
"http://www.debian.org/security/2016/dsa-3498",
"http://www.openwall.com/lists/oss-security/2016/02/24/19",
"http://www.openwall.com/lists/oss-security/2016/03/15/10",
"https://www.drupal.org/SA-CORE-2016-001",
"http://www.debian.org/security/2016/dsa-3498",
"http://www.openwall.com/lists/oss-security/2016/02/24/19",
"http://www.openwall.com/lists/oss-security/2016/03/15/10",
"https://www.drupal.org/SA-CORE-2016-001"
],
"epss": 0.08219,
"cvss": 8.1
},
"CVE-2016-5773": {
"verified": false,
"ranking_epss": 0.94757,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object.",
"references": [
"http://github.com/php/php-src/commit/f6aef68089221c5ea047d4a74224ee3deead99a6?w=1",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3618",
"http://www.openwall.com/lists/oss-security/2016/06/23/4",
"http://www.securityfocus.com/bid/91397",
"https://bugs.php.net/bug.php?id=72434",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://support.apple.com/HT207170",
"http://github.com/php/php-src/commit/f6aef68089221c5ea047d4a74224ee3deead99a6?w=1",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3618",
"http://www.openwall.com/lists/oss-security/2016/06/23/4",
"http://www.securityfocus.com/bid/91397",
"https://bugs.php.net/bug.php?id=72434",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://support.apple.com/HT207170"
],
"epss": 0.16127,
"cvss": 9.8
},
"CVE-2016-5772": {
"verified": false,
"ranking_epss": 0.9472,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "Double free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted XML data that is mishandled in a wddx_deserialize call.",
"references": [
"http://github.com/php/php-src/commit/a44c89e8af7c2410f4bfc5e097be2a5d0639a60c?w=1",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html",
"http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3618",
"http://www.openwall.com/lists/oss-security/2016/06/23/4",
"http://www.securityfocus.com/bid/91398",
"https://bugs.php.net/bug.php?id=72340",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://support.apple.com/HT207170",
"http://github.com/php/php-src/commit/a44c89e8af7c2410f4bfc5e097be2a5d0639a60c?w=1",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html",
"http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3618",
"http://www.openwall.com/lists/oss-security/2016/06/23/4",
"http://www.securityfocus.com/bid/91398",
"https://bugs.php.net/bug.php?id=72340",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://support.apple.com/HT207170"
],
"epss": 0.15935,
"cvss": 9.8
},
"CVE-2016-5771": {
"verified": false,
"ranking_epss": 0.9284,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "spl_array.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data.",
"references": [
"http://github.com/php/php-src/commit/3f627e580acfdaf0595ae3b115b8bec677f203ee?w=1",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html",
"http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3618",
"http://www.openwall.com/lists/oss-security/2016/06/23/4",
"http://www.securityfocus.com/bid/91401",
"https://bugs.php.net/bug.php?id=72433",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://support.apple.com/HT207170",
"http://github.com/php/php-src/commit/3f627e580acfdaf0595ae3b115b8bec677f203ee?w=1",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html",
"http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3618",
"http://www.openwall.com/lists/oss-security/2016/06/23/4",
"http://www.securityfocus.com/bid/91401",
"https://bugs.php.net/bug.php?id=72433",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://support.apple.com/HT207170"
],
"epss": 0.09582,
"cvss": 9.8
},
"CVE-2016-5770": {
"verified": false,
"ranking_epss": 0.93037,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "Integer overflow in the SplFileObject::fread function in spl_directory.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large integer argument, a related issue to CVE-2016-5096.",
"references": [
"http://github.com/php/php-src/commit/7245bff300d3fa8bacbef7897ff080a6f1c23eba?w=1",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html",
"http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3618",
"http://www.openwall.com/lists/oss-security/2016/06/23/4",
"http://www.securityfocus.com/bid/91403",
"https://bugs.php.net/bug.php?id=72262",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://support.apple.com/HT207170",
"http://github.com/php/php-src/commit/7245bff300d3fa8bacbef7897ff080a6f1c23eba?w=1",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html",
"http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3618",
"http://www.openwall.com/lists/oss-security/2016/06/23/4",
"http://www.securityfocus.com/bid/91403",
"https://bugs.php.net/bug.php?id=72262",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://support.apple.com/HT207170"
],
"epss": 0.10051,
"cvss": 9.8
},
"CVE-2018-20783": {
"verified": false,
"ranking_epss": 0.9107,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR reading functions may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse a .phar file. This is related to phar_parse_pharfile in ext/phar/phar.c.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://access.redhat.com/errata/RHSA-2019:3299",
"https://bugs.php.net/bug.php?id=77143",
"https://usn.ubuntu.com/3566-2/",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://access.redhat.com/errata/RHSA-2019:3299",
"https://bugs.php.net/bug.php?id=77143",
"https://usn.ubuntu.com/3566-2/"
],
"epss": 0.06535,
"cvss": 7.5
},
"CVE-2011-2688": {
"verified": false,
"ranking_epss": 0.91202,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "SQL injection vulnerability in mysql/mysql-auth.pl in the mod_authnz_external module 3.2.5 and earlier for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the user field.",
"references": [
"http://anders.fix.no/software/#unix",
"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=633637",
"http://code.google.com/p/mod-auth-external/issues/detail?id=5",
"http://secunia.com/advisories/45240",
"http://www.debian.org/security/2011/dsa-2279",
"http://www.openwall.com/lists/oss-security/2011/07/12/10",
"http://www.openwall.com/lists/oss-security/2011/07/12/17",
"http://www.securityfocus.com/bid/48653",
"https://exchange.xforce.ibmcloud.com/vulnerabilities/68799",
"http://anders.fix.no/software/#unix",
"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=633637",
"http://code.google.com/p/mod-auth-external/issues/detail?id=5",
"http://secunia.com/advisories/45240",
"http://www.debian.org/security/2011/dsa-2279",
"http://www.openwall.com/lists/oss-security/2011/07/12/10",
"http://www.openwall.com/lists/oss-security/2011/07/12/17",
"http://www.securityfocus.com/bid/48653",
"https://exchange.xforce.ibmcloud.com/vulnerabilities/68799"
],
"epss": 0.06709,
"cvss": 7.5
},
"CVE-2014-1912": {
"verified": false,
"ranking_epss": 0.95984,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.",
"references": [
"http://bugs.python.org/issue20246",
"http://hg.python.org/cpython/rev/87673659d8f7",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-04/msg00035.html",
"http://lists.opensuse.org/opensuse-updates/2014-05/msg00008.html",
"http://pastebin.com/raw.php?i=GHXSmNEg",
"http://rhn.redhat.com/errata/RHSA-2015-1064.html",
"http://rhn.redhat.com/errata/RHSA-2015-1330.html",
"http://www.debian.org/security/2014/dsa-2880",
"http://www.exploit-db.com/exploits/31875",
"http://www.openwall.com/lists/oss-security/2014/02/12/16",
"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/65379",
"http://www.securitytracker.com/id/1029831",
"http://www.ubuntu.com/usn/USN-2125-1",
"https://security.gentoo.org/glsa/201503-10",
"https://support.apple.com/kb/HT205031",
"https://www.trustedsec.com/february-2014/python-remote-code-execution-socket-recvfrom_into/",
"http://bugs.python.org/issue20246",
"http://hg.python.org/cpython/rev/87673659d8f7",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-04/msg00035.html",
"http://lists.opensuse.org/opensuse-updates/2014-05/msg00008.html",
"http://pastebin.com/raw.php?i=GHXSmNEg",
"http://rhn.redhat.com/errata/RHSA-2015-1064.html",
"http://rhn.redhat.com/errata/RHSA-2015-1330.html",
"http://www.debian.org/security/2014/dsa-2880",
"http://www.exploit-db.com/exploits/31875",
"http://www.openwall.com/lists/oss-security/2014/02/12/16",
"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/65379",
"http://www.securitytracker.com/id/1029831",
"http://www.ubuntu.com/usn/USN-2125-1",
"https://security.gentoo.org/glsa/201503-10",
"https://support.apple.com/kb/HT205031",
"https://www.trustedsec.com/february-2014/python-remote-code-execution-socket-recvfrom_into/"
],
"epss": 0.23888,
"cvss": 7.5
},
"CVE-2021-32786": {
"verified": false,
"ranking_epss": 0.25791,
"cvss_v2": 5.8,
"cvss_version": 3,
"summary": "mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In versions prior to 2.4.9, `oidc_validate_redirect_url()` does not parse URLs the same way as most browsers do. As a result, this function can be bypassed and leads to an Open Redirect vulnerability in the logout functionality. This bug has been fixed in version 2.4.9 by replacing any backslash of the URL to redirect with slashes to address a particular breaking change between the different specifications (RFC2396 / RFC3986 and WHATWG). As a workaround, this vulnerability can be mitigated by configuring `mod_auth_openidc` to only allow redirection whose destination matches a given regular expression.",
"references": [
"https://daniel.haxx.se/blog/2017/01/30/one-url-standard-please/",
"https://github.com/zmartzone/mod_auth_openidc/commit/3a115484eb927bc6daa5737dd84f88ff4bbc5544",
"https://github.com/zmartzone/mod_auth_openidc/releases/tag/v2.4.9",
"https://github.com/zmartzone/mod_auth_openidc/security/advisories/GHSA-xm4c-5wm5-jqv7",
"https://lists.debian.org/debian-lts-announce/2023/04/msg00034.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZVF6BSJLRQZ7PFFR4X5JSU6KUJYNOCU/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QXAWKPT5LXZSUTFSJ6IWSZC7RMYYQXQD/",
"https://security.netapp.com/advisory/ntap-20210902-0001/",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://daniel.haxx.se/blog/2017/01/30/one-url-standard-please/",
"https://github.com/zmartzone/mod_auth_openidc/commit/3a115484eb927bc6daa5737dd84f88ff4bbc5544",
"https://github.com/zmartzone/mod_auth_openidc/releases/tag/v2.4.9",
"https://github.com/zmartzone/mod_auth_openidc/security/advisories/GHSA-xm4c-5wm5-jqv7",
"https://lists.debian.org/debian-lts-announce/2023/04/msg00034.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZVF6BSJLRQZ7PFFR4X5JSU6KUJYNOCU/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QXAWKPT5LXZSUTFSJ6IWSZC7RMYYQXQD/",
"https://security.netapp.com/advisory/ntap-20210902-0001/",
"https://www.oracle.com/security-alerts/cpuapr2022.html"
],
"epss": 0.00091,
"cvss": 4.7
},
"CVE-2021-32785": {
"verified": false,
"ranking_epss": 0.49521,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. When mod_auth_openidc versions prior to 2.4.9 are configured to use an unencrypted Redis cache (`OIDCCacheEncrypt off`, `OIDCSessionType server-cache`, `OIDCCacheType redis`), `mod_auth_openidc` wrongly performed argument interpolation before passing Redis requests to `hiredis`, which would perform it again and lead to an uncontrolled format string bug. Initial assessment shows that this bug does not appear to allow gaining arbitrary code execution, but can reliably provoke a denial of service by repeatedly crashing the Apache workers. This bug has been corrected in version 2.4.9 by performing argument interpolation only once, using the `hiredis` API. As a workaround, this vulnerability can be mitigated by setting `OIDCCacheEncrypt` to `on`, as cache keys are cryptographically hashed before use when this option is enabled.",
"references": [
"https://github.com/zmartzone/mod_auth_openidc/commit/dc672688dc1f2db7df8ad4abebc367116017a449",
"https://github.com/zmartzone/mod_auth_openidc/releases/tag/v2.4.9",
"https://github.com/zmartzone/mod_auth_openidc/security/advisories/GHSA-55r8-6w97-xxr4",
"https://lists.debian.org/debian-lts-announce/2023/04/msg00034.html",
"https://security.netapp.com/advisory/ntap-20210902-0001/",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://github.com/zmartzone/mod_auth_openidc/commit/dc672688dc1f2db7df8ad4abebc367116017a449",
"https://github.com/zmartzone/mod_auth_openidc/releases/tag/v2.4.9",
"https://github.com/zmartzone/mod_auth_openidc/security/advisories/GHSA-55r8-6w97-xxr4",
"https://lists.debian.org/debian-lts-announce/2023/04/msg00034.html",
"https://security.netapp.com/advisory/ntap-20210902-0001/",
"https://www.oracle.com/security-alerts/cpuapr2022.html"
],
"epss": 0.00262,
"cvss": 5.3
},
"CVE-2016-4070": {
"verified": false,
"ranking_epss": 0.91025,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "Integer overflow in the php_raw_url_encode function in ext/standard/url.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to cause a denial of service (application crash) via a long string to the rawurlencode function. NOTE: the vendor says \"Not sure if this qualifies as security issue (probably not).",
"references": [
"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00031.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00033.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00056.html",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3560",
"http://www.openwall.com/lists/oss-security/2016/04/24/1",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/85801",
"http://www.ubuntu.com/usn/USN-2952-1",
"http://www.ubuntu.com/usn/USN-2952-2",
"https://bugs.php.net/bug.php?id=71798",
"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=95433e8e339dbb6b5d5541473c1661db6ba2c451",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
"https://support.apple.com/HT206567",
"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00031.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00033.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00056.html",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3560",
"http://www.openwall.com/lists/oss-security/2016/04/24/1",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/85801",
"http://www.ubuntu.com/usn/USN-2952-1",
"http://www.ubuntu.com/usn/USN-2952-2",
"https://bugs.php.net/bug.php?id=71798",
"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=95433e8e339dbb6b5d5541473c1661db6ba2c451",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
"https://support.apple.com/HT206567"
],
"epss": 0.06468,
"cvss": 7.5
},
"CVE-2014-4650": {
"verified": false,
"ranking_epss": 0.90664,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator.",
"references": [
"http://bugs.python.org/issue21766",
"http://openwall.com/lists/oss-security/2014/06/26/3",
"https://access.redhat.com/security/cve/cve-2014-4650",
"http://bugs.python.org/issue21766",
"http://openwall.com/lists/oss-security/2014/06/26/3",
"https://access.redhat.com/security/cve/cve-2014-4650"
],
"epss": 0.06019,
"cvss": 9.8
},
"CVE-2023-40217": {
"verified": false,
"ranking_epss": 0.6929,
"cvss_v2": null,
"cvss_version": 3,
"summary": "An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. It primarily affects servers (such as HTTP servers) that use TLS client authentication. If a TLS server-side socket is created, receives data into the socket buffer, and then is closed quickly, there is a brief window where the SSLSocket instance will detect the socket as \"not connected\" and won't initiate a handshake, but buffered data will still be readable from the socket buffer. This data will not be authenticated if the server-side TLS peer is expecting client certificate authentication, and is indistinguishable from valid TLS stream data. Data is limited in size to the amount that will fit in the buffer. (The TLS connection cannot directly be used for data exfiltration because the vulnerable code path requires that the connection be closed on initialization of the SSLSocket.)",
"references": [
"https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html",
"https://mail.python.org/archives/list/security-announce%40python.org/thread/PEPLII27KYHLF4AK3ZQGKYNCRERG4YXY/",
"https://security.netapp.com/advisory/ntap-20231006-0014/",
"https://www.python.org/dev/security/",
"https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html",
"https://lists.debian.org/debian-lts-announce/2024/11/msg00005.html",
"https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html",
"https://mail.python.org/archives/list/security-announce%40python.org/thread/PEPLII27KYHLF4AK3ZQGKYNCRERG4YXY/",
"https://security.netapp.com/advisory/ntap-20231006-0014/",
"https://www.python.org/dev/security/"
],
"epss": 0.00597,
"cvss": 5.3
},
"CVE-2014-3538": {
"verified": false,
"ranking_epss": 0.95602,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted file that triggers backtracking during processing of an awk rule. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7345.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://mx.gw.com/pipermail/file/2014/001553.html",
"http://openwall.com/lists/oss-security/2014/06/30/7",
"http://rhn.redhat.com/errata/RHSA-2014-1327.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://rhn.redhat.com/errata/RHSA-2016-0760.html",
"http://secunia.com/advisories/60696",
"http://www.debian.org/security/2014/dsa-3008",
"http://www.debian.org/security/2014/dsa-3021",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.securityfocus.com/bid/68348",
"https://bugzilla.redhat.com/show_bug.cgi?id=1098222",
"https://github.com/file/file/commit/4a284c89d6ef11aca34da65da7d673050a5ea320",
"https://github.com/file/file/commit/69a5a43b3b71f53b0577f41264a073f495799610",
"https://github.com/file/file/commit/71a8b6c0d758acb0f73e2e51421a711b5e9d6668",
"https://github.com/file/file/commit/74cafd7de9ec99a14f4480927580e501c8f852c3",
"https://github.com/file/file/commit/758e066df72fb1ac08d2eea91ddc3973d259e991",
"https://support.apple.com/HT204659",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://mx.gw.com/pipermail/file/2014/001553.html",
"http://openwall.com/lists/oss-security/2014/06/30/7",
"http://rhn.redhat.com/errata/RHSA-2014-1327.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://rhn.redhat.com/errata/RHSA-2016-0760.html",
"http://secunia.com/advisories/60696",
"http://www.debian.org/security/2014/dsa-3008",
"http://www.debian.org/security/2014/dsa-3021",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.securityfocus.com/bid/68348",
"https://bugzilla.redhat.com/show_bug.cgi?id=1098222",
"https://github.com/file/file/commit/4a284c89d6ef11aca34da65da7d673050a5ea320",
"https://github.com/file/file/commit/69a5a43b3b71f53b0577f41264a073f495799610",
"https://github.com/file/file/commit/71a8b6c0d758acb0f73e2e51421a711b5e9d6668",
"https://github.com/file/file/commit/74cafd7de9ec99a14f4480927580e501c8f852c3",
"https://github.com/file/file/commit/758e066df72fb1ac08d2eea91ddc3973d259e991",
"https://support.apple.com/HT204659"
],
"epss": 0.21003,
"cvss": 5
},
"CVE-2020-13938": {
"verified": false,
"ranking_epss": 0.21763,
"cvss_v2": 2.1,
"cvss_version": 3,
"summary": "Apache HTTP Server versions 2.4.0 to 2.4.46 Unprivileged local users can stop httpd on Windows",
"references": [
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://www.openwall.com/lists/oss-security/2021/06/10/3",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10379",
"https://lists.apache.org/thread.html/r5fdc4fbbc7ddb816c843329a9accdcf284ade86e8d77b8c2a6d9bc30%40%3Cannounce.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r7f2b70b621651548f4b6f027552f1dd91705d7111bb5d15cda0a68dd%40%3Cdev.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re026d3da9d7824bd93b9f871c0fdda978d960c7e62d8c43cba8d0bf3%40%3Ccvs.httpd.apache.org%3E",
"https://security.netapp.com/advisory/ntap-20210702-0001/",
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://www.openwall.com/lists/oss-security/2021/06/10/3",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10379",
"https://lists.apache.org/thread.html/r5fdc4fbbc7ddb816c843329a9accdcf284ade86e8d77b8c2a6d9bc30%40%3Cannounce.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r7f2b70b621651548f4b6f027552f1dd91705d7111bb5d15cda0a68dd%40%3Cdev.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re026d3da9d7824bd93b9f871c0fdda978d960c7e62d8c43cba8d0bf3%40%3Ccvs.httpd.apache.org%3E",
"https://security.netapp.com/advisory/ntap-20210702-0001/"
],
"epss": 0.00071,
"cvss": 5.5
},
"CVE-2022-48560": {
"verified": false,
"ranking_epss": 0.42283,
"cvss_v2": null,
"cvss_version": 3,
"summary": "A use-after-free exists in Python through 3.9 via heappushpop in heapq.",
"references": [
"https://bugs.python.org/issue39421",
"https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZ5OOBWNYWXFTZDMCGHJVGDLDTHLWITJ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VO7Y2YZSDK3UYJD2KBGLXRTGNG6T326J/",
"https://security.netapp.com/advisory/ntap-20230929-0008/",
"https://bugs.python.org/issue39421",
"https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZ5OOBWNYWXFTZDMCGHJVGDLDTHLWITJ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VO7Y2YZSDK3UYJD2KBGLXRTGNG6T326J/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZ5OOBWNYWXFTZDMCGHJVGDLDTHLWITJ/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VO7Y2YZSDK3UYJD2KBGLXRTGNG6T326J/",
"https://security.netapp.com/advisory/ntap-20230929-0008/"
],
"epss": 0.00202,
"cvss": 7.5
},
"CVE-2022-48565": {
"verified": false,
"ranking_epss": 0.91615,
"cvss_v2": null,
"cvss_version": 3,
"summary": "An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.",
"references": [
"https://bugs.python.org/issue42051",
"https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFHYAGWBFBNUGWU6XWKBHTCV5NH77MB7/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BAYWJD576JUKLHCWKDLMJSUGTRDKPF3M/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KZRZRJHWLZ7MOJNPQBWGJVXMVYDC5BRA/",
"https://security.netapp.com/advisory/ntap-20231006-0007/",
"https://bugs.python.org/issue42051",
"https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFHYAGWBFBNUGWU6XWKBHTCV5NH77MB7/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BAYWJD576JUKLHCWKDLMJSUGTRDKPF3M/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KZRZRJHWLZ7MOJNPQBWGJVXMVYDC5BRA/",
"https://security.netapp.com/advisory/ntap-20231006-0007/"
],
"epss": 0.07274,
"cvss": 9.8
},
"CVE-2022-48564": {
"verified": false,
"ranking_epss": 0.27162,
"cvss_v2": null,
"cvss_version": 3,
"summary": "read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format.",
"references": [
"https://bugs.python.org/issue42103",
"https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html",
"https://security.netapp.com/advisory/ntap-20230929-0009/",
"https://bugs.python.org/issue42103",
"https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html",
"https://security.netapp.com/advisory/ntap-20230929-0009/"
],
"epss": 0.00099,
"cvss": 6.5
},
"CVE-2022-48566": {
"verified": false,
"ranking_epss": 0.27088,
"cvss_v2": null,
"cvss_version": 3,
"summary": "An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in hmac.compare_digest.",
"references": [
"https://bugs.python.org/issue40791",
"https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html",
"https://security.netapp.com/advisory/ntap-20231006-0013/",
"https://bugs.python.org/issue40791",
"https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html",
"https://security.netapp.com/advisory/ntap-20231006-0013/"
],
"epss": 0.00098,
"cvss": 5.9
},
"CVE-2016-6174": {
"verified": false,
"ranking_epss": 0.9541,
"cvss_v2": 6.8,
"cvss_version": 3,
"summary": "applications/core/modules/front/system/content.php in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power Board) before 4.1.13, when used with PHP before 5.4.24 or 5.5.x before 5.5.8, allows remote attackers to execute arbitrary code via the content_class parameter.",
"references": [
"http://karmainsecurity.com/KIS-2016-11",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://packetstormsecurity.com/files/137804/IPS-Community-Suite-4.1.12.3-PHP-Code-Injection.html",
"http://seclists.org/fulldisclosure/2016/Jul/19",
"http://www.securityfocus.com/bid/91732",
"https://invisionpower.com/release-notes/4113-r44/",
"https://support.apple.com/HT207170",
"https://www.exploit-db.com/exploits/40084/",
"http://karmainsecurity.com/KIS-2016-11",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://packetstormsecurity.com/files/137804/IPS-Community-Suite-4.1.12.3-PHP-Code-Injection.html",
"http://seclists.org/fulldisclosure/2016/Jul/19",
"http://www.securityfocus.com/bid/91732",
"https://invisionpower.com/release-notes/4113-r44/",
"https://support.apple.com/HT207170",
"https://www.exploit-db.com/exploits/40084/"
],
"epss": 0.19825,
"cvss": 8.1
},
"CVE-2024-47252": {
"verified": false,
"ranking_epss": 0.37151,
"cvss_v2": null,
"cvss_version": 3,
"summary": "Insufficient escaping of user-supplied data in mod_ssl in Apache HTTP Server 2.4.63 and earlier allows an untrusted SSL/TLS client to insert escape characters into log files in some configurations.\n\nIn a logging configuration where CustomLog is used with \"%{varname}x\" or \"%{varname}c\" to log variables provided by mod_ssl such as SSL_TLS_SNI, no escaping is performed by either mod_log_config or mod_ssl and unsanitized data provided by the client may appear in log files.",
"references": [
"https://httpd.apache.org/security/vulnerabilities_24.html",
"http://www.openwall.com/lists/oss-security/2025/07/10/2",
"http://www.openwall.com/lists/oss-security/2025/07/10/6",
"https://lists.debian.org/debian-lts-announce/2025/08/msg00009.html"
],
"epss": 0.00163,
"cvss": 7.5
},
"CVE-2018-5712": {
"verified": false,
"ranking_epss": 0.99529,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. There is Reflected XSS on the PHAR 404 error page via the URI of a request for a .phar file.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/102742",
"http://www.securityfocus.com/bid/104020",
"http://www.securitytracker.com/id/1040363",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://bugs.php.net/bug.php?id=74782",
"https://lists.debian.org/debian-lts-announce/2018/01/msg00025.html",
"https://usn.ubuntu.com/3566-1/",
"https://usn.ubuntu.com/3600-1/",
"https://usn.ubuntu.com/3600-2/",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/102742",
"http://www.securityfocus.com/bid/104020",
"http://www.securitytracker.com/id/1040363",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://bugs.php.net/bug.php?id=74782",
"https://lists.debian.org/debian-lts-announce/2018/01/msg00025.html",
"https://usn.ubuntu.com/3566-1/",
"https://usn.ubuntu.com/3600-1/",
"https://usn.ubuntu.com/3600-2/",
"https://www.oracle.com/security-alerts/cpuapr2020.html"
],
"epss": 0.89192,
"cvss": 6.1
},
"CVE-2018-5711": {
"verified": false,
"ranking_epss": 0.91948,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an infinite loop via a crafted GIF file, as demonstrated by a call to the imagecreatefromgif or imagecreatefromstring PHP function. This is related to GetCode_ and gdImageCreateFromGifCtx.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://bugs.php.net/bug.php?id=75571",
"https://lists.debian.org/debian-lts-announce/2018/01/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2019/01/msg00028.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6/",
"https://security.gentoo.org/glsa/201903-18",
"https://usn.ubuntu.com/3755-1/",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://bugs.php.net/bug.php?id=75571",
"https://lists.debian.org/debian-lts-announce/2018/01/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2019/01/msg00028.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6/",
"https://security.gentoo.org/glsa/201903-18",
"https://usn.ubuntu.com/3755-1/",
"https://www.oracle.com/security-alerts/cpuapr2020.html"
],
"epss": 0.07835,
"cvss": 5.5
},
"CVE-2014-2020": {
"verified": false,
"ranking_epss": 0.56573,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check data types, which might allow remote attackers to obtain sensitive information by using a (1) string or (2) array data type in place of a numeric data type, as demonstrated by an imagecrop function call with a string for the x dimension value, a different vulnerability than CVE-2013-7226.",
"references": [
"http://www.ubuntu.com/usn/USN-2126-1",
"https://bugs.php.net/bug.php?id=66356",
"https://github.com/php/php-src/commit/2938329ce19cb8c4197dec146c3ec887c6f61d01",
"http://www.ubuntu.com/usn/USN-2126-1",
"https://bugs.php.net/bug.php?id=66356",
"https://github.com/php/php-src/commit/2938329ce19cb8c4197dec146c3ec887c6f61d01"
],
"epss": 0.00339,
"cvss": 5
},
"CVE-2019-15903": {
"verified": false,
"ranking_epss": 0.41774,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00080.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00081.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00016.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00017.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00018.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00019.html",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"http://packetstormsecurity.com/files/154503/Slackware-Security-Advisory-expat-Updates.html",
"http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html",
"http://packetstormsecurity.com/files/154947/Slackware-Security-Advisory-mozilla-firefox-Updates.html",
"http://seclists.org/fulldisclosure/2019/Dec/23",
"http://seclists.org/fulldisclosure/2019/Dec/26",
"http://seclists.org/fulldisclosure/2019/Dec/27",
"http://seclists.org/fulldisclosure/2019/Dec/30",
"https://access.redhat.com/errata/RHSA-2019:3210",
"https://access.redhat.com/errata/RHSA-2019:3237",
"https://access.redhat.com/errata/RHSA-2019:3756",
"https://github.com/libexpat/libexpat/commit/c20b758c332d9a13afbbb276d30db1d183a85d43",
"https://github.com/libexpat/libexpat/issues/317",
"https://github.com/libexpat/libexpat/issues/342",
"https://github.com/libexpat/libexpat/pull/318",
"https://lists.debian.org/debian-lts-announce/2019/11/msg00006.html",
"https://lists.debian.org/debian-lts-announce/2019/11/msg00017.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A4TZKPJFTURRLXIGLB34WVKQ5HGY6JJA/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BDUTI5TVQWIGGQXPEVI4T2ENHFSBMIBP/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S26LGXXQ7YF2BP3RGOWELBFKM6BHF6UG/",
"https://seclists.org/bugtraq/2019/Dec/17",
"https://seclists.org/bugtraq/2019/Dec/21",
"https://seclists.org/bugtraq/2019/Dec/23",
"https://seclists.org/bugtraq/2019/Nov/1",
"https://seclists.org/bugtraq/2019/Nov/24",
"https://seclists.org/bugtraq/2019/Oct/29",
"https://seclists.org/bugtraq/2019/Sep/30",
"https://seclists.org/bugtraq/2019/Sep/37",
"https://security.gentoo.org/glsa/201911-08",
"https://security.netapp.com/advisory/ntap-20190926-0004/",
"https://support.apple.com/kb/HT210785",
"https://support.apple.com/kb/HT210788",
"https://support.apple.com/kb/HT210789",
"https://support.apple.com/kb/HT210790",
"https://support.apple.com/kb/HT210793",
"https://support.apple.com/kb/HT210794",
"https://support.apple.com/kb/HT210795",
"https://usn.ubuntu.com/4132-1/",
"https://usn.ubuntu.com/4132-2/",
"https://usn.ubuntu.com/4165-1/",
"https://usn.ubuntu.com/4202-1/",
"https://usn.ubuntu.com/4335-1/",
"https://www.debian.org/security/2019/dsa-4530",
"https://www.debian.org/security/2019/dsa-4549",
"https://www.debian.org/security/2019/dsa-4571",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/security-alerts/cpuoct2020.html",
"https://www.tenable.com/security/tns-2021-11",
"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00080.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00081.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00016.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00017.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00018.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00019.html",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"http://packetstormsecurity.com/files/154503/Slackware-Security-Advisory-expat-Updates.html",
"http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html",
"http://packetstormsecurity.com/files/154947/Slackware-Security-Advisory-mozilla-firefox-Updates.html",
"http://seclists.org/fulldisclosure/2019/Dec/23",
"http://seclists.org/fulldisclosure/2019/Dec/26",
"http://seclists.org/fulldisclosure/2019/Dec/27",
"http://seclists.org/fulldisclosure/2019/Dec/30",
"https://access.redhat.com/errata/RHSA-2019:3210",
"https://access.redhat.com/errata/RHSA-2019:3237",
"https://access.redhat.com/errata/RHSA-2019:3756",
"https://github.com/libexpat/libexpat/commit/c20b758c332d9a13afbbb276d30db1d183a85d43",
"https://github.com/libexpat/libexpat/issues/317",
"https://github.com/libexpat/libexpat/issues/342",
"https://github.com/libexpat/libexpat/pull/318",
"https://lists.debian.org/debian-lts-announce/2019/11/msg00006.html",
"https://lists.debian.org/debian-lts-announce/2019/11/msg00017.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A4TZKPJFTURRLXIGLB34WVKQ5HGY6JJA/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BDUTI5TVQWIGGQXPEVI4T2ENHFSBMIBP/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S26LGXXQ7YF2BP3RGOWELBFKM6BHF6UG/",
"https://seclists.org/bugtraq/2019/Dec/17",
"https://seclists.org/bugtraq/2019/Dec/21",
"https://seclists.org/bugtraq/2019/Dec/23",
"https://seclists.org/bugtraq/2019/Nov/1",
"https://seclists.org/bugtraq/2019/Nov/24",
"https://seclists.org/bugtraq/2019/Oct/29",
"https://seclists.org/bugtraq/2019/Sep/30",
"https://seclists.org/bugtraq/2019/Sep/37",
"https://security.gentoo.org/glsa/201911-08",
"https://security.netapp.com/advisory/ntap-20190926-0004/",
"https://support.apple.com/kb/HT210785",
"https://support.apple.com/kb/HT210788",
"https://support.apple.com/kb/HT210789",
"https://support.apple.com/kb/HT210790",
"https://support.apple.com/kb/HT210793",
"https://support.apple.com/kb/HT210794",
"https://support.apple.com/kb/HT210795",
"https://usn.ubuntu.com/4132-1/",
"https://usn.ubuntu.com/4132-2/",
"https://usn.ubuntu.com/4165-1/",
"https://usn.ubuntu.com/4202-1/",
"https://usn.ubuntu.com/4335-1/",
"https://www.debian.org/security/2019/dsa-4530",
"https://www.debian.org/security/2019/dsa-4549",
"https://www.debian.org/security/2019/dsa-4571",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/security-alerts/cpuoct2020.html",
"https://www.tenable.com/security/tns-2021-11"
],
"epss": 0.00198,
"cvss": 7.5
},
"CVE-2016-9137": {
"verified": false,
"ranking_epss": 0.76174,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "Use-after-free vulnerability in the CURLFile implementation in ext/curl/curl_file.c in PHP before 5.6.27 and 7.x before 7.0.12 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data that is mishandled during __wakeup processing.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=0e6fe3a4c96be2d3e88389a5776f878021b4c59f",
"http://www.debian.org/security/2016/dsa-3698",
"http://www.openwall.com/lists/oss-security/2016/11/01/2",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/93577",
"https://bugs.php.net/bug.php?id=73147",
"https://www.tenable.com/security/tns-2016-19",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=0e6fe3a4c96be2d3e88389a5776f878021b4c59f",
"http://www.debian.org/security/2016/dsa-3698",
"http://www.openwall.com/lists/oss-security/2016/11/01/2",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/93577",
"https://bugs.php.net/bug.php?id=73147",
"https://www.tenable.com/security/tns-2016-19"
],
"epss": 0.00942,
"cvss": 9.8
},
"CVE-2015-6831": {
"verified": false,
"ranking_epss": 0.78475,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to execute arbitrary code via vectors involving (1) ArrayObject, (2) SplObjectStorage, and (3) SplDoublyLinkedList, which are mishandled during unserialization.",
"references": [
"http://www.debian.org/security/2015/dsa-3344",
"http://www.openwall.com/lists/oss-security/2015/08/19/3",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/76737",
"https://bugs.php.net/bug.php?id=70155",
"https://bugs.php.net/bug.php?id=70166",
"https://bugs.php.net/bug.php?id=70168",
"https://bugs.php.net/bug.php?id=70169",
"https://security.gentoo.org/glsa/201606-10",
"http://www.debian.org/security/2015/dsa-3344",
"http://www.openwall.com/lists/oss-security/2015/08/19/3",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/76737",
"https://bugs.php.net/bug.php?id=70155",
"https://bugs.php.net/bug.php?id=70166",
"https://bugs.php.net/bug.php?id=70168",
"https://bugs.php.net/bug.php?id=70169",
"https://security.gentoo.org/glsa/201606-10"
],
"epss": 0.01156,
"cvss": 7.3
},
"CVE-2015-6832": {
"verified": false,
"ranking_epss": 0.81267,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "Use-after-free vulnerability in the SPL unserialize implementation in ext/spl/spl_array.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to execute arbitrary code via crafted serialized data that triggers misuse of an array field.",
"references": [
"http://www.debian.org/security/2015/dsa-3344",
"http://www.php.net/ChangeLog-5.php",
"https://bugs.php.net/bug.php?id=70068",
"https://security.gentoo.org/glsa/201606-10",
"http://www.debian.org/security/2015/dsa-3344",
"http://www.php.net/ChangeLog-5.php",
"https://bugs.php.net/bug.php?id=70068",
"https://security.gentoo.org/glsa/201606-10"
],
"epss": 0.01536,
"cvss": 7.3
},
"CVE-2015-6833": {
"verified": false,
"ranking_epss": 0.60622,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "Directory traversal vulnerability in the PharData class in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to write to arbitrary files via a .. (dot dot) in a ZIP archive entry that is mishandled during an extractTo call.",
"references": [
"http://www.debian.org/security/2015/dsa-3344",
"http://www.openwall.com/lists/oss-security/2015/08/19/3",
"http://www.php.net/ChangeLog-5.php",
"https://bugs.php.net/bug.php?id=70019",
"https://security.gentoo.org/glsa/201606-10",
"http://www.debian.org/security/2015/dsa-3344",
"http://www.openwall.com/lists/oss-security/2015/08/19/3",
"http://www.php.net/ChangeLog-5.php",
"https://bugs.php.net/bug.php?id=70019",
"https://security.gentoo.org/glsa/201606-10"
],
"epss": 0.00401,
"cvss": 7.5
},
"CVE-2015-6834": {
"verified": false,
"ranking_epss": 0.97139,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote attackers to execute arbitrary code via vectors related to (1) the Serializable interface, (2) the SplObjectStorage class, and (3) the SplDoublyLinkedList class, which are mishandled during unserialization.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://www.debian.org/security/2015/dsa-3358",
"http://www.securityfocus.com/bid/76649",
"http://www.securitytracker.com/id/1033548",
"https://bugs.php.net/bug.php?id=70172",
"https://bugs.php.net/bug.php?id=70365",
"https://bugs.php.net/bug.php?id=70366",
"https://security.gentoo.org/glsa/201606-10",
"http://php.net/ChangeLog-5.php",
"http://www.debian.org/security/2015/dsa-3358",
"http://www.securityfocus.com/bid/76649",
"http://www.securitytracker.com/id/1033548",
"https://bugs.php.net/bug.php?id=70172",
"https://bugs.php.net/bug.php?id=70365",
"https://bugs.php.net/bug.php?id=70366",
"https://security.gentoo.org/glsa/201606-10"
],
"epss": 0.37239,
"cvss": 9.8
},
"CVE-2015-6835": {
"verified": false,
"ranking_epss": 0.95649,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, which allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted session content.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://www.debian.org/security/2015/dsa-3358",
"http://www.securityfocus.com/bid/76734",
"http://www.securitytracker.com/id/1033548",
"https://bugs.php.net/bug.php?id=70219",
"https://security.gentoo.org/glsa/201606-10",
"http://php.net/ChangeLog-5.php",
"http://www.debian.org/security/2015/dsa-3358",
"http://www.securityfocus.com/bid/76734",
"http://www.securitytracker.com/id/1033548",
"https://bugs.php.net/bug.php?id=70219",
"https://security.gentoo.org/glsa/201606-10"
],
"epss": 0.21302,
"cvss": 9.8
},
"CVE-2015-6836": {
"verified": false,
"ranking_epss": 0.87406,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 does not properly manage headers, which allows remote attackers to execute arbitrary code via crafted serialized data that triggers a \"type confusion\" in the serialize_function_call function.",
"references": [
"http://www.debian.org/security/2015/dsa-3358",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/76644",
"http://www.securitytracker.com/id/1033548",
"https://bugs.php.net/bug.php?id=70388",
"https://security.gentoo.org/glsa/201606-10",
"http://www.debian.org/security/2015/dsa-3358",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/76644",
"http://www.securitytracker.com/id/1033548",
"https://bugs.php.net/bug.php?id=70388",
"https://security.gentoo.org/glsa/201606-10"
],
"epss": 0.03428,
"cvss": 7.3
},
"CVE-2015-6837": {
"verified": false,
"ranking_epss": 0.88029,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13, when libxml2 before 2.9.2 is used, does not consider the possibility of a NULL valuePop return value before proceeding with a free operation during initial error checking, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted XML document, a different vulnerability than CVE-2015-6838.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://www.debian.org/security/2015/dsa-3358",
"http://www.securityfocus.com/bid/76738",
"http://www.securitytracker.com/id/1033548",
"https://bugs.php.net/bug.php?id=69782",
"https://security.gentoo.org/glsa/201606-10",
"http://php.net/ChangeLog-5.php",
"http://www.debian.org/security/2015/dsa-3358",
"http://www.securityfocus.com/bid/76738",
"http://www.securitytracker.com/id/1033548",
"https://bugs.php.net/bug.php?id=69782",
"https://security.gentoo.org/glsa/201606-10"
],
"epss": 0.03804,
"cvss": 7.5
},
"CVE-2015-6838": {
"verified": false,
"ranking_epss": 0.88029,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13, when libxml2 before 2.9.2 is used, does not consider the possibility of a NULL valuePop return value before proceeding with a free operation after the principal argument loop, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted XML document, a different vulnerability than CVE-2015-6837.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://www.debian.org/security/2015/dsa-3358",
"http://www.securityfocus.com/bid/76733",
"http://www.securitytracker.com/id/1033548",
"https://bugs.php.net/bug.php?id=69782",
"https://security.gentoo.org/glsa/201606-10",
"http://php.net/ChangeLog-5.php",
"http://www.debian.org/security/2015/dsa-3358",
"http://www.securityfocus.com/bid/76733",
"http://www.securitytracker.com/id/1033548",
"https://bugs.php.net/bug.php?id=69782",
"https://security.gentoo.org/glsa/201606-10"
],
"epss": 0.03804,
"cvss": 7.5
},
"CVE-2018-19520": {
"verified": false,
"ranking_epss": 0.77095,
"cvss_v2": 6.5,
"cvss_version": 3,
"summary": "An issue was discovered in SDCMS 1.6 with PHP 5.x. app/admin/controller/themecontroller.php uses a check_bad function in an attempt to block certain PHP functions such as eval, but does not prevent use of preg_replace 'e' calls, allowing users to execute arbitrary code by leveraging access to admin template management.",
"references": [
"https://blog.whiterabbitxyj.com/cve/SDCMS_1.6_code_execution.doc",
"https://github.com/WhiteRabbitc/WhiteRabbitc.github.io/blob/master/cve/SDCMS_1.6_code_execution.doc",
"https://blog.whiterabbitxyj.com/cve/SDCMS_1.6_code_execution.doc",
"https://github.com/WhiteRabbitc/WhiteRabbitc.github.io/blob/master/cve/SDCMS_1.6_code_execution.doc"
],
"epss": 0.01016,
"cvss": 8.8
},
"CVE-2016-7478": {
"verified": false,
"ranking_epss": 0.95259,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "Zend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (infinite loop) via a crafted Exception object in serialized data, a related issue to CVE-2015-8876.",
"references": [
"http://blog.checkpoint.com/2016/12/27/check-point-discovers-three-zero-day-vulnerabilities-web-programming-language-php-7",
"http://blog.checkpoint.com/wp-content/uploads/2016/12/PHP_Technical_Report.pdf",
"http://www.securityfocus.com/bid/95150",
"https://bugs.php.net/bug.php?id=73093",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.youtube.com/watch?v=LDcaPstAuPk",
"http://blog.checkpoint.com/2016/12/27/check-point-discovers-three-zero-day-vulnerabilities-web-programming-language-php-7",
"http://blog.checkpoint.com/wp-content/uploads/2016/12/PHP_Technical_Report.pdf",
"http://www.securityfocus.com/bid/95150",
"https://bugs.php.net/bug.php?id=73093",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.youtube.com/watch?v=LDcaPstAuPk"
],
"epss": 0.18863,
"cvss": 7.5
},
"CVE-2017-7890": {
"verified": false,
"ranking_epss": 0.96164,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.31 and 7.x before 7.1.7, does not zero colorMap arrays before use. A specially crafted GIF image could use the uninitialized tables to read ~700 bytes from the top of the stack, potentially disclosing sensitive information.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.debian.org/security/2017/dsa-3938",
"http://www.securityfocus.com/bid/99492",
"https://access.redhat.com/errata/RHSA-2018:0406",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=74435",
"https://bugs.php.net/patch-display.php?bug=74435&patch=fix-74435-php-7.0&revision=1497970038",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.tenable.com/security/tns-2017-12",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.debian.org/security/2017/dsa-3938",
"http://www.securityfocus.com/bid/99492",
"https://access.redhat.com/errata/RHSA-2018:0406",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=74435",
"https://bugs.php.net/patch-display.php?bug=74435&patch=fix-74435-php-7.0&revision=1497970038",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.tenable.com/security/tns-2017-12"
],
"epss": 0.25333,
"cvss": 6.5
},
"CVE-2014-0207": {
"verified": false,
"ranking_epss": 0.91315,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted CDF file.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html",
"http://marc.info/?l=bugtraq&m=141017844705317&w=2",
"http://mx.gw.com/pipermail/file/2014/001553.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/59794",
"http://secunia.com/advisories/59831",
"http://support.apple.com/kb/HT6443",
"http://www.debian.org/security/2014/dsa-2974",
"http://www.debian.org/security/2014/dsa-3021",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/68243",
"https://bugs.php.net/bug.php?id=67326",
"https://bugzilla.redhat.com/show_bug.cgi?id=1091842",
"https://github.com/file/file/commit/6d209c1c489457397a5763bca4b28e43aac90391",
"https://support.apple.com/HT204659",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html",
"http://marc.info/?l=bugtraq&m=141017844705317&w=2",
"http://mx.gw.com/pipermail/file/2014/001553.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/59794",
"http://secunia.com/advisories/59831",
"http://support.apple.com/kb/HT6443",
"http://www.debian.org/security/2014/dsa-2974",
"http://www.debian.org/security/2014/dsa-3021",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/68243",
"https://bugs.php.net/bug.php?id=67326",
"https://bugzilla.redhat.com/show_bug.cgi?id=1091842",
"https://github.com/file/file/commit/6d209c1c489457397a5763bca4b28e43aac90391",
"https://support.apple.com/HT204659"
],
"epss": 0.0686,
"cvss": 6.5
},
"CVE-2018-17082": {
"verified": false,
"ranking_epss": 0.92186,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a \"Transfer-Encoding: chunked\" request, because the bucket brigade is mishandled in the php_handler function in sapi/apache2handler/sapi_apache2.c.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://bugs.php.net/bug.php?id=76582",
"https://github.com/php/php-src/commit/23b057742e3cf199612fa8050ae86cae675e214e",
"https://lists.debian.org/debian-lts-announce/2018/09/msg00020.html",
"https://security.gentoo.org/glsa/201812-01",
"https://security.netapp.com/advisory/ntap-20180924-0001/",
"https://www.debian.org/security/2018/dsa-4353",
"https://www.tenable.com/security/tns-2019-07",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://bugs.php.net/bug.php?id=76582",
"https://github.com/php/php-src/commit/23b057742e3cf199612fa8050ae86cae675e214e",
"https://lists.debian.org/debian-lts-announce/2018/09/msg00020.html",
"https://security.gentoo.org/glsa/201812-01",
"https://security.netapp.com/advisory/ntap-20180924-0001/",
"https://www.debian.org/security/2018/dsa-4353",
"https://www.tenable.com/security/tns-2019-07"
],
"epss": 0.08241,
"cvss": 6.1
},
"CVE-2013-5704": {
"verified": false,
"ranking_epss": 0.98446,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass \"RequestHeader unset\" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states \"this is not a security issue in httpd as such.\"",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html",
"http://marc.info/?l=apache-httpd-dev&m=139636309822854&w=2",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://marc.info/?l=bugtraq&m=144493176821532&w=2",
"http://martin.swende.se/blog/HTTPChunked.html",
"http://rhn.redhat.com/errata/RHSA-2015-0325.html",
"http://rhn.redhat.com/errata/RHSA-2015-1249.html",
"http://rhn.redhat.com/errata/RHSA-2015-2661.html",
"http://rhn.redhat.com/errata/RHSA-2016-0061.html",
"http://rhn.redhat.com/errata/RHSA-2016-0062.html",
"http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c?r1=1610674&r2=1610814&diff_format=h",
"http://www.mandriva.com/security/advisories?name=MDVSA-2014:174",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html",
"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/66550",
"http://www.ubuntu.com/usn/USN-2523-1",
"https://access.redhat.com/errata/RHSA-2015:2659",
"https://access.redhat.com/errata/RHSA-2015:2660",
"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://security.gentoo.org/glsa/201504-03",
"https://support.apple.com/HT204659",
"https://support.apple.com/HT205219",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html",
"http://marc.info/?l=apache-httpd-dev&m=139636309822854&w=2",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://marc.info/?l=bugtraq&m=144493176821532&w=2",
"http://martin.swende.se/blog/HTTPChunked.html",
"http://rhn.redhat.com/errata/RHSA-2015-0325.html",
"http://rhn.redhat.com/errata/RHSA-2015-1249.html",
"http://rhn.redhat.com/errata/RHSA-2015-2661.html",
"http://rhn.redhat.com/errata/RHSA-2016-0061.html",
"http://rhn.redhat.com/errata/RHSA-2016-0062.html",
"http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c?r1=1610674&r2=1610814&diff_format=h",
"http://www.mandriva.com/security/advisories?name=MDVSA-2014:174",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html",
"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/66550",
"http://www.ubuntu.com/usn/USN-2523-1",
"https://access.redhat.com/errata/RHSA-2015:2659",
"https://access.redhat.com/errata/RHSA-2015:2660",
"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://security.gentoo.org/glsa/201504-03",
"https://support.apple.com/HT204659",
"https://support.apple.com/HT205219"
],
"epss": 0.64689,
"cvss": 5
},
"CVE-2016-1903": {
"verified": false,
"ranking_epss": 0.92438,
"cvss_v2": 6.4,
"cvss_version": 3,
"summary": "The gdImageRotateInterpolated function in ext/gd/libgd/gd_interpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a large bgd_color argument to the imagerotate function.",
"references": [
"http://lists.opensuse.org/opensuse-updates/2016-01/msg00099.html",
"http://lists.opensuse.org/opensuse-updates/2016-02/msg00037.html",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.openwall.com/lists/oss-security/2016/01/14/8",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/79916",
"http://www.securitytracker.com/id/1034608",
"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.461720",
"http://www.ubuntu.com/usn/USN-2952-1",
"http://www.ubuntu.com/usn/USN-2952-2",
"https://bugs.php.net/bug.php?id=70976",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"http://lists.opensuse.org/opensuse-updates/2016-01/msg00099.html",
"http://lists.opensuse.org/opensuse-updates/2016-02/msg00037.html",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.openwall.com/lists/oss-security/2016/01/14/8",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/79916",
"http://www.securitytracker.com/id/1034608",
"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.461720",
"http://www.ubuntu.com/usn/USN-2952-1",
"http://www.ubuntu.com/usn/USN-2952-2",
"https://bugs.php.net/bug.php?id=70976",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"
],
"epss": 0.08692,
"cvss": 9.1
},
"CVE-2013-7456": {
"verified": false,
"ranking_epss": 0.79872,
"cvss_v2": 6.8,
"cvss_version": 3,
"summary": "gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7, allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted image that is mishandled by the imagescale function.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3587",
"http://www.debian.org/security/2016/dsa-3602",
"http://www.openwall.com/lists/oss-security/2016/05/26/3",
"http://www.securityfocus.com/bid/90859",
"http://www.ubuntu.com/usn/USN-3030-1",
"https://bugs.php.net/bug.php?id=72227",
"https://github.com/libgd/libgd/commit/4f65a3e4eedaffa1efcf9ee1eb08f0b504fbc31a",
"https://github.com/php/php-src/commit/7a1aac3343af85b4af4df5f8844946eaa27394ab?w=1",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3587",
"http://www.debian.org/security/2016/dsa-3602",
"http://www.openwall.com/lists/oss-security/2016/05/26/3",
"http://www.securityfocus.com/bid/90859",
"http://www.ubuntu.com/usn/USN-3030-1",
"https://bugs.php.net/bug.php?id=72227",
"https://github.com/libgd/libgd/commit/4f65a3e4eedaffa1efcf9ee1eb08f0b504fbc31a",
"https://github.com/php/php-src/commit/7a1aac3343af85b4af4df5f8844946eaa27394ab?w=1",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"
],
"epss": 0.01328,
"cvss": 7.6
},
"CVE-2013-7327": {
"verified": false,
"ranking_epss": 0.66139,
"cvss_v2": 6.8,
"cvss_version": 2,
"summary": "The gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via invalid imagecrop arguments that lead to use of a NULL pointer as a return value, a different vulnerability than CVE-2013-7226.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=8f4a5373bb71590352fd934028d6dde5bc18530b",
"http://www.ubuntu.com/usn/USN-2126-1",
"https://bugs.php.net/bug.php?id=66356",
"https://bugzilla.redhat.com/show_bug.cgi?id=1065108",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=8f4a5373bb71590352fd934028d6dde5bc18530b",
"http://www.ubuntu.com/usn/USN-2126-1",
"https://bugs.php.net/bug.php?id=66356",
"https://bugzilla.redhat.com/show_bug.cgi?id=1065108"
],
"epss": 0.00506,
"cvss": 6.8
},
"CVE-2017-12868": {
"verified": false,
"ranking_epss": 0.73354,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attacks or possibly bypass authentication by leveraging missing character conversions before an XOR operation.",
"references": [
"https://github.com/simplesamlphp/simplesamlphp/commit/4bc629658e7b7d17c9ac3fe0da7dc5df71f1b85e",
"https://lists.debian.org/debian-lts-announce/2017/12/msg00007.html",
"https://lists.debian.org/debian-lts-announce/2018/06/msg00017.html",
"https://simplesamlphp.org/security/201705-01",
"https://github.com/simplesamlphp/simplesamlphp/commit/4bc629658e7b7d17c9ac3fe0da7dc5df71f1b85e",
"https://lists.debian.org/debian-lts-announce/2017/12/msg00007.html",
"https://lists.debian.org/debian-lts-announce/2018/06/msg00017.html",
"https://simplesamlphp.org/security/201705-01"
],
"epss": 0.00764,
"cvss": 9.8
},
"CVE-2018-14883": {
"verified": false,
"ranking_epss": 0.95481,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Integer Overflow leads to a heap-based buffer over-read in exif_thumbnail_extract of exif.c.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/104871",
"https://bugs.php.net/bug.php?id=76423",
"https://lists.debian.org/debian-lts-announce/2018/09/msg00000.html",
"https://security.netapp.com/advisory/ntap-20181107-0003/",
"https://usn.ubuntu.com/3766-1/",
"https://usn.ubuntu.com/3766-2/",
"https://www.debian.org/security/2018/dsa-4353",
"https://www.tenable.com/security/tns-2018-12",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/104871",
"https://bugs.php.net/bug.php?id=76423",
"https://lists.debian.org/debian-lts-announce/2018/09/msg00000.html",
"https://security.netapp.com/advisory/ntap-20181107-0003/",
"https://usn.ubuntu.com/3766-1/",
"https://usn.ubuntu.com/3766-2/",
"https://www.debian.org/security/2018/dsa-4353",
"https://www.tenable.com/security/tns-2018-12"
],
"epss": 0.20292,
"cvss": 7.5
},
"CVE-2014-7185": {
"verified": false,
"ranking_epss": 0.7512,
"cvss_v2": 6.4,
"cvss_version": 2,
"summary": "Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a \"buffer\" function.",
"references": [
"http://bugs.python.org/issue21831",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139663.html",
"http://lists.opensuse.org/opensuse-updates/2014-10/msg00016.html",
"http://rhn.redhat.com/errata/RHSA-2015-1064.html",
"http://rhn.redhat.com/errata/RHSA-2015-1330.html",
"http://www.openwall.com/lists/oss-security/2014/09/23/5",
"http://www.openwall.com/lists/oss-security/2014/09/25/47",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.securityfocus.com/bid/70089",
"https://bugzilla.redhat.com/show_bug.cgi?id=1146026",
"https://exchange.xforce.ibmcloud.com/vulnerabilities/96193",
"https://security.gentoo.org/glsa/201503-10",
"https://support.apple.com/kb/HT205031",
"http://bugs.python.org/issue21831",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139663.html",
"http://lists.opensuse.org/opensuse-updates/2014-10/msg00016.html",
"http://rhn.redhat.com/errata/RHSA-2015-1064.html",
"http://rhn.redhat.com/errata/RHSA-2015-1330.html",
"http://www.openwall.com/lists/oss-security/2014/09/23/5",
"http://www.openwall.com/lists/oss-security/2014/09/25/47",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.securityfocus.com/bid/70089",
"https://bugzilla.redhat.com/show_bug.cgi?id=1146026",
"https://exchange.xforce.ibmcloud.com/vulnerabilities/96193",
"https://security.gentoo.org/glsa/201503-10",
"https://support.apple.com/kb/HT205031"
],
"epss": 0.0087,
"cvss": 6.4
},
"CVE-2019-16056": {
"verified": false,
"ranking_epss": 0.75573,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a message could be tricked into accepting an email address that should be denied. An attack may be the same as in CVE-2019-11340; however, this CVE applies to Python more generally.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00062.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00063.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00012.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00021.html",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"https://access.redhat.com/errata/RHSA-2019:3725",
"https://access.redhat.com/errata/RHSA-2019:3948",
"https://bugs.python.org/issue34155",
"https://github.com/python/cpython/commit/8cb65d1381b027f0b09ee36bfed7f35bb4dec9a9",
"https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2019/09/msg00018.html",
"https://lists.debian.org/debian-lts-announce/2019/09/msg00019.html",
"https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html",
"https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEARDOTXCYPYELKBD2KWZ27GSPXDI3GQ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/COATURTCY7G67AYI6UDV5B2JZTBCKIDX/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E2HP37NUVLQSBW3J735A2DQDOZ4ZGBLY/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ER6LONC2B2WYIO56GBQUDU6QTWZDPUNQ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K4KZEFP6E4YPYB52AF4WXCUDSGQOTF37/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K7HNVIFMETMFWWWUNTB72KYJYXCZOS5V/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NF3DRDGMVIRYNZMSLJIHNW47HOUQYXVG/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OYGESQSGIHDCIGOBVF7VXCMIE6YDWRYB/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QASRD4E2G65GGEHYKVHYCXB2XWAGTNL4/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QP46PQSUKYPGWTADQ67NOV3BUN6JM34Z/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SDQQ56P7ZZR64XV5DUVWNSNXKKEXUG2J/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBTGPBUABGXZ7WH7677OEM3NSP6ZEA76/",
"https://security.netapp.com/advisory/ntap-20190926-0005/",
"https://usn.ubuntu.com/4151-1/",
"https://usn.ubuntu.com/4151-2/",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/security-alerts/cpujul2020.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00062.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00063.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00012.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00021.html",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"https://access.redhat.com/errata/RHSA-2019:3725",
"https://access.redhat.com/errata/RHSA-2019:3948",
"https://bugs.python.org/issue34155",
"https://github.com/python/cpython/commit/8cb65d1381b027f0b09ee36bfed7f35bb4dec9a9",
"https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2019/09/msg00018.html",
"https://lists.debian.org/debian-lts-announce/2019/09/msg00019.html",
"https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html",
"https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEARDOTXCYPYELKBD2KWZ27GSPXDI3GQ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/COATURTCY7G67AYI6UDV5B2JZTBCKIDX/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E2HP37NUVLQSBW3J735A2DQDOZ4ZGBLY/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ER6LONC2B2WYIO56GBQUDU6QTWZDPUNQ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K4KZEFP6E4YPYB52AF4WXCUDSGQOTF37/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K7HNVIFMETMFWWWUNTB72KYJYXCZOS5V/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NF3DRDGMVIRYNZMSLJIHNW47HOUQYXVG/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OYGESQSGIHDCIGOBVF7VXCMIE6YDWRYB/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QASRD4E2G65GGEHYKVHYCXB2XWAGTNL4/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QP46PQSUKYPGWTADQ67NOV3BUN6JM34Z/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SDQQ56P7ZZR64XV5DUVWNSNXKKEXUG2J/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBTGPBUABGXZ7WH7677OEM3NSP6ZEA76/",
"https://security.netapp.com/advisory/ntap-20190926-0005/",
"https://usn.ubuntu.com/4151-1/",
"https://usn.ubuntu.com/4151-2/",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/security-alerts/cpujul2020.html"
],
"epss": 0.00899,
"cvss": 7.5
},
"CVE-2014-8142": {
"verified": false,
"ranking_epss": 0.99487,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys within the serialized properties of an object, a different vulnerability than CVE-2004-1019.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=630f9c33c23639de85c3fd306b209b538b73b4c9",
"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html",
"http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://www.debian.org/security/2014/dsa-3117",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/71791",
"https://bugs.php.net/bug.php?id=68594",
"https://bugzilla.redhat.com/show_bug.cgi?id=1175718",
"https://security.gentoo.org/glsa/201503-03",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=630f9c33c23639de85c3fd306b209b538b73b4c9",
"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html",
"http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://www.debian.org/security/2014/dsa-3117",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/71791",
"https://bugs.php.net/bug.php?id=68594",
"https://bugzilla.redhat.com/show_bug.cgi?id=1175718",
"https://security.gentoo.org/glsa/201503-03"
],
"epss": 0.88277,
"cvss": 7.5
},
"CVE-2021-26690": {
"verified": false,
"ranking_epss": 0.98673,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL pointer dereference and crash, leading to a possible Denial Of Service",
"references": [
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://www.openwall.com/lists/oss-security/2021/06/10/6",
"https://lists.apache.org/thread.html/r7f2b70b621651548f4b6f027552f1dd91705d7111bb5d15cda0a68dd%40%3Cdev.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rae406c1d19c0dfd3103c96923dadac2af1cd0bad6905ab1ede153865%40%3Cannounce.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re026d3da9d7824bd93b9f871c0fdda978d960c7e62d8c43cba8d0bf3%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2021/07/msg00006.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/",
"https://security.gentoo.org/glsa/202107-38",
"https://security.netapp.com/advisory/ntap-20210702-0001/",
"https://www.debian.org/security/2021/dsa-4937",
"https://www.oracle.com/security-alerts/cpuoct2021.html",
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://www.openwall.com/lists/oss-security/2021/06/10/6",
"https://lists.apache.org/thread.html/r7f2b70b621651548f4b6f027552f1dd91705d7111bb5d15cda0a68dd%40%3Cdev.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rae406c1d19c0dfd3103c96923dadac2af1cd0bad6905ab1ede153865%40%3Cannounce.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re026d3da9d7824bd93b9f871c0fdda978d960c7e62d8c43cba8d0bf3%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2021/07/msg00006.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/",
"https://security.gentoo.org/glsa/202107-38",
"https://security.netapp.com/advisory/ntap-20210702-0001/",
"https://www.debian.org/security/2021/dsa-4937",
"https://www.oracle.com/security-alerts/cpuoct2021.html"
],
"epss": 0.70379,
"cvss": 7.5
},
"CVE-2019-13404": {
"verified": false,
"ranking_epss": 0.36387,
"cvss_v2": 9.3,
"cvss_version": 3,
"summary": "The MSI installer for Python through 2.7.16 on Windows defaults to the C:\\Python27 directory, which makes it easier for local users to deploy Trojan horse code. (This also affects old 3.x releases before 3.5.) NOTE: the vendor's position is that it is the user's responsibility to ensure C:\\Python27 access control or choose a different directory, because backwards compatibility requires that C:\\Python27 remain the default for 2.7.x",
"references": [
"https://docs.python.org/2/faq/windows.html",
"https://docs.python.org/2/faq/windows.html"
],
"epss": 0.00157,
"cvss": 7.8
},
"CVE-2017-7963": {
"verified": false,
"ranking_epss": 0.82049,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "The GNU Multiple Precision Arithmetic Library (GMP) interfaces for PHP through 7.1.4 allow attackers to cause a denial of service (memory consumption and application crash) via operations on long strings. NOTE: the vendor disputes this, stating \"There is no security issue here, because GMP safely aborts in case of an OOM condition. The only attack vector here is denial of service. However, if you allow attacker-controlled, unbounded allocations you have a DoS vector regardless of GMP's OOM behavior.",
"references": [
"https://bugs.php.net/bug.php?id=74308",
"https://bugs.php.net/bug.php?id=74308"
],
"epss": 0.01671,
"cvss": 7.5
},
"CVE-2014-5120": {
"verified": false,
"ranking_epss": 0.92249,
"cvss_v2": 6.4,
"cvss_version": 2,
"summary": "gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to overwrite arbitrary files via crafted input to an application that calls the (1) imagegd, (2) imagegd2, (3) imagegif, (4) imagejpeg, (5) imagepng, (6) imagewbmp, or (7) imagewebp function.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00024.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2014-1327.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"https://bugs.php.net/bug.php?id=67730",
"https://support.apple.com/HT204659",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00024.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2014-1327.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"https://bugs.php.net/bug.php?id=67730",
"https://support.apple.com/HT204659"
],
"epss": 0.08338,
"cvss": 6.4
},
"CVE-2023-27043": {
"verified": false,
"ranking_epss": 0.38873,
"cvss_v2": null,
"cvss_version": 3,
"summary": "The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python.",
"references": [
"http://python.org",
"https://github.com/python/cpython/issues/102988",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ARI7VDSNTQVXRQFM6IK5GSSLEIYV4VZH/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQAKLUJMHFGVBRDPEY57BJGNCE5UUPHW/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXYVPEZUA3465AEFX5JVFVP7KIFZMF3N/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEUNZSZ3CVSM2QWVYH3N2XGOCDWNYUA3/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORLXS5YTKN65E2Q2NWKXMFS5FWQHRNZW/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2MAICLFDDO3QVNHTZ2OCERZQ34R2PIC/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2W2BZQIHMCKRI5FNBJERFYMS5PK6TAH/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU6Y2S5CBN5BWCBDAJFTGIBZLK3S2G3J/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QDRDDPDN3VFIYXJIYEABY6USX5EU66AG/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDDC2VOX7OQC6OHMYTVD4HLFZIV6PYBC/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SINP4OVYNB2AGDYI2GS37EMW3H3F7XPZ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SOX7BCN6YL7B3RFPEEXPIU5CMTEHJOKR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7JZX5FLP/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWMBD4LNHWEXRI6YVFWJMTJQUL5WOFTS/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQVY5C5REXWJIORJIL2FIL3ALOEJEF72/",
"https://python-security.readthedocs.io/vuln/email-parseaddr-realname.html",
"https://security.netapp.com/advisory/ntap-20230601-0003/",
"http://python.org",
"http://seclists.org/fulldisclosure/2025/Apr/8",
"https://github.com/python/cpython/issues/102988",
"https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html",
"https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ARI7VDSNTQVXRQFM6IK5GSSLEIYV4VZH/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQAKLUJMHFGVBRDPEY57BJGNCE5UUPHW/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXYVPEZUA3465AEFX5JVFVP7KIFZMF3N/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEUNZSZ3CVSM2QWVYH3N2XGOCDWNYUA3/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORLXS5YTKN65E2Q2NWKXMFS5FWQHRNZW/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2MAICLFDDO3QVNHTZ2OCERZQ34R2PIC/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2W2BZQIHMCKRI5FNBJERFYMS5PK6TAH/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU6Y2S5CBN5BWCBDAJFTGIBZLK3S2G3J/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QDRDDPDN3VFIYXJIYEABY6USX5EU66AG/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDDC2VOX7OQC6OHMYTVD4HLFZIV6PYBC/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SINP4OVYNB2AGDYI2GS37EMW3H3F7XPZ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SOX7BCN6YL7B3RFPEEXPIU5CMTEHJOKR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7JZX5FLP/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWMBD4LNHWEXRI6YVFWJMTJQUL5WOFTS/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQVY5C5REXWJIORJIL2FIL3ALOEJEF72/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ARI7VDSNTQVXRQFM6IK5GSSLEIYV4VZH/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BQAKLUJMHFGVBRDPEY57BJGNCE5UUPHW/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HXYVPEZUA3465AEFX5JVFVP7KIFZMF3N/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NEUNZSZ3CVSM2QWVYH3N2XGOCDWNYUA3/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORLXS5YTKN65E2Q2NWKXMFS5FWQHRNZW/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P2MAICLFDDO3QVNHTZ2OCERZQ34R2PIC/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P2W2BZQIHMCKRI5FNBJERFYMS5PK6TAH/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU6Y2S5CBN5BWCBDAJFTGIBZLK3S2G3J/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QDRDDPDN3VFIYXJIYEABY6USX5EU66AG/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RDDC2VOX7OQC6OHMYTVD4HLFZIV6PYBC/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SINP4OVYNB2AGDYI2GS37EMW3H3F7XPZ/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7JZX5FLP/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWMBD4LNHWEXRI6YVFWJMTJQUL5WOFTS/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YQVY5C5REXWJIORJIL2FIL3ALOEJEF72/",
"https://python-security.readthedocs.io/vuln/email-parseaddr-realname.html",
"https://security.netapp.com/advisory/ntap-20230601-0003/"
],
"epss": 0.00175,
"cvss": 5.3
},
"CVE-2022-30556": {
"verified": false,
"ranking_epss": 0.66133,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "Apache HTTP Server 2.4.53 and earlier may return lengths to applications calling r:wsread() that point past the end of the storage allocated for the buffer.",
"references": [
"http://www.openwall.com/lists/oss-security/2022/06/08/7",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7QUGG2QZWHTITMABFLVXA4DNYUOTPWYQ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20220624-0005/",
"http://www.openwall.com/lists/oss-security/2022/06/08/7",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7QUGG2QZWHTITMABFLVXA4DNYUOTPWYQ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20220624-0005/"
],
"epss": 0.00506,
"cvss": 7.5
},
"CVE-2019-9947": {
"verified": false,
"ranking_epss": 0.78534,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \\r\\n (specifically in the path component of a URL that lacks a ? character) followed by an HTTP header or a Redis command. This is similar to the CVE-2019-9740 query string issue. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00062.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00063.html",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"http://www.openwall.com/lists/oss-security/2021/02/04/2",
"https://access.redhat.com/errata/RHSA-2019:1260",
"https://access.redhat.com/errata/RHSA-2019:2030",
"https://access.redhat.com/errata/RHSA-2019:3335",
"https://access.redhat.com/errata/RHSA-2019:3520",
"https://access.redhat.com/errata/RHSA-2019:3725",
"https://bugs.python.org/issue35906",
"https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2019/06/msg00023.html",
"https://lists.debian.org/debian-lts-announce/2019/06/msg00026.html",
"https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html",
"https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMWSKTNOHSUOT3L25QFJAVCFYZX46FYK/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXASHCDD4PQFKTMKQN4YOP5ZH366ABN4/",
"https://security.gentoo.org/glsa/202003-26",
"https://security.netapp.com/advisory/ntap-20190404-0004/",
"https://usn.ubuntu.com/4127-1/",
"https://usn.ubuntu.com/4127-2/",
"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00062.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00063.html",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"http://www.openwall.com/lists/oss-security/2021/02/04/2",
"https://access.redhat.com/errata/RHSA-2019:1260",
"https://access.redhat.com/errata/RHSA-2019:2030",
"https://access.redhat.com/errata/RHSA-2019:3335",
"https://access.redhat.com/errata/RHSA-2019:3520",
"https://access.redhat.com/errata/RHSA-2019:3725",
"https://bugs.python.org/issue35906",
"https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2019/06/msg00023.html",
"https://lists.debian.org/debian-lts-announce/2019/06/msg00026.html",
"https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html",
"https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMWSKTNOHSUOT3L25QFJAVCFYZX46FYK/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXASHCDD4PQFKTMKQN4YOP5ZH366ABN4/",
"https://security.gentoo.org/glsa/202003-26",
"https://security.netapp.com/advisory/ntap-20190404-0004/",
"https://usn.ubuntu.com/4127-1/",
"https://usn.ubuntu.com/4127-2/"
],
"epss": 0.01161,
"cvss": 6.1
},
"CVE-2014-3587": {
"verified": false,
"ranking_epss": 0.95305,
"cvss_v2": 4.3,
"cvss_version": 2,
"summary": "Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before 5.5.16, allows remote attackers to cause a denial of service (application crash) via a crafted CDF file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1571.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2014-1326.html",
"http://rhn.redhat.com/errata/RHSA-2014-1327.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://rhn.redhat.com/errata/RHSA-2016-0760.html",
"http://secunia.com/advisories/60609",
"http://secunia.com/advisories/60696",
"http://www.debian.org/security/2014/dsa-3008",
"http://www.debian.org/security/2014/dsa-3021",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.securityfocus.com/bid/69325",
"http://www.ubuntu.com/usn/USN-2344-1",
"http://www.ubuntu.com/usn/USN-2369-1",
"https://bugs.php.net/bug.php?id=67716",
"https://github.com/file/file/commit/0641e56be1af003aa02c7c6b0184466540637233",
"https://github.com/php/php-src/commit/7ba1409a1aee5925180de546057ddd84ff267947",
"https://security-tracker.debian.org/tracker/CVE-2014-3587",
"https://support.apple.com/HT204659",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2014-1326.html",
"http://rhn.redhat.com/errata/RHSA-2014-1327.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://rhn.redhat.com/errata/RHSA-2016-0760.html",
"http://secunia.com/advisories/60609",
"http://secunia.com/advisories/60696",
"http://www.debian.org/security/2014/dsa-3008",
"http://www.debian.org/security/2014/dsa-3021",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.securityfocus.com/bid/69325",
"http://www.ubuntu.com/usn/USN-2344-1",
"http://www.ubuntu.com/usn/USN-2369-1",
"https://bugs.php.net/bug.php?id=67716",
"https://github.com/file/file/commit/0641e56be1af003aa02c7c6b0184466540637233",
"https://github.com/php/php-src/commit/7ba1409a1aee5925180de546057ddd84ff267947",
"https://security-tracker.debian.org/tracker/CVE-2014-3587",
"https://support.apple.com/HT204659"
],
"epss": 0.19121,
"cvss": 4.3
},
"CVE-2015-1351": {
"verified": false,
"ranking_epss": 0.9531,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP through 5.6.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=777c39f4042327eac4b63c7ee87dc1c7a09a3115",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://openwall.com/lists/oss-security/2015/01/24/9",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:079",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/71929",
"https://bugs.php.net/bug.php?id=68677",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205267",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=777c39f4042327eac4b63c7ee87dc1c7a09a3115",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://openwall.com/lists/oss-security/2015/01/24/9",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:079",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/71929",
"https://bugs.php.net/bug.php?id=68677",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205267"
],
"epss": 0.19134,
"cvss": 7.5
},
"CVE-2015-1352": {
"verified": false,
"ranking_epss": 0.96697,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "The build_tablename function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP through 5.6.7 does not validate token extraction for table names, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted name.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=124fb22a13fafa3648e4e15b4f207c7096d8155e",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://openwall.com/lists/oss-security/2015/01/24/9",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:079",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/71932",
"https://bugs.php.net/bug.php?id=68741",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205267",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=124fb22a13fafa3648e4e15b4f207c7096d8155e",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://openwall.com/lists/oss-security/2015/01/24/9",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:079",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/71932",
"https://bugs.php.net/bug.php?id=68741",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205267"
],
"epss": 0.30855,
"cvss": 5
},
"CVE-2016-7412": {
"verified": false,
"ranking_epss": 0.82356,
"cvss_v2": 6.8,
"cvss_version": 3,
"summary": "ext/mysqlnd/mysqlnd_wireprotocol.c in PHP before 5.6.26 and 7.x before 7.0.11 does not verify that a BIT field has the UNSIGNED_FLAG flag, which allows remote MySQL servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted field metadata.",
"references": [
"http://www.openwall.com/lists/oss-security/2016/09/15/10",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/93005",
"http://www.securitytracker.com/id/1036836",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=72293",
"https://github.com/php/php-src/commit/28f80baf3c53e267c9ce46a2a0fadbb981585132?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19",
"http://www.openwall.com/lists/oss-security/2016/09/15/10",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/93005",
"http://www.securitytracker.com/id/1036836",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=72293",
"https://github.com/php/php-src/commit/28f80baf3c53e267c9ce46a2a0fadbb981585132?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19"
],
"epss": 0.01727,
"cvss": 8.1
},
"CVE-2024-0727": {
"verified": false,
"ranking_epss": 0.46449,
"cvss_v2": null,
"cvss_version": 3,
"summary": "Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.",
"references": [
"https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2",
"https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a",
"https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c",
"https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8",
"https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539",
"https://www.openssl.org/news/secadv/20240125.txt",
"http://www.openwall.com/lists/oss-security/2024/03/11/1",
"https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2",
"https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a",
"https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c",
"https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8",
"https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539",
"https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
"https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
"https://security.netapp.com/advisory/ntap-20240208-0006/",
"https://www.openssl.org/news/secadv/20240125.txt"
],
"epss": 0.00236,
"cvss": 5.5
},
"CVE-2009-3766": {
"verified": false,
"ranking_epss": 0.66593,
"cvss_v2": 6.8,
"cvss_version": 2,
"summary": "mutt_ssl.c in mutt 1.5.16 and other versions before 1.5.19, when OpenSSL is used, does not verify the domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.",
"references": [
"http://dev.mutt.org/trac/ticket/3087",
"http://marc.info/?l=oss-security&m=125198917018936&w=2",
"http://www.openwall.com/lists/oss-security/2009/10/26/1",
"http://dev.mutt.org/trac/ticket/3087",
"http://marc.info/?l=oss-security&m=125198917018936&w=2",
"http://www.openwall.com/lists/oss-security/2009/10/26/1"
],
"epss": 0.00517,
"cvss": 6.8
},
"CVE-2009-3767": {
"verified": false,
"ranking_epss": 0.82562,
"cvss_v2": 4.3,
"cvss_version": 2,
"summary": "libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.",
"references": [
"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036138.html",
"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
"http://marc.info/?l=oss-security&m=125198917018936&w=2",
"http://marc.info/?l=oss-security&m=125369675820512&w=2",
"http://secunia.com/advisories/38769",
"http://secunia.com/advisories/40677",
"http://security.gentoo.org/glsa/glsa-201406-36.xml",
"http://support.apple.com/kb/HT3937",
"http://www.openldap.org/devel/cvsweb.cgi/libraries/libldap/tls_o.c.diff?r1=1.8&r2=1.11&f=h",
"http://www.redhat.com/support/errata/RHSA-2010-0543.html",
"http://www.redhat.com/support/errata/RHSA-2011-0896.html",
"http://www.vupen.com/english/advisories/2009/3056",
"http://www.vupen.com/english/advisories/2010/1858",
"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11178",
"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7274",
"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036138.html",
"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
"http://marc.info/?l=oss-security&m=125198917018936&w=2",
"http://marc.info/?l=oss-security&m=125369675820512&w=2",
"http://secunia.com/advisories/38769",
"http://secunia.com/advisories/40677",
"http://security.gentoo.org/glsa/glsa-201406-36.xml",
"http://support.apple.com/kb/HT3937",
"http://www.openldap.org/devel/cvsweb.cgi/libraries/libldap/tls_o.c.diff?r1=1.8&r2=1.11&f=h",
"http://www.redhat.com/support/errata/RHSA-2010-0543.html",
"http://www.redhat.com/support/errata/RHSA-2011-0896.html",
"http://www.vupen.com/english/advisories/2009/3056",
"http://www.vupen.com/english/advisories/2010/1858",
"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11178",
"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7274"
],
"epss": 0.01768,
"cvss": 4.3
},
"CVE-2009-3765": {
"verified": false,
"ranking_epss": 0.68989,
"cvss_v2": 6.8,
"cvss_version": 2,
"summary": "mutt_ssl.c in mutt 1.5.19 and 1.5.20, when OpenSSL is used, does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.",
"references": [
"http://dev.mutt.org/trac/changeset/6016:dc09812e63a3/mutt_ssl.c",
"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
"http://marc.info/?l=oss-security&m=125198917018936&w=2",
"http://marc.info/?l=oss-security&m=125369675820512&w=2",
"http://dev.mutt.org/trac/changeset/6016:dc09812e63a3/mutt_ssl.c",
"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
"http://marc.info/?l=oss-security&m=125198917018936&w=2",
"http://marc.info/?l=oss-security&m=125369675820512&w=2"
],
"epss": 0.00586,
"cvss": 6.8
},
"CVE-2022-22721": {
"verified": false,
"ranking_epss": 0.9408,
"cvss_v2": 5.8,
"cvss_version": 3,
"summary": "If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes. This issue affects Apache HTTP Server 2.4.52 and earlier.",
"references": [
"http://seclists.org/fulldisclosure/2022/May/33",
"http://seclists.org/fulldisclosure/2022/May/35",
"http://seclists.org/fulldisclosure/2022/May/38",
"http://www.openwall.com/lists/oss-security/2022/03/14/2",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.debian.org/debian-lts-announce/2022/03/msg00033.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTD/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20220321-0001/",
"https://support.apple.com/kb/HT213255",
"https://support.apple.com/kb/HT213256",
"https://support.apple.com/kb/HT213257",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujul2022.html",
"http://seclists.org/fulldisclosure/2022/May/33",
"http://seclists.org/fulldisclosure/2022/May/35",
"http://seclists.org/fulldisclosure/2022/May/38",
"http://www.openwall.com/lists/oss-security/2022/03/14/2",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.debian.org/debian-lts-announce/2022/03/msg00033.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTD/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20220321-0001/",
"https://support.apple.com/kb/HT213255",
"https://support.apple.com/kb/HT213256",
"https://support.apple.com/kb/HT213257",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujul2022.html"
],
"epss": 0.13159,
"cvss": 9.1
},
"CVE-2022-22720": {
"verified": false,
"ranking_epss": 0.96381,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling",
"references": [
"http://seclists.org/fulldisclosure/2022/May/33",
"http://seclists.org/fulldisclosure/2022/May/35",
"http://seclists.org/fulldisclosure/2022/May/38",
"http://www.openwall.com/lists/oss-security/2022/03/14/3",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.debian.org/debian-lts-announce/2022/03/msg00033.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTD/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20220321-0001/",
"https://support.apple.com/kb/HT213255",
"https://support.apple.com/kb/HT213256",
"https://support.apple.com/kb/HT213257",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujul2022.html",
"http://seclists.org/fulldisclosure/2022/May/33",
"http://seclists.org/fulldisclosure/2022/May/35",
"http://seclists.org/fulldisclosure/2022/May/38",
"http://www.openwall.com/lists/oss-security/2022/03/14/3",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.debian.org/debian-lts-announce/2022/03/msg00033.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTD/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20220321-0001/",
"https://support.apple.com/kb/HT213255",
"https://support.apple.com/kb/HT213256",
"https://support.apple.com/kb/HT213257",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujul2022.html"
],
"epss": 0.27458,
"cvss": 9.8
},
"CVE-2021-23336": {
"verified": false,
"ranking_epss": 0.54228,
"cvss_v2": 4,
"cvss_version": 3,
"summary": "The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon (;), they can cause a difference in the interpretation of the request between the proxy (running with default configuration) and the server. This can result in malicious requests being cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and therefore would not include it in a cache key of an unkeyed parameter.",
"references": [
"http://www.openwall.com/lists/oss-security/2021/02/19/4",
"http://www.openwall.com/lists/oss-security/2021/05/01/2",
"https://github.com/python/cpython/pull/24297",
"https://lists.apache.org/thread.html/ra8ce70088ba291f358e077cafdb14d174b7a1ce9a9d86d1b332d6367%40%3Cusers.airflow.apache.org%3E",
"https://lists.apache.org/thread.html/rc005f4de9d9b0ba943ceb8ff5a21a5c6ff8a9df52632476698d99432%40%3Cannounce.apache.org%3E",
"https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2021/02/msg00030.html",
"https://lists.debian.org/debian-lts-announce/2021/04/msg00005.html",
"https://lists.debian.org/debian-lts-announce/2021/04/msg00015.html",
"https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3EPYWWFDV22CJ5AOH5VCE72DOASZZ255/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YKKDLXL3UEZ3J426C2XTBS63AHE46SM/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/46N6A52EGSXHJYCZWVMBJJIH4NWIV2B5/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FONHJIOZOFD7CD35KZL6SVBUTMBPGZGA/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HCQTCSP6SCVIYNIRUJC5X7YBVUHPLSC4/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HZTM7KLHFCE3LWSEVO2NAFLUHMGYMCRY/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IHQDU7NXA7EWAE4W7VO6MURVJIULEPPR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJXCMHLY7H3FIYLE4OKDYUILU2CCRUCZ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LVNH6Z24IG3E67ZCQGGJ46FZB4XFLQNZ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MNUN5SOMFL2BBKP6ZAICIIUPQKZDMGYO/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MP572OLHMS7MZO4KUPSCIMSZIA5IZZ62/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6VXJZSZ6N64AILJX4CTMACYGQGHHD5C/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJSCSN722JO2E2AGPWD4NTGVELVRPB4R/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NODWHDIFBQE5RU5PUWUVE47JOT5VCMJ2/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OAGSWNGZJ6HQ5ISA67SNMK3CJRKICET7/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RSLQD5CCM75IZGAMBDGUZEATYU5YSGJ7/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGIY6I4YS3WOXAK4SXKIEOC2G4VZKIR7/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TFTELUMWZE3KV3JB2H5EE6VFRZFRD5MV/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W2LSKBEFI5SYEY5FM6ICZVZM5WRQUCS4/",
"https://security.gentoo.org/glsa/202104-04",
"https://security.netapp.com/advisory/ntap-20210326-0004/",
"https://snyk.io/blog/cache-poisoning-in-popular-open-source-packages/",
"https://snyk.io/vuln/SNYK-UPSTREAM-PYTHONCPYTHON-1074933",
"https://www.oracle.com//security-alerts/cpujul2021.html",
"https://www.oracle.com/security-alerts/cpuApr2021.html",
"https://www.oracle.com/security-alerts/cpujan2022.html",
"https://www.oracle.com/security-alerts/cpuoct2021.html",
"http://www.openwall.com/lists/oss-security/2021/02/19/4",
"http://www.openwall.com/lists/oss-security/2021/05/01/2",
"https://github.com/python/cpython/pull/24297",
"https://lists.apache.org/thread.html/ra8ce70088ba291f358e077cafdb14d174b7a1ce9a9d86d1b332d6367%40%3Cusers.airflow.apache.org%3E",
"https://lists.apache.org/thread.html/rc005f4de9d9b0ba943ceb8ff5a21a5c6ff8a9df52632476698d99432%40%3Cannounce.apache.org%3E",
"https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2021/02/msg00030.html",
"https://lists.debian.org/debian-lts-announce/2021/04/msg00005.html",
"https://lists.debian.org/debian-lts-announce/2021/04/msg00015.html",
"https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3EPYWWFDV22CJ5AOH5VCE72DOASZZ255/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YKKDLXL3UEZ3J426C2XTBS63AHE46SM/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/46N6A52EGSXHJYCZWVMBJJIH4NWIV2B5/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FONHJIOZOFD7CD35KZL6SVBUTMBPGZGA/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HCQTCSP6SCVIYNIRUJC5X7YBVUHPLSC4/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HZTM7KLHFCE3LWSEVO2NAFLUHMGYMCRY/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IHQDU7NXA7EWAE4W7VO6MURVJIULEPPR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJXCMHLY7H3FIYLE4OKDYUILU2CCRUCZ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LVNH6Z24IG3E67ZCQGGJ46FZB4XFLQNZ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MNUN5SOMFL2BBKP6ZAICIIUPQKZDMGYO/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MP572OLHMS7MZO4KUPSCIMSZIA5IZZ62/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6VXJZSZ6N64AILJX4CTMACYGQGHHD5C/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJSCSN722JO2E2AGPWD4NTGVELVRPB4R/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NODWHDIFBQE5RU5PUWUVE47JOT5VCMJ2/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OAGSWNGZJ6HQ5ISA67SNMK3CJRKICET7/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RSLQD5CCM75IZGAMBDGUZEATYU5YSGJ7/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGIY6I4YS3WOXAK4SXKIEOC2G4VZKIR7/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TFTELUMWZE3KV3JB2H5EE6VFRZFRD5MV/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W2LSKBEFI5SYEY5FM6ICZVZM5WRQUCS4/",
"https://security.gentoo.org/glsa/202104-04",
"https://security.netapp.com/advisory/ntap-20210326-0004/",
"https://snyk.io/blog/cache-poisoning-in-popular-open-source-packages/",
"https://snyk.io/vuln/SNYK-UPSTREAM-PYTHONCPYTHON-1074933",
"https://www.oracle.com//security-alerts/cpujul2021.html",
"https://www.oracle.com/security-alerts/cpuApr2021.html",
"https://www.oracle.com/security-alerts/cpujan2022.html",
"https://www.oracle.com/security-alerts/cpuoct2021.html"
],
"epss": 0.00311,
"cvss": 5.9
},
"CVE-2017-9226": {
"verified": false,
"ranking_epss": 0.77313,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write or read occurs in next_state_val() during regular expression compilation. Octal numbers larger than 0xff are not handled correctly in fetch_token() and fetch_token_in_cc(). A malformed regular expression containing an octal number in the form of '\\700' would produce an invalid code point value larger than 0xff in next_state_val(), resulting in an out-of-bounds write memory corruption.",
"references": [
"http://www.securityfocus.com/bid/101244",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://github.com/kkos/oniguruma/commit/b4bf968ad52afe14e60a2dc8a95d3555c543353a",
"https://github.com/kkos/oniguruma/commit/f015fbdd95f76438cd86366467bb2b39870dd7c6",
"https://github.com/kkos/oniguruma/issues/55",
"http://www.securityfocus.com/bid/101244",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://github.com/kkos/oniguruma/commit/b4bf968ad52afe14e60a2dc8a95d3555c543353a",
"https://github.com/kkos/oniguruma/commit/f015fbdd95f76438cd86366467bb2b39870dd7c6",
"https://github.com/kkos/oniguruma/issues/55"
],
"epss": 0.01036,
"cvss": 9.8
},
"CVE-2017-9224": {
"verified": false,
"ranking_epss": 0.71112,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs in match_at() during regular expression searching. A logical error involving order of validation and access in match_at() could result in an out-of-bounds read from a stack buffer.",
"references": [
"http://www.securityfocus.com/bid/101244",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://github.com/kkos/oniguruma/commit/690313a061f7a4fa614ec5cc8368b4f2284e059b",
"https://github.com/kkos/oniguruma/issues/57",
"http://www.securityfocus.com/bid/101244",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://github.com/kkos/oniguruma/commit/690313a061f7a4fa614ec5cc8368b4f2284e059b",
"https://github.com/kkos/oniguruma/issues/57"
],
"epss": 0.00664,
"cvss": 9.8
},
"CVE-2018-1000030": {
"verified": false,
"ranking_epss": 0.81473,
"cvss_v2": 3.3,
"cvss_version": 3,
"summary": "Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python versions prior to 2.7.14 may also be vulnerable and it appears that Python 2.7.17 and prior may also be vulnerable however this has not been confirmed. The vulnerability lies when multiply threads are handling large amounts of data. In both cases there is essentially a race condition that occurs. For the Heap-Buffer-Overflow, Thread 2 is creating the size for a buffer, but Thread1 is already writing to the buffer without knowing how much to write. So when a large amount of data is being processed, it is very easy to cause memory corruption using a Heap-Buffer-Overflow. As for the Use-After-Free, Thread3->Malloc->Thread1->Free's->Thread2-Re-uses-Free'd Memory. The PSRT has stated that this is not a security vulnerability due to the fact that the attacker must be able to run code, however in some situations, such as function as a service, this vulnerability can potentially be used by an attacker to violate a trust boundary, as such the DWF feels this issue deserves a CVE.",
"references": [
"https://bugs.python.org/issue31530",
"https://drive.google.com/file/d/1oyR9DAZjZK_SCn3mor6NRAYLJS6ueXaY/view",
"https://security.gentoo.org/glsa/201811-02",
"https://usn.ubuntu.com/3817-1/",
"https://usn.ubuntu.com/3817-2/",
"https://www.dropbox.com/sh/sj3ee7xv55j36k7/AADwP-YfOYikBMuy32e0uvPFa?dl=0",
"https://www.oracle.com/security-alerts/cpujan2020.html",
"https://bugs.python.org/issue31530",
"https://drive.google.com/file/d/1oyR9DAZjZK_SCn3mor6NRAYLJS6ueXaY/view",
"https://security.gentoo.org/glsa/201811-02",
"https://usn.ubuntu.com/3817-1/",
"https://usn.ubuntu.com/3817-2/",
"https://www.dropbox.com/sh/sj3ee7xv55j36k7/AADwP-YfOYikBMuy32e0uvPFa?dl=0",
"https://www.oracle.com/security-alerts/cpujan2020.html"
],
"epss": 0.01576,
"cvss": 3.6
},
"CVE-2016-5093": {
"verified": false,
"ranking_epss": 0.81258,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The get_icu_value_internal function in ext/intl/locale/locale_methods.c in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7 does not ensure the presence of a '\\0' character, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted locale_get_primary_language call.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3602",
"http://www.openwall.com/lists/oss-security/2016/05/26/3",
"http://www.securityfocus.com/bid/90946",
"https://bugs.php.net/bug.php?id=72241",
"https://github.com/php/php-src/commit/97eff7eb57fc2320c267a949cffd622c38712484?w=1",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3602",
"http://www.openwall.com/lists/oss-security/2016/05/26/3",
"http://www.securityfocus.com/bid/90946",
"https://bugs.php.net/bug.php?id=72241",
"https://github.com/php/php-src/commit/97eff7eb57fc2320c267a949cffd622c38712484?w=1",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"
],
"epss": 0.01534,
"cvss": 8.6
},
"CVE-2016-6288": {
"verified": false,
"ranking_epss": 0.88856,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The php_url_parse_ex function in ext/standard/url.c in PHP before 5.5.38 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via vectors involving the smart_str data type.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=629e4da7cc8b174acdeab84969cbfc606a019b31",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://openwall.com/lists/oss-security/2016/07/24/2",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.securityfocus.com/bid/92111",
"http://www.securitytracker.com/id/1036430",
"https://bugs.php.net/70480",
"https://support.apple.com/HT207170",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=629e4da7cc8b174acdeab84969cbfc606a019b31",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://openwall.com/lists/oss-security/2016/07/24/2",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.securityfocus.com/bid/92111",
"http://www.securitytracker.com/id/1036430",
"https://bugs.php.net/70480",
"https://support.apple.com/HT207170"
],
"epss": 0.04325,
"cvss": 9.8
},
"CVE-2016-6289": {
"verified": false,
"ranking_epss": 0.84723,
"cvss_v2": 6.8,
"cvss_version": 3,
"summary": "Integer overflow in the virtual_file_ex function in TSRM/tsrm_virtual_cwd.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted extract operation on a ZIP archive.",
"references": [
"http://fortiguard.com/advisory/fortinet-discovers-php-stack-based-buffer-overflow-vulnerabilities",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=0218acb7e756a469099c4ccfb22bce6c2bd1ef87",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://openwall.com/lists/oss-security/2016/07/24/2",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3631",
"http://www.securityfocus.com/bid/92074",
"http://www.securitytracker.com/id/1036430",
"https://bugs.php.net/72513",
"https://security.gentoo.org/glsa/201611-22",
"https://support.apple.com/HT207170",
"http://fortiguard.com/advisory/fortinet-discovers-php-stack-based-buffer-overflow-vulnerabilities",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=0218acb7e756a469099c4ccfb22bce6c2bd1ef87",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://openwall.com/lists/oss-security/2016/07/24/2",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3631",
"http://www.securityfocus.com/bid/92074",
"http://www.securitytracker.com/id/1036430",
"https://bugs.php.net/72513",
"https://security.gentoo.org/glsa/201611-22",
"https://support.apple.com/HT207170"
],
"epss": 0.02322,
"cvss": 7.8
},
"CVE-2014-3478": {
"verified": false,
"ranking_epss": 0.96167,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (application crash) via a crafted Pascal string in a FILE_PSTRING conversion.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html",
"http://marc.info/?l=bugtraq&m=141017844705317&w=2",
"http://mx.gw.com/pipermail/file/2014/001553.html",
"http://rhn.redhat.com/errata/RHSA-2014-1327.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/59794",
"http://secunia.com/advisories/59831",
"http://support.apple.com/kb/HT6443",
"http://www.debian.org/security/2014/dsa-2974",
"http://www.debian.org/security/2014/dsa-3021",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/68239",
"https://bugs.php.net/bug.php?id=67410",
"https://github.com/file/file/commit/27a14bc7ba285a0a5ebfdb55e54001aa11932b08",
"https://support.apple.com/HT204659",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html",
"http://marc.info/?l=bugtraq&m=141017844705317&w=2",
"http://mx.gw.com/pipermail/file/2014/001553.html",
"http://rhn.redhat.com/errata/RHSA-2014-1327.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/59794",
"http://secunia.com/advisories/59831",
"http://support.apple.com/kb/HT6443",
"http://www.debian.org/security/2014/dsa-2974",
"http://www.debian.org/security/2014/dsa-3021",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/68239",
"https://bugs.php.net/bug.php?id=67410",
"https://github.com/file/file/commit/27a14bc7ba285a0a5ebfdb55e54001aa11932b08",
"https://support.apple.com/HT204659"
],
"epss": 0.25344,
"cvss": 6.5
},
"CVE-2014-3479": {
"verified": false,
"ranking_epss": 0.93166,
"cvss_v2": 4.3,
"cvss_version": 2,
"summary": "The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, relies on incorrect sector-size data, which allows remote attackers to cause a denial of service (application crash) via a crafted stream offset in a CDF file.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html",
"http://marc.info/?l=bugtraq&m=141017844705317&w=2",
"http://mx.gw.com/pipermail/file/2014/001553.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/59794",
"http://secunia.com/advisories/59831",
"http://support.apple.com/kb/HT6443",
"http://www.debian.org/security/2014/dsa-2974",
"http://www.debian.org/security/2014/dsa-3021",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/68241",
"https://bugs.php.net/bug.php?id=67411",
"https://github.com/file/file/commit/36fadd29849b8087af9f4586f89dbf74ea45be67",
"https://support.apple.com/HT204659",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html",
"http://marc.info/?l=bugtraq&m=141017844705317&w=2",
"http://mx.gw.com/pipermail/file/2014/001553.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/59794",
"http://secunia.com/advisories/59831",
"http://support.apple.com/kb/HT6443",
"http://www.debian.org/security/2014/dsa-2974",
"http://www.debian.org/security/2014/dsa-3021",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/68241",
"https://bugs.php.net/bug.php?id=67411",
"https://github.com/file/file/commit/36fadd29849b8087af9f4586f89dbf74ea45be67",
"https://support.apple.com/HT204659"
],
"epss": 0.10357,
"cvss": 4.3
},
"CVE-2018-1302": {
"verified": false,
"ranking_epss": 0.93764,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have written a NULL pointer potentially to an already freed memory. The memory pools maintained by the server make this vulnerability hard to trigger in usual configurations, the reporter and the team could not reproduce it outside debug builds, so it is classified as low risk.",
"references": [
"http://www.openwall.com/lists/oss-security/2018/03/24/5",
"http://www.securityfocus.com/bid/103528",
"http://www.securitytracker.com/id/1040567",
"https://access.redhat.com/errata/RHSA-2019:0366",
"https://access.redhat.com/errata/RHSA-2019:0367",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re473305a65b4db888e3556e4dae10c2a04ee89dcff2e26ecdbd860a9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
"https://security.netapp.com/advisory/ntap-20180601-0004/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",
"https://usn.ubuntu.com/3783-1/",
"https://www.tenable.com/security/tns-2019-09",
"http://www.openwall.com/lists/oss-security/2018/03/24/5",
"http://www.securityfocus.com/bid/103528",
"http://www.securitytracker.com/id/1040567",
"https://access.redhat.com/errata/RHSA-2019:0366",
"https://access.redhat.com/errata/RHSA-2019:0367",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re473305a65b4db888e3556e4dae10c2a04ee89dcff2e26ecdbd860a9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
"https://security.netapp.com/advisory/ntap-20180601-0004/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",
"https://usn.ubuntu.com/3783-1/",
"https://www.tenable.com/security/tns-2019-09"
],
"epss": 0.12125,
"cvss": 5.9
},
"CVE-2020-1968": {
"verified": false,
"ranking_epss": 0.79499,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted communications sent over that TLS connection. The attack can only be exploited if an implementation re-uses a DH secret across multiple TLS connections. Note that this issue only impacts DH ciphersuites and not ECDH ciphersuites. This issue affects OpenSSL 1.0.2 which is out of support and no longer receiving public updates. OpenSSL 1.1.1 is not vulnerable to this issue. Fixed in OpenSSL 1.0.2w (Affected 1.0.2-1.0.2v).",
"references": [
"https://lists.debian.org/debian-lts-announce/2020/09/msg00016.html",
"https://security.gentoo.org/glsa/202210-02",
"https://security.netapp.com/advisory/ntap-20200911-0004/",
"https://usn.ubuntu.com/4504-1/",
"https://www.openssl.org/news/secadv/20200909.txt",
"https://www.oracle.com//security-alerts/cpujul2021.html",
"https://www.oracle.com/security-alerts/cpuApr2021.html",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujan2021.html",
"https://www.oracle.com/security-alerts/cpuoct2021.html",
"https://lists.debian.org/debian-lts-announce/2020/09/msg00016.html",
"https://security.gentoo.org/glsa/202210-02",
"https://security.netapp.com/advisory/ntap-20200911-0004/",
"https://usn.ubuntu.com/4504-1/",
"https://www.openssl.org/news/secadv/20200909.txt",
"https://www.oracle.com//security-alerts/cpujul2021.html",
"https://www.oracle.com/security-alerts/cpuApr2021.html",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujan2021.html",
"https://www.oracle.com/security-alerts/cpuoct2021.html"
],
"epss": 0.01278,
"cvss": 3.7
},
"CVE-2014-4616": {
"verified": false,
"ranking_epss": 0.68078,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.",
"references": [
"http://bugs.python.org/issue21529",
"http://lists.opensuse.org/opensuse-updates/2014-07/msg00015.html",
"http://openwall.com/lists/oss-security/2014/06/24/7",
"http://rhn.redhat.com/errata/RHSA-2015-1064.html",
"http://www.securityfocus.com/bid/68119",
"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=752395",
"https://bugzilla.redhat.com/show_bug.cgi?id=1112285",
"https://hackerone.com/reports/12297",
"https://security.gentoo.org/glsa/201503-10",
"http://bugs.python.org/issue21529",
"http://lists.opensuse.org/opensuse-updates/2014-07/msg00015.html",
"http://openwall.com/lists/oss-security/2014/06/24/7",
"http://rhn.redhat.com/errata/RHSA-2015-1064.html",
"http://www.securityfocus.com/bid/68119",
"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=752395",
"https://bugzilla.redhat.com/show_bug.cgi?id=1112285",
"https://hackerone.com/reports/12297",
"https://security.gentoo.org/glsa/201503-10"
],
"epss": 0.00557,
"cvss": 5.9
},
"CVE-2026-22796": {
"verified": false,
"ranking_epss": 0.2963,
"cvss_v2": null,
"cvss_version": 3,
"summary": "Issue summary: A type confusion vulnerability exists in the signature\nverification of signed PKCS#7 data where an ASN1_TYPE union member is\naccessed without first validating the type, causing an invalid or NULL\npointer dereference when processing malformed PKCS#7 data.\n\nImpact summary: An application performing signature verification of PKCS#7\ndata or calling directly the PKCS7_digest_from_attributes() function can be\ncaused to dereference an invalid or NULL pointer when reading, resulting in\na Denial of Service.\n\nThe function PKCS7_digest_from_attributes() accesses the message digest attribute\nvalue without validating its type. When the type is not V_ASN1_OCTET_STRING,\nthis results in accessing invalid memory through the ASN1_TYPE union, causing\na crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nsigned PKCS#7 to an application that verifies it. The impact of the\nexploit is just a Denial of Service, the PKCS7 API is legacy and applications\nshould be using the CMS API instead. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#7 parsing implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
"references": [
"https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4",
"https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49",
"https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12",
"https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e",
"https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2",
"https://openssl-library.org/news/secadv/20260127.txt"
],
"epss": 0.00112,
"cvss": 5.3
},
"CVE-2021-4160": {
"verified": false,
"ranking_epss": 0.53139,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the pre-requisites for attack are considered unlikely and include reusing private keys. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be significant. However, for an attack on TLS to be meaningful, the server would have to share the DH private key among multiple clients, which is no longer an option since CVE-2016-0701. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0.0. It was addressed in the releases of 1.1.1m and 3.0.1 on the 15th of December 2021. For the 1.0.2 release it is addressed in git commit 6fc1aaaf3 that is available to premium support customers only. It will be made available in 1.0.2zc when it is released. The issue only affects OpenSSL on MIPS platforms. Fixed in OpenSSL 3.0.1 (Affected 3.0.0). Fixed in OpenSSL 1.1.1m (Affected 1.1.1-1.1.1l). Fixed in OpenSSL 1.0.2zc-dev (Affected 1.0.2-1.0.2zb).",
"references": [
"https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3bf7b73ea7123045b8f972badc67ed6878e6c37f",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6fc1aaaf303185aa5e483e06bdfae16daa9193a7",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e9e726506cd2a3fd9c0f12daf8cc1fe934c7dddb",
"https://security.gentoo.org/glsa/202210-02",
"https://security.netapp.com/advisory/ntap-20240621-0006/",
"https://www.debian.org/security/2022/dsa-5103",
"https://www.openssl.org/news/secadv/20220128.txt",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujul2022.html",
"https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3bf7b73ea7123045b8f972badc67ed6878e6c37f",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6fc1aaaf303185aa5e483e06bdfae16daa9193a7",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e9e726506cd2a3fd9c0f12daf8cc1fe934c7dddb",
"https://security.gentoo.org/glsa/202210-02",
"https://security.netapp.com/advisory/ntap-20240621-0006/",
"https://www.debian.org/security/2022/dsa-5103",
"https://www.openssl.org/news/secadv/20220128.txt",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujul2022.html"
],
"epss": 0.00299,
"cvss": 5.9
},
"CVE-2013-6712": {
"verified": false,
"ranking_epss": 0.95005,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted interval specification.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=12fe4e90be7bfa2a763197079f68f5568a14e071",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2013-12/msg00125.html",
"http://lists.opensuse.org/opensuse-updates/2013-12/msg00126.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://www.debian.org/security/2013/dsa-2816",
"http://www.ubuntu.com/usn/USN-2055-1",
"https://bugs.php.net/bug.php?id=66060",
"https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04463322",
"https://support.apple.com/HT204659",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=12fe4e90be7bfa2a763197079f68f5568a14e071",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2013-12/msg00125.html",
"http://lists.opensuse.org/opensuse-updates/2013-12/msg00126.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://www.debian.org/security/2013/dsa-2816",
"http://www.ubuntu.com/usn/USN-2055-1",
"https://bugs.php.net/bug.php?id=66060",
"https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04463322",
"https://support.apple.com/HT204659"
],
"epss": 0.17303,
"cvss": 5
},
"CVE-2015-6497": {
"verified": false,
"ranking_epss": 0.85716,
"cvss_v2": 6.5,
"cvss_version": 3,
"summary": "The create function in app/code/core/Mage/Catalog/Model/Product/Api/V2.php in Magento Community Edition (CE) before 1.9.2.1 and Enterprise Edition (EE) before 1.14.2.1, when used with PHP before 5.4.24 or 5.5.8, allows remote authenticated users to execute arbitrary PHP code via the productData parameter to index.php/api/v2_soap.",
"references": [
"http://blog.mindedsecurity.com/2015/09/autoloaded-file-inclusion-in-magento.html",
"http://karmainsecurity.com/KIS-2015-04",
"http://magento.com/security/patches/supee-6482",
"http://packetstormsecurity.com/files/133544/Magento-1.9.2-File-Inclusion.html",
"http://seclists.org/fulldisclosure/2015/Sep/48",
"http://blog.mindedsecurity.com/2015/09/autoloaded-file-inclusion-in-magento.html",
"http://karmainsecurity.com/KIS-2015-04",
"http://magento.com/security/patches/supee-6482",
"http://packetstormsecurity.com/files/133544/Magento-1.9.2-File-Inclusion.html",
"http://seclists.org/fulldisclosure/2015/Sep/48"
],
"epss": 0.02665,
"cvss": 8.8
},
"CVE-2014-3670": {
"verified": false,
"ranking_epss": 0.96999,
"cvss_v2": 6.8,
"cvss_version": 2,
"summary": "The exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 operates on floating-point arrays incorrectly, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a crafted JPEG image with TIFF thumbnail data that is improperly handled by the exif_thumbnail function.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=ddb207e7fa2e9adeba021a1303c3781efda5409b",
"http://linux.oracle.com/errata/ELSA-2014-1767.html",
"http://linux.oracle.com/errata/ELSA-2014-1768.html",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-11/msg00024.html",
"http://lists.opensuse.org/opensuse-updates/2014-11/msg00034.html",
"http://lists.opensuse.org/opensuse-updates/2015-01/msg00006.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://rhn.redhat.com/errata/RHSA-2014-1767.html",
"http://rhn.redhat.com/errata/RHSA-2014-1768.html",
"http://rhn.redhat.com/errata/RHSA-2014-1824.html",
"http://secunia.com/advisories/59967",
"http://secunia.com/advisories/60630",
"http://secunia.com/advisories/60699",
"http://secunia.com/advisories/61763",
"http://secunia.com/advisories/61970",
"http://secunia.com/advisories/61982",
"http://www.debian.org/security/2014/dsa-3064",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.securityfocus.com/bid/70665",
"http://www.ubuntu.com/usn/USN-2391-1",
"https://bugs.php.net/bug.php?id=68113",
"https://bugzilla.redhat.com/show_bug.cgi?id=1154502",
"https://support.apple.com/HT204659",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=ddb207e7fa2e9adeba021a1303c3781efda5409b",
"http://linux.oracle.com/errata/ELSA-2014-1767.html",
"http://linux.oracle.com/errata/ELSA-2014-1768.html",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-11/msg00024.html",
"http://lists.opensuse.org/opensuse-updates/2014-11/msg00034.html",
"http://lists.opensuse.org/opensuse-updates/2015-01/msg00006.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://rhn.redhat.com/errata/RHSA-2014-1767.html",
"http://rhn.redhat.com/errata/RHSA-2014-1768.html",
"http://rhn.redhat.com/errata/RHSA-2014-1824.html",
"http://secunia.com/advisories/59967",
"http://secunia.com/advisories/60630",
"http://secunia.com/advisories/60699",
"http://secunia.com/advisories/61763",
"http://secunia.com/advisories/61970",
"http://secunia.com/advisories/61982",
"http://www.debian.org/security/2014/dsa-3064",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.securityfocus.com/bid/70665",
"http://www.ubuntu.com/usn/USN-2391-1",
"https://bugs.php.net/bug.php?id=68113",
"https://bugzilla.redhat.com/show_bug.cgi?id=1154502",
"https://support.apple.com/HT204659"
],
"epss": 0.35023,
"cvss": 6.8
},
"CVE-2025-13837": {
"verified": false,
"ranking_epss": 0.06861,
"cvss_v2": null,
"cvss_version": 3,
"summary": "When loading a plist file, the plistlib module reads data in size specified by the file itself, meaning a malicious file can cause OOM and DoS issues",
"references": [
"https://github.com/python/cpython/commit/568342cfc8f002d9a15f30238f26b9d2e0e79036",
"https://github.com/python/cpython/commit/5a8b19677d818fb41ee55f310233772e15aa1a2b",
"https://github.com/python/cpython/commit/694922cf40aa3a28f898b5f5ee08b71b4922df70",
"https://github.com/python/cpython/commit/71fa8eb8233b37f16c88b6e3e583b461b205d1ba",
"https://github.com/python/cpython/commit/b64441e4852383645af5b435411a6f849dd1b4cb",
"https://github.com/python/cpython/commit/cefee7d118a26ef6cd43db59bb9d98ca9a331111",
"https://github.com/python/cpython/issues/119342",
"https://github.com/python/cpython/pull/119343",
"https://mail.python.org/archives/list/security-announce@python.org/thread/2X5IBCJXRQAZ5PSERLHMSJFBHFR3QM2C/"
],
"epss": 0.00025,
"cvss": 5.5
},
"CVE-2019-9641": {
"verified": false,
"ranking_epss": 0.97892,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_TIFF.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html",
"https://bugs.php.net/bug.php?id=77509",
"https://lists.debian.org/debian-lts-announce/2019/03/msg00043.html",
"https://security.netapp.com/advisory/ntap-20190502-0007/",
"https://usn.ubuntu.com/3922-1/",
"https://usn.ubuntu.com/3922-2/",
"https://usn.ubuntu.com/3922-3/",
"https://www.debian.org/security/2019/dsa-4403",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html",
"https://bugs.php.net/bug.php?id=77509",
"https://lists.debian.org/debian-lts-announce/2019/03/msg00043.html",
"https://security.netapp.com/advisory/ntap-20190502-0007/",
"https://usn.ubuntu.com/3922-1/",
"https://usn.ubuntu.com/3922-2/",
"https://usn.ubuntu.com/3922-3/",
"https://www.debian.org/security/2019/dsa-4403"
],
"epss": 0.52083,
"cvss": 9.8
},
"CVE-2025-13836": {
"verified": false,
"ranking_epss": 0.35712,
"cvss_v2": null,
"cvss_version": 3,
"summary": "When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This allows a malicious server to cause the client to read large amounts of data into memory, potentially causing OOM or other DoS.",
"references": [
"https://github.com/python/cpython/commit/14b1fdb0a94b96f86fc7b86671ea9582b8676628",
"https://github.com/python/cpython/commit/289f29b0fe38baf2d7cb5854f4bb573cc34a6a15",
"https://github.com/python/cpython/commit/4ce27904b597c77d74dd93f2c912676021a99155",
"https://github.com/python/cpython/commit/5a4c4a033a4a54481be6870aa1896fad732555b5",
"https://github.com/python/cpython/commit/5dc101675fd22918facbbe0fecdc821502beaaf0",
"https://github.com/python/cpython/commit/afc40bdd3dd71f343fd9016f6d8eebbacbd6587c",
"https://github.com/python/cpython/issues/119451",
"https://github.com/python/cpython/pull/119454",
"https://mail.python.org/archives/list/security-announce@python.org/thread/OQ6G7MKRQIS3OAREC3HNG3D2DPOU34XO/"
],
"epss": 0.00152,
"cvss": 7.5
},
"CVE-2014-0236": {
"verified": false,
"ranking_epss": 0.68857,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "file before 5.18, as used in the Fileinfo component in PHP before 5.6.0, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a zero root_storage value in a CDF file, related to cdf.c and readcdf.c.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f3f22ff5c697aef854ffc1918bce708b37481b0f",
"http://php.net/ChangeLog-5.php",
"https://bugs.php.net/bug.php?id=67329",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f3f22ff5c697aef854ffc1918bce708b37481b0f",
"http://php.net/ChangeLog-5.php",
"https://bugs.php.net/bug.php?id=67329"
],
"epss": 0.00582,
"cvss": 7.5
},
"CVE-2021-28667": {
"verified": false,
"ranking_epss": 0.71215,
"cvss_v2": 7.1,
"cvss_version": 3,
"summary": "StackStorm before 3.4.1, in some situations, has an infinite loop that consumes all available memory and disk space. This can occur if Python 3.x is used, the locale is not utf-8, and there is an attempt to log Unicode data (from an action or rule name).",
"references": [
"https://stackstorm.com/2021/03/10/stackstorm-v3-4-1-security-fix/",
"https://stackstorm.com/2021/03/10/stackstorm-v3-4-1-security-fix/"
],
"epss": 0.00668,
"cvss": 7.5
},
"CVE-2024-25117": {
"verified": false,
"ranking_epss": 0.38193,
"cvss_v2": null,
"cvss_version": 3,
"summary": "php-svg-lib is a scalable vector graphics (SVG) file parsing/rendering library. Prior to version 0.5.2, php-svg-lib fails to validate that font-family doesn't contain a PHAR url, which might leads to RCE on PHP < 8.0, and doesn't validate if external references are allowed. This might leads to bypass of restrictions or RCE on projects that are using it, if they do not strictly revalidate the fontName that is passed by php-svg-lib. The `Style::fromAttributes(`), or the `Style::parseCssStyle()` should check the content of the `font-family` and prevents it to use a PHAR url, to avoid passing an invalid and dangerous `fontName` value to other libraries. The same check as done in the `Style::fromStyleSheets` might be reused. Libraries using this library as a dependency might be vulnerable to some bypass of restrictions, or even remote code execution, if they do not double check the value of the `fontName` that is passed by php-svg-lib. Version 0.5.2 contains a fix for this issue.",
"references": [
"https://github.com/dompdf/php-svg-lib/commit/732faa9fb4309221e2bd9b2fda5de44f947133aa",
"https://github.com/dompdf/php-svg-lib/commit/8ffcc41bbde39f09f94b9760768086f12bbdce42",
"https://github.com/dompdf/php-svg-lib/security/advisories/GHSA-f3qr-qr4x-j273",
"https://github.com/dompdf/php-svg-lib/commit/732faa9fb4309221e2bd9b2fda5de44f947133aa",
"https://github.com/dompdf/php-svg-lib/commit/8ffcc41bbde39f09f94b9760768086f12bbdce42",
"https://github.com/dompdf/php-svg-lib/security/advisories/GHSA-f3qr-qr4x-j273"
],
"epss": 0.0017,
"cvss": 6.8
},
"CVE-2014-2270": {
"verified": false,
"ranking_epss": 0.96339,
"cvss_v2": 4.3,
"cvss_version": 2,
"summary": "softmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial of service (out-of-bounds memory access and crash) via crafted offsets in the softmagic of a PE executable.",
"references": [
"http://bugs.gw.com/view.php?id=313",
"http://lists.opensuse.org/opensuse-updates/2014-03/msg00034.html",
"http://lists.opensuse.org/opensuse-updates/2014-03/msg00037.html",
"http://lists.opensuse.org/opensuse-updates/2014-03/msg00084.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://seclists.org/oss-sec/2014/q1/473",
"http://seclists.org/oss-sec/2014/q1/504",
"http://seclists.org/oss-sec/2014/q1/505",
"http://support.apple.com/kb/HT6443",
"http://www.debian.org/security/2014/dsa-2873",
"http://www.php.net/ChangeLog-5.php",
"http://www.ubuntu.com/usn/USN-2162-1",
"http://www.ubuntu.com/usn/USN-2163-1",
"https://github.com/file/file/commit/447558595a3650db2886cd2f416ad0beba965801",
"https://security.gentoo.org/glsa/201503-08",
"http://bugs.gw.com/view.php?id=313",
"http://lists.opensuse.org/opensuse-updates/2014-03/msg00034.html",
"http://lists.opensuse.org/opensuse-updates/2014-03/msg00037.html",
"http://lists.opensuse.org/opensuse-updates/2014-03/msg00084.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://seclists.org/oss-sec/2014/q1/473",
"http://seclists.org/oss-sec/2014/q1/504",
"http://seclists.org/oss-sec/2014/q1/505",
"http://support.apple.com/kb/HT6443",
"http://www.debian.org/security/2014/dsa-2873",
"http://www.php.net/ChangeLog-5.php",
"http://www.ubuntu.com/usn/USN-2162-1",
"http://www.ubuntu.com/usn/USN-2163-1",
"https://github.com/file/file/commit/447558595a3650db2886cd2f416ad0beba965801",
"https://security.gentoo.org/glsa/201503-08"
],
"epss": 0.27067,
"cvss": 4.3
},
"CVE-2014-4721": {
"verified": false,
"ranking_epss": 0.92404,
"cvss_v2": 2.6,
"cvss_version": 2,
"summary": "The phpinfo implementation in ext/standard/info.c in PHP before 5.4.30 and 5.5.x before 5.5.14 does not ensure use of the string data type for the PHP_AUTH_PW, PHP_AUTH_TYPE, PHP_AUTH_USER, and PHP_SELF variables, which might allow context-dependent attackers to obtain sensitive information from process memory by using the integer data type with crafted values, related to a \"type confusion\" vulnerability, as demonstrated by reading a private SSL key in an Apache HTTP Server web-hosting environment with mod_ssl and a PHP 5.3.x mod_php.",
"references": [
"http://lists.opensuse.org/opensuse-updates/2014-07/msg00035.html",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/54553",
"http://secunia.com/advisories/59794",
"http://secunia.com/advisories/59831",
"http://twitter.com/mikispag/statuses/485713462258302976",
"http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
"http://www.debian.org/security/2014/dsa-2974",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.php.net/ChangeLog-5.php",
"https://bugs.php.net/bug.php?id=67498",
"https://www.sektioneins.de/en/blog/14-07-04-phpinfo-infoleak.html",
"http://lists.opensuse.org/opensuse-updates/2014-07/msg00035.html",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/54553",
"http://secunia.com/advisories/59794",
"http://secunia.com/advisories/59831",
"http://twitter.com/mikispag/statuses/485713462258302976",
"http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
"http://www.debian.org/security/2014/dsa-2974",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.php.net/ChangeLog-5.php",
"https://bugs.php.net/bug.php?id=67498",
"https://www.sektioneins.de/en/blog/14-07-04-phpinfo-infoleak.html"
],
"epss": 0.08651,
"cvss": 2.6
},
"CVE-2016-4537": {
"verified": false,
"ranking_epss": 0.91036,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 accepts a negative integer for the scale argument, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted call.",
"references": [
"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html",
"http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html",
"http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3602",
"http://www.openwall.com/lists/oss-security/2016/05/05/21",
"http://www.securityfocus.com/bid/90173",
"https://bugs.php.net/bug.php?id=72093",
"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=d650063a0457aec56364e4005a636dc6c401f9cd",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
"https://security.gentoo.org/glsa/201611-22",
"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html",
"http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html",
"http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3602",
"http://www.openwall.com/lists/oss-security/2016/05/05/21",
"http://www.securityfocus.com/bid/90173",
"https://bugs.php.net/bug.php?id=72093",
"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=d650063a0457aec56364e4005a636dc6c401f9cd",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
"https://security.gentoo.org/glsa/201611-22"
],
"epss": 0.06482,
"cvss": 9.8
},
"CVE-2009-2299": {
"verified": false,
"ranking_epss": 0.7526,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "The Artofdefence Hyperguard Web Application Firewall (WAF) module before 2.5.5-11635, 3.0 before 3.0.3-11636, and 3.1 before 3.1.1-11637, a module for the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via an HTTP request with a large Content-Length value but no POST data.",
"references": [
"http://secunia.com/advisories/35645",
"http://www.h4ck1nb3rg.at/wafs/advisory_artofdefence_hyperguard_200907.txt",
"http://www.securityfocus.com/archive/1/504680/100/0/threaded",
"http://secunia.com/advisories/35645",
"http://www.h4ck1nb3rg.at/wafs/advisory_artofdefence_hyperguard_200907.txt",
"http://www.securityfocus.com/archive/1/504680/100/0/threaded"
],
"epss": 0.00879,
"cvss": 5
},
"CVE-2016-4538": {
"verified": false,
"ranking_epss": 0.91036,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 modifies certain data structures without considering whether they are copies of the _zero_, _one_, or _two_ global variable, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted call.",
"references": [
"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html",
"http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html",
"http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3602",
"http://www.openwall.com/lists/oss-security/2016/05/05/21",
"http://www.securityfocus.com/bid/90173",
"https://bugs.php.net/bug.php?id=72093",
"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=d650063a0457aec56364e4005a636dc6c401f9cd",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
"https://security.gentoo.org/glsa/201611-22",
"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html",
"http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html",
"http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3602",
"http://www.openwall.com/lists/oss-security/2016/05/05/21",
"http://www.securityfocus.com/bid/90173",
"https://bugs.php.net/bug.php?id=72093",
"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=d650063a0457aec56364e4005a636dc6c401f9cd",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
"https://security.gentoo.org/glsa/201611-22"
],
"epss": 0.06482,
"cvss": 9.8
},
"CVE-2016-4539": {
"verified": false,
"ranking_epss": 0.89076,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The xml_parse_into_struct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (buffer under-read and segmentation fault) or possibly have unspecified other impact via crafted XML data in the second argument, leading to a parser level of zero.",
"references": [
"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html",
"http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html",
"http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3602",
"http://www.openwall.com/lists/oss-security/2016/05/05/21",
"http://www.securityfocus.com/bid/90174",
"https://bugs.php.net/bug.php?id=72099",
"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=dccda88f27a084bcbbb30198ace12b4e7ae961cc",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
"https://security.gentoo.org/glsa/201611-22",
"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html",
"http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html",
"http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3602",
"http://www.openwall.com/lists/oss-security/2016/05/05/21",
"http://www.securityfocus.com/bid/90174",
"https://bugs.php.net/bug.php?id=72099",
"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=dccda88f27a084bcbbb30198ace12b4e7ae961cc",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
"https://security.gentoo.org/glsa/201611-22"
],
"epss": 0.04506,
"cvss": 9.8
},
"CVE-2025-68160": {
"verified": false,
"ranking_epss": 0.06288,
"cvss_v2": null,
"cvss_version": 3,
"summary": "Issue summary: Writing large, newline-free data into a BIO chain using the\nline-buffering filter where the next BIO performs short writes can trigger\na heap-based out-of-bounds write.\n\nImpact summary: This out-of-bounds write can cause memory corruption which\ntypically results in a crash, leading to Denial of Service for an application.\n\nThe line-buffering BIO filter (BIO_f_linebuffer) is not used by default in\nTLS/SSL data paths. In OpenSSL command-line applications, it is typically\nonly pushed onto stdout/stderr on VMS systems. Third-party applications that\nexplicitly use this filter with a BIO chain that can short-write and that\nwrite large, newline-free data influenced by an attacker would be affected.\nHowever, the circumstances where this could happen are unlikely to be under\nattacker control, and BIO_f_linebuffer is unlikely to be handling non-curated\ndata controlled by an attacker. For that reason the issue was assessed as\nLow severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the BIO implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
"references": [
"https://github.com/openssl/openssl/commit/384011202af92605d926fafe4a0bcd6b65d162ad",
"https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6",
"https://github.com/openssl/openssl/commit/4c96fbba618e1940f038012506ee9e21d32ee12c",
"https://github.com/openssl/openssl/commit/6845c3b6460a98b1ec4e463baa2ea1a63a32d7c0",
"https://github.com/openssl/openssl/commit/68a7cd2e2816c3a02f4d45a2ce43fc04fac97096",
"https://openssl-library.org/news/secadv/20260127.txt"
],
"epss": 0.00024,
"cvss": 4.7
},
"CVE-2020-11579": {
"verified": false,
"ranking_epss": 0.97107,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation process) allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled.",
"references": [
"https://github.com/ShielderSec/CVE-2020-11579",
"https://shielder.it/",
"https://www.phpkb.com",
"https://www.shielder.it/blog/mysql-and-cve-2020-11579-exploitation/",
"https://github.com/ShielderSec/CVE-2020-11579",
"https://shielder.it/",
"https://www.phpkb.com",
"https://www.shielder.it/blog/mysql-and-cve-2020-11579-exploitation/"
],
"epss": 0.36683,
"cvss": 7.5
},
"CVE-2014-9365": {
"verified": false,
"ranking_epss": 0.84084,
"cvss_v2": 5.8,
"cvss_version": 2,
"summary": "The HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) xmlrpclib libraries in CPython (aka Python) 2.x before 2.7.9 and 3.x before 3.4.3, when accessing an HTTPS URL, do not (a) check the certificate against a trust store or verify that the server hostname matches a domain name in the subject's (b) Common Name or (c) subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.",
"references": [
"http://bugs.python.org/issue22417",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://www.openwall.com/lists/oss-security/2014/12/11/1",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html",
"http://www.securityfocus.com/bid/71639",
"https://access.redhat.com/errata/RHSA-2016:1166",
"https://access.redhat.com/errata/RHSA-2017:1162",
"https://access.redhat.com/errata/RHSA-2017:1868",
"https://security.gentoo.org/glsa/201503-10",
"https://support.apple.com/kb/HT205031",
"https://www.python.org/dev/peps/pep-0476/",
"https://www.python.org/downloads/release/python-279/",
"http://bugs.python.org/issue22417",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://www.openwall.com/lists/oss-security/2014/12/11/1",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html",
"http://www.securityfocus.com/bid/71639",
"https://access.redhat.com/errata/RHSA-2016:1166",
"https://access.redhat.com/errata/RHSA-2017:1162",
"https://access.redhat.com/errata/RHSA-2017:1868",
"https://security.gentoo.org/glsa/201503-10",
"https://support.apple.com/kb/HT205031",
"https://www.python.org/dev/peps/pep-0476/",
"https://www.python.org/downloads/release/python-279/"
],
"epss": 0.02127,
"cvss": 5.8
},
"CVE-2015-5652": {
"verified": false,
"ranking_epss": 0.34932,
"cvss_v2": 7.2,
"cvss_version": 2,
"summary": "Untrusted search path vulnerability in python.exe in Python through 3.5.0 on Windows allows local users to gain privileges via a Trojan horse readline.pyd file in the current working directory. NOTE: the vendor says \"It was determined that this is a longtime behavior of Python that cannot really be altered at this point.\"",
"references": [
"http://jvn.jp/en/jp/JVN49503705/995204/index.html",
"http://jvn.jp/en/jp/JVN49503705/index.html",
"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000141",
"http://www.securityfocus.com/bid/76929",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755",
"http://jvn.jp/en/jp/JVN49503705/995204/index.html",
"http://jvn.jp/en/jp/JVN49503705/index.html",
"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000141",
"http://www.securityfocus.com/bid/76929",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755"
],
"epss": 0.00147,
"cvss": 7.2
},
"CVE-2021-3426": {
"verified": false,
"ranking_epss": 0.23501,
"cvss_v2": 2.7,
"cvss_version": 3,
"summary": "There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to the other user that they would not normally be able to access. The highest risk of this flaw is to data confidentiality. This flaw affects Python versions before 3.8.9, Python versions before 3.9.3 and Python versions before 3.10.0a7.",
"references": [
"https://bugzilla.redhat.com/show_bug.cgi?id=1935913",
"https://lists.debian.org/debian-lts-announce/2021/04/msg00005.html",
"https://lists.debian.org/debian-lts-announce/2023/06/msg00039.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/25HVHLBGO2KNPXJ3G426QEYSSCECJDU5/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BF2K7HEWADHN6P52R3QLIOX27U3DJ4HI/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DQYPUKLLBOZMKFPO7RD7CENTXHUUEUV7/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LM5V4VPLBHBEASSAROYPSHXGXGGPHNOE/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6VXJZSZ6N64AILJX4CTMACYGQGHHD5C/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QNGAFMPIYIVJ47FCF2NK2PIX22HUG35B/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VPX7Y5GQDNB4FJTREWONGC4ZSVH7TGHF/",
"https://security.gentoo.org/glsa/202104-04",
"https://security.netapp.com/advisory/ntap-20210629-0003/",
"https://www.oracle.com/security-alerts/cpujan2022.html",
"https://www.oracle.com/security-alerts/cpuoct2021.html",
"https://bugzilla.redhat.com/show_bug.cgi?id=1935913",
"https://lists.debian.org/debian-lts-announce/2021/04/msg00005.html",
"https://lists.debian.org/debian-lts-announce/2023/06/msg00039.html",
"https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/25HVHLBGO2KNPXJ3G426QEYSSCECJDU5/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BF2K7HEWADHN6P52R3QLIOX27U3DJ4HI/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DQYPUKLLBOZMKFPO7RD7CENTXHUUEUV7/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LM5V4VPLBHBEASSAROYPSHXGXGGPHNOE/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6VXJZSZ6N64AILJX4CTMACYGQGHHD5C/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QNGAFMPIYIVJ47FCF2NK2PIX22HUG35B/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VPX7Y5GQDNB4FJTREWONGC4ZSVH7TGHF/",
"https://security.gentoo.org/glsa/202104-04",
"https://security.netapp.com/advisory/ntap-20210629-0003/",
"https://www.oracle.com/security-alerts/cpujan2022.html",
"https://www.oracle.com/security-alerts/cpuoct2021.html"
],
"epss": 0.0008,
"cvss": 5.7
},
"CVE-2014-8109": {
"verified": false,
"ranking_epss": 0.93652,
"cvss_v2": 4.3,
"cvss_version": 2,
"summary": "mod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not support an httpd configuration in which the same Lua authorization provider is used with different arguments within different contexts, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging multiple Require directives, as demonstrated by a configuration that specifies authorization for one group to access a certain directory, and authorization for a second group to access a second directory.",
"references": [
"http://advisories.mageia.org/MGASA-2015-0011.html",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159352.html",
"http://www.openwall.com/lists/oss-security/2014/11/28/5",
"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html",
"http://www.securityfocus.com/bid/73040",
"http://www.ubuntu.com/usn/USN-2523-1",
"https://bugzilla.redhat.com/show_bug.cgi?id=1174077",
"https://github.com/apache/httpd/commit/3f1693d558d0758f829c8b53993f1749ddf6ffcb",
"https://issues.apache.org/bugzilla/show_bug.cgi?id=57204",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://support.apple.com/HT205219",
"https://support.apple.com/kb/HT205031",
"http://advisories.mageia.org/MGASA-2015-0011.html",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159352.html",
"http://www.openwall.com/lists/oss-security/2014/11/28/5",
"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html",
"http://www.securityfocus.com/bid/73040",
"http://www.ubuntu.com/usn/USN-2523-1",
"https://bugzilla.redhat.com/show_bug.cgi?id=1174077",
"https://github.com/apache/httpd/commit/3f1693d558d0758f829c8b53993f1749ddf6ffcb",
"https://issues.apache.org/bugzilla/show_bug.cgi?id=57204",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://support.apple.com/HT205219",
"https://support.apple.com/kb/HT205031"
],
"epss": 0.11719,
"cvss": 4.3
},
"CVE-2015-4644": {
"verified": false,
"ranking_epss": 0.92967,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "The php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not validate token extraction for table names, which might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted name. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1352.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2cc4e69cc6d8dbc4b3568ad3dd583324a7c11d64",
"http://openwall.com/lists/oss-security/2015/06/18/6",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://www.debian.org/security/2015/dsa-3344",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75292",
"http://www.securitytracker.com/id/1032709",
"https://bugs.php.net/bug.php?id=69667",
"https://security.gentoo.org/glsa/201606-10",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2cc4e69cc6d8dbc4b3568ad3dd583324a7c11d64",
"http://openwall.com/lists/oss-security/2015/06/18/6",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://www.debian.org/security/2015/dsa-3344",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75292",
"http://www.securitytracker.com/id/1032709",
"https://bugs.php.net/bug.php?id=69667",
"https://security.gentoo.org/glsa/201606-10"
],
"epss": 0.09888,
"cvss": 7.5
},
"CVE-2015-4643": {
"verified": false,
"ranking_epss": 0.92413,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-4022.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=0765623d6991b62ffcd93ddb6be8a5203a2fa7e2",
"http://openwall.com/lists/oss-security/2015/06/18/6",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.debian.org/security/2015/dsa-3344",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75291",
"http://www.securitytracker.com/id/1032709",
"https://bugs.php.net/bug.php?id=69545",
"https://security.gentoo.org/glsa/201606-10",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=0765623d6991b62ffcd93ddb6be8a5203a2fa7e2",
"http://openwall.com/lists/oss-security/2015/06/18/6",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.debian.org/security/2015/dsa-3344",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75291",
"http://www.securitytracker.com/id/1032709",
"https://bugs.php.net/bug.php?id=69545",
"https://security.gentoo.org/glsa/201606-10"
],
"epss": 0.08663,
"cvss": 9.8
},
"CVE-2015-4642": {
"verified": false,
"ranking_epss": 0.90595,
"cvss_v2": 10,
"cvss_version": 3,
"summary": "The escapeshellarg function in ext/standard/exec.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 on Windows allows remote attackers to execute arbitrary OS commands via a crafted string to an application that accepts command-line arguments for a call to the PHP system function.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=d2ac264ffea5ca2e85640b6736e0c7cd4ee9a4a9",
"http://openwall.com/lists/oss-security/2015/06/18/6",
"http://php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/75290",
"http://www.securitytracker.com/id/1032709",
"https://bugs.php.net/bug.php?id=69646",
"https://security.gentoo.org/glsa/201606-10",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=d2ac264ffea5ca2e85640b6736e0c7cd4ee9a4a9",
"http://openwall.com/lists/oss-security/2015/06/18/6",
"http://php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/75290",
"http://www.securitytracker.com/id/1032709",
"https://bugs.php.net/bug.php?id=69646",
"https://security.gentoo.org/glsa/201606-10"
],
"epss": 0.05952,
"cvss": 9.8
},
"CVE-2019-1552": {
"verified": false,
"ranking_epss": 0.30674,
"cvss_v2": 1.9,
"cvss_version": 3,
"summary": "OpenSSL has internal defaults for a directory tree where it can find a configuration file as well as certificates used for verification in TLS. This directory is most commonly referred to as OPENSSLDIR, and is configurable with the --prefix / --openssldir configuration options. For OpenSSL versions 1.1.0 and 1.1.1, the mingw configuration targets assume that resulting programs and libraries are installed in a Unix-like environment and the default prefix for program installation as well as for OPENSSLDIR should be '/usr/local'. However, mingw programs are Windows programs, and as such, find themselves looking at sub-directories of 'C:/usr/local', which may be world writable, which enables untrusted users to modify OpenSSL's default configuration, insert CA certificates, modify (or even replace) existing engine modules, etc. For OpenSSL 1.0.2, '/usr/local/ssl' is used as default for OPENSSLDIR on all Unix and Windows targets, including Visual C builds. However, some build instructions for the diverse Windows targets on 1.0.2 encourage you to specify your own --prefix. OpenSSL versions 1.1.1, 1.1.0 and 1.0.2 are affected by this issue. Due to the limited scope of affected deployments this has been assessed as low severity and therefore we are not creating new releases at this time. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s).",
"references": [
"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=54aa9d51b09d67e90db443f682cface795f5af9e",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=b15a19c148384e73338aa7c5b12652138e35ed28",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=d333ebaf9c77332754a9d5e111e2f53e1de54fdd",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e32bc855a81a2d48d215c506bdeb4f598045f7e9",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10365",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/",
"https://security.netapp.com/advisory/ntap-20190823-0006/",
"https://support.f5.com/csp/article/K94041354",
"https://support.f5.com/csp/article/K94041354?utm_source=f5support&%3Butm_medium=RSS",
"https://www.kb.cert.org/vuls/id/429301",
"https://www.openssl.org/news/secadv/20190730.txt",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/security-alerts/cpujan2020.html",
"https://www.oracle.com/security-alerts/cpujul2020.html",
"https://www.oracle.com/security-alerts/cpuoct2020.html",
"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
"https://www.tenable.com/security/tns-2019-08",
"https://www.tenable.com/security/tns-2019-09",
"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=54aa9d51b09d67e90db443f682cface795f5af9e",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=b15a19c148384e73338aa7c5b12652138e35ed28",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=d333ebaf9c77332754a9d5e111e2f53e1de54fdd",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e32bc855a81a2d48d215c506bdeb4f598045f7e9",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10365",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/",
"https://security.netapp.com/advisory/ntap-20190823-0006/",
"https://support.f5.com/csp/article/K94041354",
"https://support.f5.com/csp/article/K94041354?utm_source=f5support&%3Butm_medium=RSS",
"https://www.kb.cert.org/vuls/id/429301",
"https://www.openssl.org/news/secadv/20190730.txt",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/security-alerts/cpujan2020.html",
"https://www.oracle.com/security-alerts/cpujul2020.html",
"https://www.oracle.com/security-alerts/cpuoct2020.html",
"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
"https://www.tenable.com/security/tns-2019-08",
"https://www.tenable.com/security/tns-2019-09"
],
"epss": 0.00118,
"cvss": 3.3
},
"CVE-2013-0941": {
"verified": false,
"ranking_epss": 0.11658,
"cvss_v2": 2.1,
"cvss_version": 2,
"summary": "EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and RSA Agent before 6.1.4 for Microsoft Windows use an improper encryption algorithm and a weak key for maintaining the stored data of the node secret for the SecurID Authentication API, which allows local users to obtain sensitive information via cryptographic attacks on this data.",
"references": [
"http://archives.neohapsis.com/archives/bugtraq/2013-05/0064.html",
"http://archives.neohapsis.com/archives/bugtraq/2013-05/0064.html"
],
"epss": 0.00039,
"cvss": 2.1
},
"CVE-2013-0942": {
"verified": false,
"ranking_epss": 0.65681,
"cvss_v2": 4.3,
"cvss_version": 2,
"summary": "Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Agent 7.1 before 7.1.1 for Web for Internet Information Services, and 7.1 before 7.1.1 for Web for Apache, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.",
"references": [
"http://archives.neohapsis.com/archives/bugtraq/2013-05/0043.html",
"http://archives.neohapsis.com/archives/bugtraq/2013-05/0043.html"
],
"epss": 0.00496,
"cvss": 4.3
},
"CVE-2019-1551": {
"verified": false,
"ranking_epss": 0.88169,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t).",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00030.html",
"http://packetstormsecurity.com/files/155754/Slackware-Security-Advisory-openssl-Updates.html",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=419102400a2811582a7a3d4a4e317d72e5ce0a8f",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f1c5eea8a817075d31e43f5876993c6710238c98",
"https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/",
"https://seclists.org/bugtraq/2019/Dec/39",
"https://seclists.org/bugtraq/2019/Dec/46",
"https://security.gentoo.org/glsa/202004-10",
"https://security.netapp.com/advisory/ntap-20191210-0001/",
"https://usn.ubuntu.com/4376-1/",
"https://usn.ubuntu.com/4504-1/",
"https://www.debian.org/security/2019/dsa-4594",
"https://www.debian.org/security/2021/dsa-4855",
"https://www.openssl.org/news/secadv/20191206.txt",
"https://www.oracle.com/security-alerts/cpuApr2021.html",
"https://www.oracle.com/security-alerts/cpujan2021.html",
"https://www.oracle.com/security-alerts/cpujul2020.html",
"https://www.tenable.com/security/tns-2019-09",
"https://www.tenable.com/security/tns-2020-03",
"https://www.tenable.com/security/tns-2020-11",
"https://www.tenable.com/security/tns-2021-10",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00030.html",
"http://packetstormsecurity.com/files/155754/Slackware-Security-Advisory-openssl-Updates.html",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=419102400a2811582a7a3d4a4e317d72e5ce0a8f",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f1c5eea8a817075d31e43f5876993c6710238c98",
"https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/",
"https://seclists.org/bugtraq/2019/Dec/39",
"https://seclists.org/bugtraq/2019/Dec/46",
"https://security.gentoo.org/glsa/202004-10",
"https://security.netapp.com/advisory/ntap-20191210-0001/",
"https://usn.ubuntu.com/4376-1/",
"https://usn.ubuntu.com/4504-1/",
"https://www.debian.org/security/2019/dsa-4594",
"https://www.debian.org/security/2021/dsa-4855",
"https://www.openssl.org/news/secadv/20191206.txt",
"https://www.oracle.com/security-alerts/cpuApr2021.html",
"https://www.oracle.com/security-alerts/cpujan2021.html",
"https://www.oracle.com/security-alerts/cpujul2020.html",
"https://www.tenable.com/security/tns-2019-09",
"https://www.tenable.com/security/tns-2020-03",
"https://www.tenable.com/security/tns-2020-11",
"https://www.tenable.com/security/tns-2021-10"
],
"epss": 0.03874,
"cvss": 5.3
},
"CVE-2019-1559": {
"verified": false,
"ranking_epss": 0.90967,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00041.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00019.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00046.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00047.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00049.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00080.html",
"http://www.securityfocus.com/bid/107174",
"https://access.redhat.com/errata/RHSA-2019:2304",
"https://access.redhat.com/errata/RHSA-2019:2437",
"https://access.redhat.com/errata/RHSA-2019:2439",
"https://access.redhat.com/errata/RHSA-2019:2471",
"https://access.redhat.com/errata/RHSA-2019:3929",
"https://access.redhat.com/errata/RHSA-2019:3931",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e9bbefbf0f24c57645e7ad6a5a71ae649d18ac8e",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10282",
"https://lists.debian.org/debian-lts-announce/2019/03/msg00003.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/",
"https://security.gentoo.org/glsa/201903-10",
"https://security.netapp.com/advisory/ntap-20190301-0001/",
"https://security.netapp.com/advisory/ntap-20190301-0002/",
"https://security.netapp.com/advisory/ntap-20190423-0002/",
"https://support.f5.com/csp/article/K18549143",
"https://support.f5.com/csp/article/K18549143?utm_source=f5support&%3Butm_medium=RSS",
"https://usn.ubuntu.com/3899-1/",
"https://usn.ubuntu.com/4376-2/",
"https://www.debian.org/security/2019/dsa-4400",
"https://www.openssl.org/news/secadv/20190226.txt",
"https://www.oracle.com/security-alerts/cpujan2020.html",
"https://www.oracle.com/security-alerts/cpujan2021.html",
"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
"https://www.tenable.com/security/tns-2019-02",
"https://www.tenable.com/security/tns-2019-03",
"http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00041.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00019.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00046.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00047.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00049.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00080.html",
"http://www.securityfocus.com/bid/107174",
"https://access.redhat.com/errata/RHSA-2019:2304",
"https://access.redhat.com/errata/RHSA-2019:2437",
"https://access.redhat.com/errata/RHSA-2019:2439",
"https://access.redhat.com/errata/RHSA-2019:2471",
"https://access.redhat.com/errata/RHSA-2019:3929",
"https://access.redhat.com/errata/RHSA-2019:3931",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e9bbefbf0f24c57645e7ad6a5a71ae649d18ac8e",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10282",
"https://lists.debian.org/debian-lts-announce/2019/03/msg00003.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/",
"https://security.gentoo.org/glsa/201903-10",
"https://security.netapp.com/advisory/ntap-20190301-0001/",
"https://security.netapp.com/advisory/ntap-20190301-0002/",
"https://security.netapp.com/advisory/ntap-20190423-0002/",
"https://support.f5.com/csp/article/K18549143",
"https://support.f5.com/csp/article/K18549143?utm_source=f5support&%3Butm_medium=RSS",
"https://usn.ubuntu.com/3899-1/",
"https://usn.ubuntu.com/4376-2/",
"https://www.debian.org/security/2019/dsa-4400",
"https://www.openssl.org/news/secadv/20190226.txt",
"https://www.oracle.com/security-alerts/cpujan2020.html",
"https://www.oracle.com/security-alerts/cpujan2021.html",
"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
"https://www.tenable.com/security/tns-2019-02",
"https://www.tenable.com/security/tns-2019-03"
],
"epss": 0.06392,
"cvss": 5.9
},
"CVE-2018-1283": {
"verified": false,
"ranking_epss": 0.87256,
"cvss_v2": 3.5,
"cvss_version": 3,
"summary": "In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications (SessionEnv on, not the default), a remote user may influence their content by using a \"Session\" header. This comes from the \"HTTP_SESSION\" variable name used by mod_session to forward its data to CGIs, since the prefix \"HTTP_\" is also used by the Apache HTTP Server to pass HTTP header fields, per CGI specifications.",
"references": [
"http://www.openwall.com/lists/oss-security/2018/03/24/4",
"http://www.securityfocus.com/bid/103520",
"http://www.securitytracker.com/id/1040568",
"https://access.redhat.com/errata/RHSA-2018:3558",
"https://access.redhat.com/errata/RHSA-2019:0366",
"https://access.redhat.com/errata/RHSA-2019:0367",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
"https://security.netapp.com/advisory/ntap-20180601-0004/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",
"https://usn.ubuntu.com/3627-1/",
"https://usn.ubuntu.com/3627-2/",
"https://www.debian.org/security/2018/dsa-4164",
"https://www.tenable.com/security/tns-2019-09",
"http://www.openwall.com/lists/oss-security/2018/03/24/4",
"http://www.securityfocus.com/bid/103520",
"http://www.securitytracker.com/id/1040568",
"https://access.redhat.com/errata/RHSA-2018:3558",
"https://access.redhat.com/errata/RHSA-2019:0366",
"https://access.redhat.com/errata/RHSA-2019:0367",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
"https://security.netapp.com/advisory/ntap-20180601-0004/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",
"https://usn.ubuntu.com/3627-1/",
"https://usn.ubuntu.com/3627-2/",
"https://www.debian.org/security/2018/dsa-4164",
"https://www.tenable.com/security/tns-2019-09"
],
"epss": 0.03348,
"cvss": 5.3
},
"CVE-2021-39275": {
"verified": false,
"ranking_epss": 0.9717,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.",
"references": [
"https://cert-portal.siemens.com/productcert/pdf/ssa-685781.pdf",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/r3925e167d5eb1c75def3750c155d753064e1d34a143028bb32910432%40%3Cusers.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r61fdbfc26ab170f4e6492ef3bd5197c20b862ce156e9d5a54d4b899c%40%3Cusers.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r82838efc5fa6fc4c73986399c9b71573589f78b31846aff5bd9b1697%40%3Cusers.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r82c077663f9759c7df5a6656f925b3ee4f55fcd33c889ba7cd687029%40%3Cusers.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2021/10/msg00001.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20211008-0004/",
"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQ",
"https://www.debian.org/security/2021/dsa-4982",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujan2022.html",
"https://cert-portal.siemens.com/productcert/pdf/ssa-685781.pdf",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/r3925e167d5eb1c75def3750c155d753064e1d34a143028bb32910432%40%3Cusers.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r61fdbfc26ab170f4e6492ef3bd5197c20b862ce156e9d5a54d4b899c%40%3Cusers.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r82838efc5fa6fc4c73986399c9b71573589f78b31846aff5bd9b1697%40%3Cusers.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r82c077663f9759c7df5a6656f925b3ee4f55fcd33c889ba7cd687029%40%3Cusers.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2021/10/msg00001.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20211008-0004/",
"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQ",
"https://www.debian.org/security/2021/dsa-4982",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujan2022.html"
],
"epss": 0.37674,
"cvss": 9.8
},
"CVE-2014-5459": {
"verified": false,
"ranking_epss": 0.22901,
"cvss_v2": 3.6,
"cvss_version": 2,
"summary": "The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a (1) rest.cachefile or (2) rest.cacheid file in /tmp/pear/cache/, related to the retrieveCacheFirst and useLocalCache functions.",
"references": [
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00024.html",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00055.html",
"http://www.openwall.com/lists/oss-security/2014/08/27/3",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759282",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00024.html",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00055.html",
"http://www.openwall.com/lists/oss-security/2014/08/27/3",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759282"
],
"epss": 0.00077,
"cvss": 3.6
},
"CVE-2014-0118": {
"verified": false,
"ranking_epss": 0.97372,
"cvss_v2": 4.3,
"cvss_version": 2,
"summary": "The deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP Server before 2.4.10, when request body decompression is enabled, allows remote attackers to cause a denial of service (resource consumption) via crafted request data that decompresses to a much larger size.",
"references": [
"http://advisories.mageia.org/MGASA-2014-0304.html",
"http://advisories.mageia.org/MGASA-2014-0305.html",
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://marc.info/?l=bugtraq&m=144493176821532&w=2",
"http://rhn.redhat.com/errata/RHSA-2014-1019.html",
"http://rhn.redhat.com/errata/RHSA-2014-1020.html",
"http://rhn.redhat.com/errata/RHSA-2014-1021.html",
"http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/filters/mod_deflate.c",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/filters/mod_deflate.c?r1=1604353&r2=1610501&diff_format=h",
"http://www.debian.org/security/2014/dsa-2989",
"http://www.mandriva.com/security/advisories?name=MDVSA-2014:142",
"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
"http://www.securityfocus.com/bid/68745",
"https://bugzilla.redhat.com/show_bug.cgi?id=1120601",
"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://puppet.com/security/cve/cve-2014-0118",
"https://security.gentoo.org/glsa/201504-03",
"https://support.apple.com/HT204659",
"http://advisories.mageia.org/MGASA-2014-0304.html",
"http://advisories.mageia.org/MGASA-2014-0305.html",
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://marc.info/?l=bugtraq&m=144493176821532&w=2",
"http://rhn.redhat.com/errata/RHSA-2014-1019.html",
"http://rhn.redhat.com/errata/RHSA-2014-1020.html",
"http://rhn.redhat.com/errata/RHSA-2014-1021.html",
"http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/filters/mod_deflate.c",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/filters/mod_deflate.c?r1=1604353&r2=1610501&diff_format=h",
"http://www.debian.org/security/2014/dsa-2989",
"http://www.mandriva.com/security/advisories?name=MDVSA-2014:142",
"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
"http://www.securityfocus.com/bid/68745",
"https://bugzilla.redhat.com/show_bug.cgi?id=1120601",
"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://puppet.com/security/cve/cve-2014-0118",
"https://security.gentoo.org/glsa/201504-03",
"https://support.apple.com/HT204659"
],
"epss": 0.41327,
"cvss": 4.3
},
"CVE-2015-8874": {
"verified": false,
"ranking_epss": 0.87988,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "Stack consumption vulnerability in GD in PHP before 5.6.12 allows remote attackers to cause a denial of service via a crafted imagefilltoborder call.",
"references": [
"http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3587",
"http://www.ubuntu.com/usn/USN-2987-1",
"https://bugs.php.net/bug.php?id=66387",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3587",
"http://www.ubuntu.com/usn/USN-2987-1",
"https://bugs.php.net/bug.php?id=66387",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"
],
"epss": 0.03775,
"cvss": 7.5
},
"CVE-2014-0231": {
"verified": false,
"ranking_epss": 0.97521,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "The mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism, which allows remote attackers to cause a denial of service (process hang) via a request to a CGI script that does not read from its stdin file descriptor.",
"references": [
"http://advisories.mageia.org/MGASA-2014-0304.html",
"http://advisories.mageia.org/MGASA-2014-0305.html",
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://marc.info/?l=bugtraq&m=144493176821532&w=2",
"http://packetstormsecurity.com/files/130769/RSA-Digital-Certificate-Solution-XSS-Denial-Of-Service.html",
"http://rhn.redhat.com/errata/RHSA-2014-1019.html",
"http://rhn.redhat.com/errata/RHSA-2014-1020.html",
"http://rhn.redhat.com/errata/RHSA-2014-1021.html",
"http://secunia.com/advisories/60536",
"http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_cgid.c",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_cgid.c?r1=1482522&r2=1535125&diff_format=h",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_cgid.c?r1=1565711&r2=1610509&diff_format=h",
"http://www.debian.org/security/2014/dsa-2989",
"http://www.mandriva.com/security/advisories?name=MDVSA-2014:142",
"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
"http://www.securityfocus.com/bid/68742",
"https://bugzilla.redhat.com/show_bug.cgi?id=1120596",
"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://puppet.com/security/cve/cve-2014-0231",
"https://security.gentoo.org/glsa/201504-03",
"https://support.apple.com/HT204659",
"http://advisories.mageia.org/MGASA-2014-0304.html",
"http://advisories.mageia.org/MGASA-2014-0305.html",
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://marc.info/?l=bugtraq&m=144493176821532&w=2",
"http://packetstormsecurity.com/files/130769/RSA-Digital-Certificate-Solution-XSS-Denial-Of-Service.html",
"http://rhn.redhat.com/errata/RHSA-2014-1019.html",
"http://rhn.redhat.com/errata/RHSA-2014-1020.html",
"http://rhn.redhat.com/errata/RHSA-2014-1021.html",
"http://secunia.com/advisories/60536",
"http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_cgid.c",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_cgid.c?r1=1482522&r2=1535125&diff_format=h",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_cgid.c?r1=1565711&r2=1610509&diff_format=h",
"http://www.debian.org/security/2014/dsa-2989",
"http://www.mandriva.com/security/advisories?name=MDVSA-2014:142",
"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
"http://www.securityfocus.com/bid/68742",
"https://bugzilla.redhat.com/show_bug.cgi?id=1120596",
"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://puppet.com/security/cve/cve-2014-0231",
"https://security.gentoo.org/glsa/201504-03",
"https://support.apple.com/HT204659"
],
"epss": 0.44151,
"cvss": 5
},
"CVE-2018-20852": {
"verified": false,
"ranking_epss": 0.83536,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix (e.g., pythonicexample.com to steal cookies for example.com). When a program uses http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing cookies can be leaked to the attacker. This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before 3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00071.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00074.html",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"https://access.redhat.com/errata/RHSA-2019:3725",
"https://access.redhat.com/errata/RHSA-2019:3948",
"https://bugs.python.org/issue35121",
"https://lists.debian.org/debian-lts-announce/2019/08/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2019/08/msg00040.html",
"https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html",
"https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/COATURTCY7G67AYI6UDV5B2JZTBCKIDX/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K7HNVIFMETMFWWWUNTB72KYJYXCZOS5V/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBTGPBUABGXZ7WH7677OEM3NSP6ZEA76/",
"https://python-security.readthedocs.io/vuln/cookie-domain-check.html",
"https://security.gentoo.org/glsa/202003-26",
"https://usn.ubuntu.com/4127-1/",
"https://usn.ubuntu.com/4127-2/",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00071.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00074.html",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"https://access.redhat.com/errata/RHSA-2019:3725",
"https://access.redhat.com/errata/RHSA-2019:3948",
"https://bugs.python.org/issue35121",
"https://lists.debian.org/debian-lts-announce/2019/08/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2019/08/msg00040.html",
"https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html",
"https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/COATURTCY7G67AYI6UDV5B2JZTBCKIDX/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K7HNVIFMETMFWWWUNTB72KYJYXCZOS5V/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBTGPBUABGXZ7WH7677OEM3NSP6ZEA76/",
"https://python-security.readthedocs.io/vuln/cookie-domain-check.html",
"https://security.gentoo.org/glsa/202003-26",
"https://usn.ubuntu.com/4127-1/",
"https://usn.ubuntu.com/4127-2/",
"https://www.oracle.com/security-alerts/cpuapr2020.html"
],
"epss": 0.01989,
"cvss": 5.3
},
"CVE-2015-1283": {
"verified": false,
"ranking_epss": 0.66769,
"cvss_v2": 6.8,
"cvss_version": 2,
"summary": "Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related issue to CVE-2015-2716.",
"references": [
"http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.html",
"http://rhn.redhat.com/errata/RHSA-2015-1499.html",
"http://www.debian.org/security/2015/dsa-3315",
"http://www.debian.org/security/2015/dsa-3318",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html",
"http://www.securityfocus.com/bid/75973",
"http://www.securitytracker.com/id/1033031",
"http://www.ubuntu.com/usn/USN-2726-1",
"https://code.google.com/p/chromium/issues/detail?id=492052",
"https://codereview.chromium.org/1224303003",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10365",
"https://security.gentoo.org/glsa/201603-09",
"https://security.gentoo.org/glsa/201701-21",
"https://source.android.com/security/bulletin/2016-11-01.html",
"https://www.tenable.com/security/tns-2016-20",
"http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.html",
"http://rhn.redhat.com/errata/RHSA-2015-1499.html",
"http://www.debian.org/security/2015/dsa-3315",
"http://www.debian.org/security/2015/dsa-3318",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html",
"http://www.securityfocus.com/bid/75973",
"http://www.securitytracker.com/id/1033031",
"http://www.ubuntu.com/usn/USN-2726-1",
"https://code.google.com/p/chromium/issues/detail?id=492052",
"https://codereview.chromium.org/1224303003",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10365",
"https://security.gentoo.org/glsa/201603-09",
"https://security.gentoo.org/glsa/201701-21",
"https://source.android.com/security/bulletin/2016-11-01.html",
"https://www.tenable.com/security/tns-2016-20"
],
"epss": 0.00521,
"cvss": 6.8
},
"CVE-2009-3720": {
"verified": false,
"ranking_epss": 0.813,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.",
"references": [
"http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmltok_impl.c?r1=1.13&r2=1.15&view=patch",
"http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmltok_impl.c?view=log",
"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051228.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051247.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051367.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051405.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051442.html",
"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html",
"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html",
"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html",
"http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html",
"http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
"http://mail.python.org/pipermail/expat-bugs/2009-January/002781.html",
"http://marc.info/?l=bugtraq&m=130168502603566&w=2",
"http://secunia.com/advisories/37324",
"http://secunia.com/advisories/37537",
"http://secunia.com/advisories/37925",
"http://secunia.com/advisories/38050",
"http://secunia.com/advisories/38231",
"http://secunia.com/advisories/38794",
"http://secunia.com/advisories/38832",
"http://secunia.com/advisories/38834",
"http://secunia.com/advisories/39478",
"http://secunia.com/advisories/41701",
"http://secunia.com/advisories/42326",
"http://secunia.com/advisories/42338",
"http://secunia.com/advisories/43300",
"http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.486026",
"http://sourceforge.net/tracker/index.php?func=detail&aid=1990430&group_id=10127&atid=110127",
"http://sunsolve.sun.com/search/document.do?assetkey=1-66-273630-1",
"http://svn.python.org/view?view=rev&revision=74429",
"http://www.mandriva.com/security/advisories?name=MDVSA-2009:211",
"http://www.mandriva.com/security/advisories?name=MDVSA-2009:212",
"http://www.mandriva.com/security/advisories?name=MDVSA-2009:215",
"http://www.mandriva.com/security/advisories?name=MDVSA-2009:216",
"http://www.mandriva.com/security/advisories?name=MDVSA-2009:217",
"http://www.mandriva.com/security/advisories?name=MDVSA-2009:218",
"http://www.mandriva.com/security/advisories?name=MDVSA-2009:219",
"http://www.mandriva.com/security/advisories?name=MDVSA-2009:220",
"http://www.openwall.com/lists/oss-security/2009/08/21/2",
"http://www.openwall.com/lists/oss-security/2009/08/26/3",
"http://www.openwall.com/lists/oss-security/2009/08/26/4",
"http://www.openwall.com/lists/oss-security/2009/08/27/6",
"http://www.openwall.com/lists/oss-security/2009/09/06/1",
"http://www.openwall.com/lists/oss-security/2009/10/22/5",
"http://www.openwall.com/lists/oss-security/2009/10/22/9",
"http://www.openwall.com/lists/oss-security/2009/10/23/2",
"http://www.openwall.com/lists/oss-security/2009/10/23/6",
"http://www.openwall.com/lists/oss-security/2009/10/26/3",
"http://www.openwall.com/lists/oss-security/2009/10/28/3",
"http://www.redhat.com/support/errata/RHSA-2010-0002.html",
"http://www.redhat.com/support/errata/RHSA-2011-0896.html",
"http://www.securitytracker.com/id?1023160",
"http://www.ubuntu.com/usn/USN-890-1",
"http://www.ubuntu.com/usn/USN-890-6",
"http://www.vupen.com/english/advisories/2010/0528",
"http://www.vupen.com/english/advisories/2010/0896",
"http://www.vupen.com/english/advisories/2010/1107",
"http://www.vupen.com/english/advisories/2010/3035",
"http://www.vupen.com/english/advisories/2010/3053",
"http://www.vupen.com/english/advisories/2010/3061",
"http://www.vupen.com/english/advisories/2011/0359",
"https://bugs.gentoo.org/show_bug.cgi?id=280615",
"https://bugzilla.redhat.com/show_bug.cgi?id=531697",
"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11019",
"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12719",
"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7112",
"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00370.html",
"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00413.html",
"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01274.html",
"http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmltok_impl.c?r1=1.13&r2=1.15&view=patch",
"http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmltok_impl.c?view=log",
"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051228.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051247.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051367.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051405.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051442.html",
"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html",
"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html",
"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html",
"http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html",
"http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
"http://mail.python.org/pipermail/expat-bugs/2009-January/002781.html",
"http://marc.info/?l=bugtraq&m=130168502603566&w=2",
"http://secunia.com/advisories/37324",
"http://secunia.com/advisories/37537",
"http://secunia.com/advisories/37925",
"http://secunia.com/advisories/38050",
"http://secunia.com/advisories/38231",
"http://secunia.com/advisories/38794",
"http://secunia.com/advisories/38832",
"http://secunia.com/advisories/38834",
"http://secunia.com/advisories/39478",
"http://secunia.com/advisories/41701",
"http://secunia.com/advisories/42326",
"http://secunia.com/advisories/42338",
"http://secunia.com/advisories/43300",
"http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.486026",
"http://sourceforge.net/tracker/index.php?func=detail&aid=1990430&group_id=10127&atid=110127",
"http://sunsolve.sun.com/search/document.do?assetkey=1-66-273630-1",
"http://svn.python.org/view?view=rev&revision=74429",
"http://www.mandriva.com/security/advisories?name=MDVSA-2009:211",
"http://www.mandriva.com/security/advisories?name=MDVSA-2009:212",
"http://www.mandriva.com/security/advisories?name=MDVSA-2009:215",
"http://www.mandriva.com/security/advisories?name=MDVSA-2009:216",
"http://www.mandriva.com/security/advisories?name=MDVSA-2009:217",
"http://www.mandriva.com/security/advisories?name=MDVSA-2009:218",
"http://www.mandriva.com/security/advisories?name=MDVSA-2009:219",
"http://www.mandriva.com/security/advisories?name=MDVSA-2009:220",
"http://www.openwall.com/lists/oss-security/2009/08/21/2",
"http://www.openwall.com/lists/oss-security/2009/08/26/3",
"http://www.openwall.com/lists/oss-security/2009/08/26/4",
"http://www.openwall.com/lists/oss-security/2009/08/27/6",
"http://www.openwall.com/lists/oss-security/2009/09/06/1",
"http://www.openwall.com/lists/oss-security/2009/10/22/5",
"http://www.openwall.com/lists/oss-security/2009/10/22/9",
"http://www.openwall.com/lists/oss-security/2009/10/23/2",
"http://www.openwall.com/lists/oss-security/2009/10/23/6",
"http://www.openwall.com/lists/oss-security/2009/10/26/3",
"http://www.openwall.com/lists/oss-security/2009/10/28/3",
"http://www.redhat.com/support/errata/RHSA-2010-0002.html",
"http://www.redhat.com/support/errata/RHSA-2011-0896.html",
"http://www.securitytracker.com/id?1023160",
"http://www.ubuntu.com/usn/USN-890-1",
"http://www.ubuntu.com/usn/USN-890-6",
"http://www.vupen.com/english/advisories/2010/0528",
"http://www.vupen.com/english/advisories/2010/0896",
"http://www.vupen.com/english/advisories/2010/1107",
"http://www.vupen.com/english/advisories/2010/3035",
"http://www.vupen.com/english/advisories/2010/3053",
"http://www.vupen.com/english/advisories/2010/3061",
"http://www.vupen.com/english/advisories/2011/0359",
"https://bugs.gentoo.org/show_bug.cgi?id=280615",
"https://bugzilla.redhat.com/show_bug.cgi?id=531697",
"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11019",
"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12719",
"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7112",
"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00370.html",
"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00413.html",
"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01274.html"
],
"epss": 0.01541,
"cvss": 5
},
"CVE-2024-38476": {
"verified": false,
"ranking_epss": 0.87619,
"cvss_v2": null,
"cvss_version": 3,
"summary": "Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend applications whose response headers are malicious or exploitable.\n\nUsers are recommended to upgrade to version 2.4.60, which fixes this issue.",
"references": [
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://security.netapp.com/advisory/ntap-20240712-0001/",
"http://seclists.org/fulldisclosure/2024/Oct/11",
"http://www.openwall.com/lists/oss-security/2024/07/01/9",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://security.netapp.com/advisory/ntap-20240712-0001/"
],
"epss": 0.03545,
"cvss": 9.8
},
"CVE-2024-38477": {
"verified": false,
"ranking_epss": 0.80017,
"cvss_v2": null,
"cvss_version": 3,
"summary": "null pointer dereference in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server via a malicious request.\nUsers are recommended to upgrade to version 2.4.60, which fixes this issue.",
"references": [
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://security.netapp.com/advisory/ntap-20240712-0001/",
"http://seclists.org/fulldisclosure/2024/Oct/11",
"http://www.openwall.com/lists/oss-security/2024/07/01/10",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://security.netapp.com/advisory/ntap-20240712-0001/"
],
"epss": 0.01347,
"cvss": 7.5
},
"CVE-2014-2497": {
"verified": false,
"ranking_epss": 0.93775,
"cvss_v2": 4.3,
"cvss_version": 2,
"summary": "The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.",
"references": [
"http://advisories.mageia.org/MGASA-2014-0288.html",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00001.html",
"http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html",
"http://rhn.redhat.com/errata/RHSA-2014-1326.html",
"http://rhn.redhat.com/errata/RHSA-2014-1327.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/59061",
"http://secunia.com/advisories/59418",
"http://secunia.com/advisories/59496",
"http://secunia.com/advisories/59652",
"http://www.debian.org/security/2015/dsa-3215",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:153",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.securityfocus.com/bid/66233",
"http://www.ubuntu.com/usn/USN-2987-1",
"https://bugs.php.net/bug.php?id=66901",
"https://bugzilla.redhat.com/show_bug.cgi?id=1076676",
"https://security.gentoo.org/glsa/201607-04",
"https://support.apple.com/HT204659",
"http://advisories.mageia.org/MGASA-2014-0288.html",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00001.html",
"http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html",
"http://rhn.redhat.com/errata/RHSA-2014-1326.html",
"http://rhn.redhat.com/errata/RHSA-2014-1327.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/59061",
"http://secunia.com/advisories/59418",
"http://secunia.com/advisories/59496",
"http://secunia.com/advisories/59652",
"http://www.debian.org/security/2015/dsa-3215",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:153",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.securityfocus.com/bid/66233",
"http://www.ubuntu.com/usn/USN-2987-1",
"https://bugs.php.net/bug.php?id=66901",
"https://bugzilla.redhat.com/show_bug.cgi?id=1076676",
"https://security.gentoo.org/glsa/201607-04",
"https://support.apple.com/HT204659"
],
"epss": 0.12135,
"cvss": 4.3
},
"CVE-2024-38475": {
"verified": false,
"ransomware_campaign": "Unknown",
"ranking_epss": 0.99866,
"cvss_v2": null,
"cvss_version": 3,
"summary": "Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure. \n\nSubstitutions in server context that use a backreferences or variables as the first segment of the substitution are affected. Some unsafe RewiteRules will be broken by this change and the rewrite flag \"UnsafePrefixStat\" can be used to opt back in once ensuring the substitution is appropriately constrained.",
"references": [
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://security.netapp.com/advisory/ntap-20240712-0001/",
"http://www.openwall.com/lists/oss-security/2024/07/01/8",
"https://github.com/apache/httpd/commit/9a6157d1e2f7ab15963020381054b48782bc18cf",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018",
"https://security.netapp.com/advisory/ntap-20240712-0001/",
"https://www.blackhat.com/us-24/briefings/schedule/index.html#confusion-attacks-exploiting-hidden-semantic-ambiguity-in-apache-http-server-pre-recorded-40227",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38475"
],
"epss": 0.93858,
"kev": true,
"cvss": 9.1
},
"CVE-2014-0185": {
"verified": false,
"ranking_epss": 0.29155,
"cvss_v2": 7.2,
"cvss_version": 2,
"summary": "sapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x before 5.5.12 uses 0666 permissions for the UNIX socket, which allows local users to gain privileges via a crafted FastCGI client.",
"references": [
"http://lists.opensuse.org/opensuse-updates/2015-10/msg00012.html",
"http://secunia.com/advisories/59061",
"http://secunia.com/advisories/59329",
"http://support.apple.com/kb/HT6443",
"http://www.openwall.com/lists/oss-security/2014/04/29/5",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/archive/2014.php#id2014-05-01-1",
"https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1307027",
"https://bugs.php.net/bug.php?id=67060",
"https://bugzilla.redhat.com/show_bug.cgi?id=1092815",
"https://github.com/php/php-src/commit/35ceea928b12373a3b1e3eecdc32ed323223a40d",
"https://hoffmann-christian.info/files/php-fpm/0001-Fix-bug-67060-use-default-mode-of-660.patch",
"http://lists.opensuse.org/opensuse-updates/2015-10/msg00012.html",
"http://secunia.com/advisories/59061",
"http://secunia.com/advisories/59329",
"http://support.apple.com/kb/HT6443",
"http://www.openwall.com/lists/oss-security/2014/04/29/5",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/archive/2014.php#id2014-05-01-1",
"https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1307027",
"https://bugs.php.net/bug.php?id=67060",
"https://bugzilla.redhat.com/show_bug.cgi?id=1092815",
"https://github.com/php/php-src/commit/35ceea928b12373a3b1e3eecdc32ed323223a40d",
"https://hoffmann-christian.info/files/php-fpm/0001-Fix-bug-67060-use-default-mode-of-660.patch"
],
"epss": 0.00109,
"cvss": 7.2
},
"CVE-2024-38473": {
"verified": false,
"ranking_epss": 0.99486,
"cvss_v2": null,
"cvss_version": 3,
"summary": "Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests.\nUsers are recommended to upgrade to version 2.4.60, which fixes this issue.",
"references": [
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://security.netapp.com/advisory/ntap-20240712-0001/",
"http://www.openwall.com/lists/oss-security/2024/07/01/6",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://security.netapp.com/advisory/ntap-20240712-0001/"
],
"epss": 0.88261,
"cvss": 8.1
},
"CVE-2019-9740": {
"verified": false,
"ranking_epss": 0.92979,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \\r\\n (specifically in the query string after a ? character) followed by an HTTP header or a Redis command. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00039.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00041.html",
"http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html",
"http://www.openwall.com/lists/oss-security/2021/02/04/2",
"http://www.securityfocus.com/bid/107466",
"https://access.redhat.com/errata/RHSA-2019:1260",
"https://access.redhat.com/errata/RHSA-2019:2030",
"https://access.redhat.com/errata/RHSA-2019:3335",
"https://access.redhat.com/errata/RHSA-2019:3520",
"https://access.redhat.com/errata/RHSA-2019:3725",
"https://bugs.python.org/issue36276",
"https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2019/06/msg00023.html",
"https://lists.debian.org/debian-lts-announce/2019/06/msg00026.html",
"https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html",
"https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ORNTF62QPLMJXIQ7KTZQ2776LMIXEKL/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/44TS66GJMO5H3RLMVZEBGEFTB6O2LJJU/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMWSKTNOHSUOT3L25QFJAVCFYZX46FYK/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXASHCDD4PQFKTMKQN4YOP5ZH366ABN4/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/",
"https://seclists.org/bugtraq/2019/Oct/29",
"https://security.gentoo.org/glsa/202003-26",
"https://security.netapp.com/advisory/ntap-20190619-0005/",
"https://usn.ubuntu.com/4127-1/",
"https://usn.ubuntu.com/4127-2/",
"https://www.oracle.com/security-alerts/cpujul2022.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00039.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00041.html",
"http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html",
"http://www.openwall.com/lists/oss-security/2021/02/04/2",
"http://www.securityfocus.com/bid/107466",
"https://access.redhat.com/errata/RHSA-2019:1260",
"https://access.redhat.com/errata/RHSA-2019:2030",
"https://access.redhat.com/errata/RHSA-2019:3335",
"https://access.redhat.com/errata/RHSA-2019:3520",
"https://access.redhat.com/errata/RHSA-2019:3725",
"https://bugs.python.org/issue36276",
"https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2019/06/msg00023.html",
"https://lists.debian.org/debian-lts-announce/2019/06/msg00026.html",
"https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html",
"https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ORNTF62QPLMJXIQ7KTZQ2776LMIXEKL/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/44TS66GJMO5H3RLMVZEBGEFTB6O2LJJU/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMWSKTNOHSUOT3L25QFJAVCFYZX46FYK/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXASHCDD4PQFKTMKQN4YOP5ZH366ABN4/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/",
"https://seclists.org/bugtraq/2019/Oct/29",
"https://security.gentoo.org/glsa/202003-26",
"https://security.netapp.com/advisory/ntap-20190619-0005/",
"https://usn.ubuntu.com/4127-1/",
"https://usn.ubuntu.com/4127-2/",
"https://www.oracle.com/security-alerts/cpujul2022.html"
],
"epss": 0.0991,
"cvss": 6.1
},
"CVE-2016-8670": {
"verified": false,
"ranking_epss": 0.81981,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "Integer signedness error in the dynamicGetbuf function in gd_io_dp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted imagecreatefromstring call.",
"references": [
"http://www.debian.org/security/2016/dsa-3693",
"http://www.openwall.com/lists/oss-security/2016/10/15/1",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/93594",
"https://bugs.php.net/bug.php?id=73280",
"https://github.com/libgd/libgd/commit/53110871935244816bbb9d131da0bccff734bfe9",
"https://support.f5.com/csp/article/K21336065?utm_source=f5support&%3Butm_medium=RSS",
"http://www.debian.org/security/2016/dsa-3693",
"http://www.openwall.com/lists/oss-security/2016/10/15/1",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/93594",
"https://bugs.php.net/bug.php?id=73280",
"https://github.com/libgd/libgd/commit/53110871935244816bbb9d131da0bccff734bfe9",
"https://support.f5.com/csp/article/K21336065?utm_source=f5support&%3Butm_medium=RSS"
],
"epss": 0.01659,
"cvss": 9.8
},
"CVE-2020-1927": {
"verified": false,
"ranking_epss": 0.93494,
"cvss_v2": 5.8,
"cvss_version": 3,
"summary": "In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00002.html",
"http://www.openwall.com/lists/oss-security/2020/04/03/1",
"http://www.openwall.com/lists/oss-security/2020/04/04/1",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r09bb998baee74a2c316446bd1a41ae7f8d7049d09d9ff991471e8775%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r10b853ea87dd150b0e76fda3f8254dfdb23dd05fa55596405b58478e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r1719675306dfbeaceff3dc63ccad3de2d5615919ca3c13276948b9ac%40%3Cdev.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r3c5c3104813c1c5508b55564b66546933079250a46ce50eee90b2e36%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r52a52fd60a258f5999a8fa5424b30d9fd795885f9ff4828d889cd201%40%3Cdev.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r6a4146bf3d1645af2880f8b7a4fd8afd696d5fd4a3ae272f49f5dc84%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r70ba652b79ba224b2cbc0a183078b3a49df783b419903e3dcf4d78c7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r731d43caece41d78d8c6304641a02a369fd78300e7ffaf566b06bc59%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdf3e5d0a5f5c3d90d6013bccc6c4d5af59cf1f8c8dea5d9a283d13ce%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2021/07/msg00006.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A2RN46PRBJE7E7OPD4YZX5SVWV5QKGV5/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYVYE2ZERFXDV6RMKK3I5SDSDQLPSEIQ/",
"https://security.netapp.com/advisory/ntap-20200413-0002/",
"https://usn.ubuntu.com/4458-1/",
"https://www.debian.org/security/2020/dsa-4757",
"https://www.oracle.com/security-alerts/cpuApr2021.html",
"https://www.oracle.com/security-alerts/cpujul2020.html",
"https://www.oracle.com/security-alerts/cpujul2022.html",
"http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00002.html",
"http://www.openwall.com/lists/oss-security/2020/04/03/1",
"http://www.openwall.com/lists/oss-security/2020/04/04/1",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r09bb998baee74a2c316446bd1a41ae7f8d7049d09d9ff991471e8775%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r10b853ea87dd150b0e76fda3f8254dfdb23dd05fa55596405b58478e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r1719675306dfbeaceff3dc63ccad3de2d5615919ca3c13276948b9ac%40%3Cdev.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r3c5c3104813c1c5508b55564b66546933079250a46ce50eee90b2e36%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r52a52fd60a258f5999a8fa5424b30d9fd795885f9ff4828d889cd201%40%3Cdev.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r6a4146bf3d1645af2880f8b7a4fd8afd696d5fd4a3ae272f49f5dc84%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r70ba652b79ba224b2cbc0a183078b3a49df783b419903e3dcf4d78c7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r731d43caece41d78d8c6304641a02a369fd78300e7ffaf566b06bc59%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdf3e5d0a5f5c3d90d6013bccc6c4d5af59cf1f8c8dea5d9a283d13ce%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2021/07/msg00006.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A2RN46PRBJE7E7OPD4YZX5SVWV5QKGV5/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYVYE2ZERFXDV6RMKK3I5SDSDQLPSEIQ/",
"https://security.netapp.com/advisory/ntap-20200413-0002/",
"https://usn.ubuntu.com/4458-1/",
"https://www.debian.org/security/2020/dsa-4757",
"https://www.oracle.com/security-alerts/cpuApr2021.html",
"https://www.oracle.com/security-alerts/cpujul2020.html",
"https://www.oracle.com/security-alerts/cpujul2022.html"
],
"epss": 0.11302,
"cvss": 6.1
},
"CVE-2023-0286": {
"verified": false,
"ranking_epss": 0.99495,
"cvss_v2": null,
"cvss_version": 3,
"summary": "There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.",
"references": [
"https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt",
"https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d",
"https://security.gentoo.org/glsa/202402-08",
"https://www.openssl.org/news/secadv/20230207.txt",
"https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt",
"https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d",
"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003",
"https://security.gentoo.org/glsa/202402-08",
"https://www.openssl.org/news/secadv/20230207.txt"
],
"epss": 0.88474,
"cvss": 7.4
},
"CVE-2023-3817": {
"verified": false,
"ranking_epss": 0.54899,
"cvss_v2": null,
"cvss_version": 3,
"summary": "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the \"-check\" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
"references": [
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5",
"https://www.openssl.org/news/secadv/20230731.txt",
"http://seclists.org/fulldisclosure/2023/Jul/43",
"http://www.openwall.com/lists/oss-security/2023/07/31/1",
"http://www.openwall.com/lists/oss-security/2023/09/22/11",
"http://www.openwall.com/lists/oss-security/2023/09/22/9",
"http://www.openwall.com/lists/oss-security/2023/11/06/2",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5",
"https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html",
"https://security.gentoo.org/glsa/202402-08",
"https://security.netapp.com/advisory/ntap-20230818-0014/",
"https://security.netapp.com/advisory/ntap-20231027-0008/",
"https://security.netapp.com/advisory/ntap-20240621-0006/",
"https://www.openssl.org/news/secadv/20230731.txt"
],
"epss": 0.0032,
"cvss": 5.3
},
"CVE-2016-2183": {
"verified": false,
"ranking_epss": 0.97356,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a \"Sweet32\" attack.",
"references": [
"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759",
"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html",
"http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html",
"http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html",
"http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html",
"http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html",
"http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html",
"http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html",
"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html",
"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html",
"http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html",
"http://packetstormsecurity.com/files/142756/IBM-Informix-Dynamic-Server-DLL-Injection-Code-Execution.html",
"http://rhn.redhat.com/errata/RHSA-2017-0336.html",
"http://rhn.redhat.com/errata/RHSA-2017-0337.html",
"http://rhn.redhat.com/errata/RHSA-2017-0338.html",
"http://rhn.redhat.com/errata/RHSA-2017-0462.html",
"http://seclists.org/fulldisclosure/2017/Jul/31",
"http://seclists.org/fulldisclosure/2017/May/105",
"http://seclists.org/fulldisclosure/2017/May/105",
"http://www-01.ibm.com/support/docview.wss?uid=nas8N1021697",
"http://www-01.ibm.com/support/docview.wss?uid=swg21991482",
"http://www-01.ibm.com/support/docview.wss?uid=swg21995039",
"http://www.debian.org/security/2016/dsa-3673",
"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en",
"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html",
"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html",
"http://www.securityfocus.com/archive/1/539885/100/0/threaded",
"http://www.securityfocus.com/archive/1/540341/100/0/threaded",
"http://www.securityfocus.com/archive/1/541104/100/0/threaded",
"http://www.securityfocus.com/archive/1/542005/100/0/threaded",
"http://www.securityfocus.com/archive/1/archive/1/539885/100/0/threaded",
"http://www.securityfocus.com/archive/1/archive/1/540129/100/0/threaded",
"http://www.securityfocus.com/archive/1/archive/1/540341/100/0/threaded",
"http://www.securityfocus.com/archive/1/archive/1/541104/100/0/threaded",
"http://www.securityfocus.com/archive/1/archive/1/542005/100/0/threaded",
"http://www.securityfocus.com/bid/92630",
"http://www.securityfocus.com/bid/95568",
"http://www.securitytracker.com/id/1036696",
"http://www.splunk.com/view/SP-CAAAPSV",
"http://www.splunk.com/view/SP-CAAAPUE",
"http://www.ubuntu.com/usn/USN-3087-1",
"http://www.ubuntu.com/usn/USN-3087-2",
"http://www.ubuntu.com/usn/USN-3179-1",
"http://www.ubuntu.com/usn/USN-3194-1",
"http://www.ubuntu.com/usn/USN-3198-1",
"http://www.ubuntu.com/usn/USN-3270-1",
"http://www.ubuntu.com/usn/USN-3372-1",
"https://access.redhat.com/articles/2548661",
"https://access.redhat.com/errata/RHSA-2017:1216",
"https://access.redhat.com/errata/RHSA-2017:2708",
"https://access.redhat.com/errata/RHSA-2017:2709",
"https://access.redhat.com/errata/RHSA-2017:2710",
"https://access.redhat.com/errata/RHSA-2017:3113",
"https://access.redhat.com/errata/RHSA-2017:3114",
"https://access.redhat.com/errata/RHSA-2017:3239",
"https://access.redhat.com/errata/RHSA-2017:3240",
"https://access.redhat.com/errata/RHSA-2018:2123",
"https://access.redhat.com/errata/RHSA-2019:1245",
"https://access.redhat.com/errata/RHSA-2019:2859",
"https://access.redhat.com/errata/RHSA-2020:0451",
"https://access.redhat.com/security/cve/cve-2016-2183",
"https://blog.cryptographyengineering.com/2016/08/24/attack-of-week-64-bit-ciphers-in-tls/",
"https://bto.bluecoat.com/security-advisory/sa133",
"https://bugzilla.redhat.com/show_bug.cgi?id=1369383",
"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf",
"https://github.com/ssllabs/ssllabs-scan/issues/387#issuecomment-242514633",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369403",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369415",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05385680",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390722",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390849",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03765en_us",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05309984",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05323116",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05349499",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369403",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369415",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390849",
"https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10171",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10186",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10197",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10215",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10310",
"https://nakedsecurity.sophos.com/2016/08/25/anatomy-of-a-cryptographic-collision-the-sweet32-attack/",
"https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/",
"https://seclists.org/bugtraq/2018/Nov/21",
"https://security.gentoo.org/glsa/201612-16",
"https://security.gentoo.org/glsa/201701-65",
"https://security.gentoo.org/glsa/201707-01",
"https://security.netapp.com/advisory/ntap-20160915-0001/",
"https://security.netapp.com/advisory/ntap-20170119-0001/",
"https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158613",
"https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286178",
"https://support.f5.com/csp/article/K13167034",
"https://sweet32.info/",
"https://wiki.opendaylight.org/view/Security_Advisories",
"https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24",
"https://www.exploit-db.com/exploits/42091/",
"https://www.ietf.org/mail-archive/web/tls/current/msg04560.html",
"https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008",
"https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2016/august/new-practical-attacks-on-64-bit-block-ciphers-3des-blowfish/",
"https://www.openssl.org/blog/blog/2016/08/24/sweet32/",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/security-alerts/cpujan2020.html",
"https://www.oracle.com/security-alerts/cpujul2020.html",
"https://www.oracle.com/security-alerts/cpuoct2020.html",
"https://www.oracle.com/security-alerts/cpuoct2021.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.sigsac.org/ccs/CCS2016/accepted-papers/",
"https://www.tenable.com/security/tns-2016-16",
"https://www.tenable.com/security/tns-2016-20",
"https://www.tenable.com/security/tns-2016-21",
"https://www.tenable.com/security/tns-2017-09",
"https://www.teskalabs.com/blog/teskalabs-bulletin-160826-seacat-sweet32-issue",
"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759",
"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html",
"http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html",
"http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html",
"http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html",
"http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html",
"http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html",
"http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html",
"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html",
"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html",
"http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html",
"http://packetstormsecurity.com/files/142756/IBM-Informix-Dynamic-Server-DLL-Injection-Code-Execution.html",
"http://rhn.redhat.com/errata/RHSA-2017-0336.html",
"http://rhn.redhat.com/errata/RHSA-2017-0337.html",
"http://rhn.redhat.com/errata/RHSA-2017-0338.html",
"http://rhn.redhat.com/errata/RHSA-2017-0462.html",
"http://seclists.org/fulldisclosure/2017/Jul/31",
"http://seclists.org/fulldisclosure/2017/May/105",
"http://seclists.org/fulldisclosure/2017/May/105",
"http://www-01.ibm.com/support/docview.wss?uid=nas8N1021697",
"http://www-01.ibm.com/support/docview.wss?uid=swg21991482",
"http://www-01.ibm.com/support/docview.wss?uid=swg21995039",
"http://www.debian.org/security/2016/dsa-3673",
"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en",
"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html",
"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html",
"http://www.securityfocus.com/archive/1/539885/100/0/threaded",
"http://www.securityfocus.com/archive/1/540341/100/0/threaded",
"http://www.securityfocus.com/archive/1/541104/100/0/threaded",
"http://www.securityfocus.com/archive/1/542005/100/0/threaded",
"http://www.securityfocus.com/archive/1/archive/1/539885/100/0/threaded",
"http://www.securityfocus.com/archive/1/archive/1/540129/100/0/threaded",
"http://www.securityfocus.com/archive/1/archive/1/540341/100/0/threaded",
"http://www.securityfocus.com/archive/1/archive/1/541104/100/0/threaded",
"http://www.securityfocus.com/archive/1/archive/1/542005/100/0/threaded",
"http://www.securityfocus.com/bid/92630",
"http://www.securityfocus.com/bid/95568",
"http://www.securitytracker.com/id/1036696",
"http://www.splunk.com/view/SP-CAAAPSV",
"http://www.splunk.com/view/SP-CAAAPUE",
"http://www.ubuntu.com/usn/USN-3087-1",
"http://www.ubuntu.com/usn/USN-3087-2",
"http://www.ubuntu.com/usn/USN-3179-1",
"http://www.ubuntu.com/usn/USN-3194-1",
"http://www.ubuntu.com/usn/USN-3198-1",
"http://www.ubuntu.com/usn/USN-3270-1",
"http://www.ubuntu.com/usn/USN-3372-1",
"https://access.redhat.com/articles/2548661",
"https://access.redhat.com/errata/RHSA-2017:1216",
"https://access.redhat.com/errata/RHSA-2017:2708",
"https://access.redhat.com/errata/RHSA-2017:2709",
"https://access.redhat.com/errata/RHSA-2017:2710",
"https://access.redhat.com/errata/RHSA-2017:3113",
"https://access.redhat.com/errata/RHSA-2017:3114",
"https://access.redhat.com/errata/RHSA-2017:3239",
"https://access.redhat.com/errata/RHSA-2017:3240",
"https://access.redhat.com/errata/RHSA-2018:2123",
"https://access.redhat.com/errata/RHSA-2019:1245",
"https://access.redhat.com/errata/RHSA-2019:2859",
"https://access.redhat.com/errata/RHSA-2020:0451",
"https://access.redhat.com/security/cve/cve-2016-2183",
"https://blog.cryptographyengineering.com/2016/08/24/attack-of-week-64-bit-ciphers-in-tls/",
"https://bto.bluecoat.com/security-advisory/sa133",
"https://bugzilla.redhat.com/show_bug.cgi?id=1369383",
"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf",
"https://github.com/ssllabs/ssllabs-scan/issues/387#issuecomment-242514633",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369403",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369415",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05385680",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390722",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390849",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03765en_us",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05309984",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05323116",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05349499",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369403",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369415",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390849",
"https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10171",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10186",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10197",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10215",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10310",
"https://nakedsecurity.sophos.com/2016/08/25/anatomy-of-a-cryptographic-collision-the-sweet32-attack/",
"https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/",
"https://seclists.org/bugtraq/2018/Nov/21",
"https://security.gentoo.org/glsa/201612-16",
"https://security.gentoo.org/glsa/201701-65",
"https://security.gentoo.org/glsa/201707-01",
"https://security.netapp.com/advisory/ntap-20160915-0001/",
"https://security.netapp.com/advisory/ntap-20170119-0001/",
"https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158613",
"https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286178",
"https://support.f5.com/csp/article/K13167034",
"https://sweet32.info/",
"https://wiki.opendaylight.org/view/Security_Advisories",
"https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24",
"https://www.exploit-db.com/exploits/42091/",
"https://www.ietf.org/mail-archive/web/tls/current/msg04560.html",
"https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008",
"https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2016/august/new-practical-attacks-on-64-bit-block-ciphers-3des-blowfish/",
"https://www.openssl.org/blog/blog/2016/08/24/sweet32/",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/security-alerts/cpujan2020.html",
"https://www.oracle.com/security-alerts/cpujul2020.html",
"https://www.oracle.com/security-alerts/cpuoct2020.html",
"https://www.oracle.com/security-alerts/cpuoct2021.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.sigsac.org/ccs/CCS2016/accepted-papers/",
"https://www.tenable.com/security/tns-2016-16",
"https://www.tenable.com/security/tns-2016-20",
"https://www.tenable.com/security/tns-2016-21",
"https://www.tenable.com/security/tns-2017-09",
"https://www.teskalabs.com/blog/teskalabs-bulletin-160826-seacat-sweet32-issue",
"https://www.vicarius.io/vsociety/posts/cve-2016-2183-detection-sweet32-vulnerability",
"https://www.vicarius.io/vsociety/posts/cve-2016-2183-mitigate-sweet32-vulnerability"
],
"epss": 0.40993,
"cvss": 7.5
},
"CVE-2019-10160": {
"verified": false,
"ranking_epss": 0.79704,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4 through v3.8.0b1, which still allows an attacker to exploit CVE-2019-9636 by abusing the user and password parts of a URL. When an application parses user-supplied URLs to store cookies, authentication credentials, or other kind of information, it is possible for an attacker to provide specially crafted URLs to make the application locate host-related information (e.g. cookies, authentication data) and send them to a different host than where it should, unlike if the URLs had been correctly parsed. The result of an attack may vary based on the application.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00042.html",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"https://access.redhat.com/errata/RHSA-2019:1587",
"https://access.redhat.com/errata/RHSA-2019:1700",
"https://access.redhat.com/errata/RHSA-2019:2437",
"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10160",
"https://github.com/python/cpython/commit/250b62acc59921d399f0db47db3b462cd6037e09",
"https://github.com/python/cpython/commit/8d0ef0b5edeae52960c7ed05ae8a12388324f87e",
"https://github.com/python/cpython/commit/f61599b050c621386a3fc6bc480359e2d3bb93de",
"https://github.com/python/cpython/commit/fd1771dbdd28709716bd531580c40ae5ed814468",
"https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html",
"https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ORNTF62QPLMJXIQ7KTZQ2776LMIXEKL/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/44TS66GJMO5H3RLMVZEBGEFTB6O2LJJU/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E2HP37NUVLQSBW3J735A2DQDOZ4ZGBLY/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ER6LONC2B2WYIO56GBQUDU6QTWZDPUNQ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQEQLXLOCR3SNM3AA5RRYJFQ5AZBYJ4L/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KRYFIMISZ47NTAU3XWZUOFB7CYL62KES/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NF3DRDGMVIRYNZMSLJIHNW47HOUQYXVG/",
"https://python-security.readthedocs.io/vuln/urlsplit-nfkc-normalization2.html",
"https://security.netapp.com/advisory/ntap-20190617-0003/",
"https://usn.ubuntu.com/4127-1/",
"https://usn.ubuntu.com/4127-2/",
"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00042.html",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"https://access.redhat.com/errata/RHSA-2019:1587",
"https://access.redhat.com/errata/RHSA-2019:1700",
"https://access.redhat.com/errata/RHSA-2019:2437",
"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10160",
"https://github.com/python/cpython/commit/250b62acc59921d399f0db47db3b462cd6037e09",
"https://github.com/python/cpython/commit/8d0ef0b5edeae52960c7ed05ae8a12388324f87e",
"https://github.com/python/cpython/commit/f61599b050c621386a3fc6bc480359e2d3bb93de",
"https://github.com/python/cpython/commit/fd1771dbdd28709716bd531580c40ae5ed814468",
"https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html",
"https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ORNTF62QPLMJXIQ7KTZQ2776LMIXEKL/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/44TS66GJMO5H3RLMVZEBGEFTB6O2LJJU/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E2HP37NUVLQSBW3J735A2DQDOZ4ZGBLY/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ER6LONC2B2WYIO56GBQUDU6QTWZDPUNQ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQEQLXLOCR3SNM3AA5RRYJFQ5AZBYJ4L/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KRYFIMISZ47NTAU3XWZUOFB7CYL62KES/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NF3DRDGMVIRYNZMSLJIHNW47HOUQYXVG/",
"https://python-security.readthedocs.io/vuln/urlsplit-nfkc-normalization2.html",
"https://security.netapp.com/advisory/ntap-20190617-0003/",
"https://usn.ubuntu.com/4127-1/",
"https://usn.ubuntu.com/4127-2/"
],
"epss": 0.01305,
"cvss": 9.8
},
"CVE-2024-7592": {
"verified": false,
"ranking_epss": 0.73912,
"cvss_v2": null,
"cvss_version": 3,
"summary": "There is a LOW severity vulnerability affecting CPython, specifically the\n'http.cookies' standard library module.\n\n\nWhen parsing cookies that contained backslashes for quoted characters in\nthe cookie value, the parser would use an algorithm with quadratic\ncomplexity, resulting in excess CPU resources being used while parsing the\nvalue.",
"references": [
"https://github.com/python/cpython/commit/391e5626e3ee5af267b97e37abc7475732e67621",
"https://github.com/python/cpython/commit/44e458357fca05ca0ae2658d62c8c595b048b5ef",
"https://github.com/python/cpython/commit/a77ab24427a18bff817025adb03ca920dc3f1a06",
"https://github.com/python/cpython/commit/b2f11ca7667e4d57c71c1c88b255115f16042d9a",
"https://github.com/python/cpython/commit/d4ac921a4b081f7f996a5d2b101684b67ba0ed7f",
"https://github.com/python/cpython/commit/d662e2db2605515a767f88ad48096b8ac623c774",
"https://github.com/python/cpython/commit/dcc3eaef98cd94d6cb6cb0f44bd1c903d04f33b1",
"https://github.com/python/cpython/issues/123067",
"https://github.com/python/cpython/pull/123075",
"https://mail.python.org/archives/list/security-announce@python.org/thread/HXJAAAALNUNGCQUS2W7WR6GFIZIHFOOK/",
"https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html",
"https://security.netapp.com/advisory/ntap-20241018-0006/"
],
"epss": 0.00796,
"cvss": 7.5
},
"CVE-2023-0215": {
"verified": false,
"ranking_epss": 0.66014,
"cvss_v2": null,
"cvss_version": 3,
"summary": "The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.",
"references": [
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344",
"https://security.gentoo.org/glsa/202402-08",
"https://security.netapp.com/advisory/ntap-20230427-0007/",
"https://security.netapp.com/advisory/ntap-20230427-0009/",
"https://security.netapp.com/advisory/ntap-20240621-0006/",
"https://www.openssl.org/news/secadv/20230207.txt",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344",
"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003",
"https://security.gentoo.org/glsa/202402-08",
"https://security.netapp.com/advisory/ntap-20230427-0007/",
"https://security.netapp.com/advisory/ntap-20230427-0009/",
"https://security.netapp.com/advisory/ntap-20240621-0006/",
"https://www.openssl.org/news/secadv/20230207.txt"
],
"epss": 0.00503,
"cvss": 7.5
},
"CVE-2022-22719": {
"verified": false,
"ranking_epss": 0.96562,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier.",
"references": [
"http://seclists.org/fulldisclosure/2022/May/33",
"http://seclists.org/fulldisclosure/2022/May/35",
"http://seclists.org/fulldisclosure/2022/May/38",
"http://www.openwall.com/lists/oss-security/2022/03/14/4",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.debian.org/debian-lts-announce/2022/03/msg00033.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTD/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20220321-0001/",
"https://support.apple.com/kb/HT213255",
"https://support.apple.com/kb/HT213256",
"https://support.apple.com/kb/HT213257",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"http://seclists.org/fulldisclosure/2022/May/33",
"http://seclists.org/fulldisclosure/2022/May/35",
"http://seclists.org/fulldisclosure/2022/May/38",
"http://www.openwall.com/lists/oss-security/2022/03/14/4",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.debian.org/debian-lts-announce/2022/03/msg00033.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTD/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20220321-0001/",
"https://support.apple.com/kb/HT213255",
"https://support.apple.com/kb/HT213256",
"https://support.apple.com/kb/HT213257",
"https://www.oracle.com/security-alerts/cpuapr2022.html"
],
"epss": 0.29312,
"cvss": 7.5
},
"CVE-2016-5766": {
"verified": false,
"ranking_epss": 0.94779,
"cvss_v2": 6.8,
"cvss_version": 3,
"summary": "Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via crafted chunk dimensions in an image.",
"references": [
"http://github.com/php/php-src/commit/7722455726bec8c53458a32851d2a87982cf0eac?w=1",
"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html",
"http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2598.html",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3619",
"http://www.openwall.com/lists/oss-security/2016/06/23/4",
"http://www.ubuntu.com/usn/USN-3030-1",
"https://bugs.php.net/bug.php?id=72339",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://libgd.github.io/release-2.2.3.html",
"https://security.gentoo.org/glsa/201612-09",
"http://github.com/php/php-src/commit/7722455726bec8c53458a32851d2a87982cf0eac?w=1",
"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html",
"http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2598.html",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3619",
"http://www.openwall.com/lists/oss-security/2016/06/23/4",
"http://www.ubuntu.com/usn/USN-3030-1",
"https://bugs.php.net/bug.php?id=72339",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://libgd.github.io/release-2.2.3.html",
"https://security.gentoo.org/glsa/201612-09"
],
"epss": 0.16232,
"cvss": 8.8
},
"CVE-2016-5767": {
"verified": false,
"ranking_epss": 0.89218,
"cvss_v2": 6.8,
"cvss_version": 3,
"summary": "Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted image dimensions.",
"references": [
"http://github.com/php/php-src/commit/c395c6e5d7e8df37a21265ff76e48fe75ceb5ae6?w=1",
"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html",
"http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2598.html",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.openwall.com/lists/oss-security/2016/06/23/4",
"http://www.securityfocus.com/bid/91395",
"https://bugs.php.net/bug.php?id=72446",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"http://github.com/php/php-src/commit/c395c6e5d7e8df37a21265ff76e48fe75ceb5ae6?w=1",
"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html",
"http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2598.html",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.openwall.com/lists/oss-security/2016/06/23/4",
"http://www.securityfocus.com/bid/91395",
"https://bugs.php.net/bug.php?id=72446",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"
],
"epss": 0.04623,
"cvss": 8.8
},
"CVE-2016-5768": {
"verified": false,
"ranking_epss": 0.956,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "Double free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the mbstring extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by leveraging a callback exception.",
"references": [
"http://github.com/php/php-src/commit/5b597a2e5b28e2d5a52fc1be13f425f08f47cb62?w=1",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html",
"http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2598.html",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3618",
"http://www.openwall.com/lists/oss-security/2016/06/23/4",
"http://www.securityfocus.com/bid/91396",
"https://bugs.php.net/bug.php?id=72402",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://support.apple.com/HT207170",
"http://github.com/php/php-src/commit/5b597a2e5b28e2d5a52fc1be13f425f08f47cb62?w=1",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html",
"http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2598.html",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3618",
"http://www.openwall.com/lists/oss-security/2016/06/23/4",
"http://www.securityfocus.com/bid/91396",
"https://bugs.php.net/bug.php?id=72402",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://support.apple.com/HT207170"
],
"epss": 0.20989,
"cvss": 9.8
},
"CVE-2016-5769": {
"verified": false,
"ranking_epss": 0.89221,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "Multiple integer overflows in mcrypt.c in the mcrypt extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allow remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted length value, related to the (1) mcrypt_generic and (2) mdecrypt_generic functions.",
"references": [
"http://github.com/php/php-src/commit/6c5211a0cef0cc2854eaa387e0eb036e012904d0?w=1",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html",
"http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.debian.org/security/2016/dsa-3618",
"http://www.openwall.com/lists/oss-security/2016/06/23/4",
"http://www.securityfocus.com/bid/91399",
"https://bugs.php.net/bug.php?id=72455",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://support.apple.com/HT207170",
"http://github.com/php/php-src/commit/6c5211a0cef0cc2854eaa387e0eb036e012904d0?w=1",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html",
"http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.debian.org/security/2016/dsa-3618",
"http://www.openwall.com/lists/oss-security/2016/06/23/4",
"http://www.securityfocus.com/bid/91399",
"https://bugs.php.net/bug.php?id=72455",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://support.apple.com/HT207170"
],
"epss": 0.04625,
"cvss": 9.8
},
"CVE-2022-36760": {
"verified": false,
"ranking_epss": 0.52413,
"cvss_v2": null,
"cvss_version": 3,
"summary": "Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.",
"references": [
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://security.gentoo.org/glsa/202309-01",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://security.gentoo.org/glsa/202309-01"
],
"epss": 0.00291,
"cvss": 9
},
"CVE-2022-4304": {
"verified": false,
"ranking_epss": 0.48824,
"cvss_v2": null,
"cvss_version": 3,
"summary": "A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.",
"references": [
"https://security.gentoo.org/glsa/202402-08",
"https://www.openssl.org/news/secadv/20230207.txt",
"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003",
"https://security.gentoo.org/glsa/202402-08",
"https://www.openssl.org/news/secadv/20230207.txt"
],
"epss": 0.00255,
"cvss": 5.9
},
"CVE-2017-8923": {
"verified": false,
"ranking_epss": 0.89174,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script's use of .= with a long string.",
"references": [
"http://www.securityfocus.com/bid/98518",
"https://bugs.php.net/bug.php?id=74577",
"http://www.securityfocus.com/bid/98518",
"https://bugs.php.net/bug.php?id=74577",
"https://security.netapp.com/advisory/ntap-20241227-0007/"
],
"epss": 0.04586,
"cvss": 9.8
},
"CVE-2012-1171": {
"verified": false,
"ranking_epss": 0.36965,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "The libxml RSHUTDOWN function in PHP 5.x allows remote attackers to bypass the open_basedir protection mechanism and read arbitrary files via vectors involving a stream_close method call during use of a custom stream wrapper.",
"references": [
"https://bugs.php.net/bug.php?id=61367",
"https://bugzilla.redhat.com/show_bug.cgi?id=802591",
"https://github.com/php/php-src/blob/master/ext/libxml/tests/bug61367-read.phpt",
"https://github.com/php/php-src/blob/master/ext/libxml/tests/bug61367-write.phpt",
"https://bugs.php.net/bug.php?id=61367",
"https://bugzilla.redhat.com/show_bug.cgi?id=802591",
"https://github.com/php/php-src/blob/master/ext/libxml/tests/bug61367-read.phpt",
"https://github.com/php/php-src/blob/master/ext/libxml/tests/bug61367-write.phpt"
],
"epss": 0.00162,
"cvss": 5
},
"CVE-2014-3523": {
"verified": false,
"ranking_epss": 0.9701,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "Memory leak in the winnt_accept function in server/mpm/winnt/child.c in the WinNT MPM in the Apache HTTP Server 2.4.x before 2.4.10 on Windows, when the default AcceptFilter is enabled, allows remote attackers to cause a denial of service (memory consumption) via crafted requests.",
"references": [
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://rhn.redhat.com/errata/RHSA-2016-2957.html",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/server/mpm/winnt/child.c",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/server/mpm/winnt/child.c?r1=1608785&r2=1610652&diff_format=h",
"http://www.securityfocus.com/bid/68747",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://rhn.redhat.com/errata/RHSA-2016-2957.html",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/server/mpm/winnt/child.c",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/server/mpm/winnt/child.c?r1=1608785&r2=1610652&diff_format=h",
"http://www.securityfocus.com/bid/68747",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E"
],
"epss": 0.35235,
"cvss": 5
},
"CVE-2019-9639": {
"verified": false,
"ranking_epss": 0.94413,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://access.redhat.com/errata/RHSA-2019:3299",
"https://bugs.php.net/bug.php?id=77659",
"https://lists.debian.org/debian-lts-announce/2019/03/msg00043.html",
"https://security.netapp.com/advisory/ntap-20190502-0007/",
"https://usn.ubuntu.com/3922-1/",
"https://usn.ubuntu.com/3922-2/",
"https://usn.ubuntu.com/3922-3/",
"https://www.debian.org/security/2019/dsa-4403",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://access.redhat.com/errata/RHSA-2019:3299",
"https://bugs.php.net/bug.php?id=77659",
"https://lists.debian.org/debian-lts-announce/2019/03/msg00043.html",
"https://security.netapp.com/advisory/ntap-20190502-0007/",
"https://usn.ubuntu.com/3922-1/",
"https://usn.ubuntu.com/3922-2/",
"https://usn.ubuntu.com/3922-3/",
"https://www.debian.org/security/2019/dsa-4403"
],
"epss": 0.14536,
"cvss": 7.5
},
"CVE-2019-9638": {
"verified": false,
"ranking_epss": 0.94718,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the maker_note->offset relationship to value_len.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://access.redhat.com/errata/RHSA-2019:3299",
"https://bugs.php.net/bug.php?id=77563",
"https://lists.debian.org/debian-lts-announce/2019/03/msg00043.html",
"https://security.netapp.com/advisory/ntap-20190502-0007/",
"https://usn.ubuntu.com/3922-1/",
"https://usn.ubuntu.com/3922-2/",
"https://usn.ubuntu.com/3922-3/",
"https://www.debian.org/security/2019/dsa-4403",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://access.redhat.com/errata/RHSA-2019:3299",
"https://bugs.php.net/bug.php?id=77563",
"https://lists.debian.org/debian-lts-announce/2019/03/msg00043.html",
"https://security.netapp.com/advisory/ntap-20190502-0007/",
"https://usn.ubuntu.com/3922-1/",
"https://usn.ubuntu.com/3922-2/",
"https://usn.ubuntu.com/3922-3/",
"https://www.debian.org/security/2019/dsa-4403"
],
"epss": 0.15914,
"cvss": 7.5
},
"CVE-2019-17567": {
"verified": false,
"ranking_epss": 0.93862,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded by the origin server was tunneling the whole connection regardless, thus allowing for subsequent requests on the same connection to pass through with no HTTP validation, authentication or authorization possibly configured.",
"references": [
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://www.openwall.com/lists/oss-security/2021/06/10/2",
"https://lists.apache.org/thread.html/r7f2b70b621651548f4b6f027552f1dd91705d7111bb5d15cda0a68dd%40%3Cdev.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r90f693a5c9fb75550ef1412436d5e682a5f845beb427fa6f23419a3c%40%3Cannounce.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re026d3da9d7824bd93b9f871c0fdda978d960c7e62d8c43cba8d0bf3%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/",
"https://security.gentoo.org/glsa/202107-38",
"https://security.netapp.com/advisory/ntap-20210702-0001/",
"https://www.oracle.com/security-alerts/cpuoct2021.html",
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://www.openwall.com/lists/oss-security/2021/06/10/2",
"https://lists.apache.org/thread.html/r7f2b70b621651548f4b6f027552f1dd91705d7111bb5d15cda0a68dd%40%3Cdev.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r90f693a5c9fb75550ef1412436d5e682a5f845beb427fa6f23419a3c%40%3Cannounce.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re026d3da9d7824bd93b9f871c0fdda978d960c7e62d8c43cba8d0bf3%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/",
"https://security.gentoo.org/glsa/202107-38",
"https://security.netapp.com/advisory/ntap-20210702-0001/",
"https://www.oracle.com/security-alerts/cpuoct2021.html"
],
"epss": 0.12438,
"cvss": 5.3
},
"CVE-2013-2220": {
"verified": false,
"ranking_epss": 0.86035,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "Buffer overflow in the radius_get_vendor_attr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large Vendor Specific Attributes (VSA) length value.",
"references": [
"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=714362",
"http://pecl.php.net/package/radius/1.2.7",
"http://www.debian.org/security/2013/dsa-2726",
"https://github.com/LawnGnome/php-radius/commit/13c149b051f82b709e8d7cc32111e84b49d57234",
"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=714362",
"http://pecl.php.net/package/radius/1.2.7",
"http://www.debian.org/security/2013/dsa-2726",
"https://github.com/LawnGnome/php-radius/commit/13c149b051f82b709e8d7cc32111e84b49d57234"
],
"epss": 0.02798,
"cvss": 7.5
},
"CVE-2019-9637": {
"verified": false,
"ranking_epss": 0.92959,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://access.redhat.com/errata/RHSA-2019:3299",
"https://bugs.php.net/bug.php?id=77630",
"https://lists.debian.org/debian-lts-announce/2019/03/msg00043.html",
"https://security.netapp.com/advisory/ntap-20190502-0007/",
"https://support.f5.com/csp/article/K53825211",
"https://usn.ubuntu.com/3922-1/",
"https://usn.ubuntu.com/3922-2/",
"https://usn.ubuntu.com/3922-3/",
"https://www.debian.org/security/2019/dsa-4403",
"https://www.tenable.com/security/tns-2019-07",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://access.redhat.com/errata/RHSA-2019:3299",
"https://bugs.php.net/bug.php?id=77630",
"https://lists.debian.org/debian-lts-announce/2019/03/msg00043.html",
"https://security.netapp.com/advisory/ntap-20190502-0007/",
"https://support.f5.com/csp/article/K53825211",
"https://usn.ubuntu.com/3922-1/",
"https://usn.ubuntu.com/3922-2/",
"https://usn.ubuntu.com/3922-3/",
"https://www.debian.org/security/2019/dsa-4403",
"https://www.tenable.com/security/tns-2019-07"
],
"epss": 0.0987,
"cvss": 7.5
},
"CVE-2019-9636": {
"verified": false,
"ranking_epss": 0.92476,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (credentials, cookies, etc. that are cached against a given hostname). The components are: urllib.parse.urlsplit, urllib.parse.urlparse. The attack vector is: A specially crafted URL could be incorrectly parsed to locate cookies or authentication data and send that information to a different host than when parsed correctly. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.7, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.3, v3.7.3rc1, v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00092.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00097.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00024.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00050.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00042.html",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"http://www.securityfocus.com/bid/107400",
"https://access.redhat.com/errata/RHBA-2019:0763",
"https://access.redhat.com/errata/RHBA-2019:0764",
"https://access.redhat.com/errata/RHBA-2019:0959",
"https://access.redhat.com/errata/RHSA-2019:0710",
"https://access.redhat.com/errata/RHSA-2019:0765",
"https://access.redhat.com/errata/RHSA-2019:0806",
"https://access.redhat.com/errata/RHSA-2019:0902",
"https://access.redhat.com/errata/RHSA-2019:0981",
"https://access.redhat.com/errata/RHSA-2019:0997",
"https://access.redhat.com/errata/RHSA-2019:1467",
"https://access.redhat.com/errata/RHSA-2019:2980",
"https://access.redhat.com/errata/RHSA-2019:3170",
"https://bugs.python.org/issue36216",
"https://github.com/python/cpython/pull/12201",
"https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2019/06/msg00023.html",
"https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html",
"https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ORNTF62QPLMJXIQ7KTZQ2776LMIXEKL/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/44TS66GJMO5H3RLMVZEBGEFTB6O2LJJU/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/46PVWY5LFP4BRPG3BVQ5QEEFYBVEXHCK/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AEZ5IQT7OF7Q2NCGIVABOWYGKO7YU3NJ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CFBAAGM27H73OLYBUA2IAZFSUN6KGLME/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D3LXPABKVLFYUHRYJPM3CSS5MS6FXKS7/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E2HP37NUVLQSBW3J735A2DQDOZ4ZGBLY/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ER6LONC2B2WYIO56GBQUDU6QTWZDPUNQ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQEQLXLOCR3SNM3AA5RRYJFQ5AZBYJ4L/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ICBEGRHIPHWPG2VGYS6R4EVKVUUF4AQW/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IFAXBEY2TGOBDRKTR556JBXBVFSAKD6I/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMWSKTNOHSUOT3L25QFJAVCFYZX46FYK/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSKPGPZQNTAULHW4UH63KGOOUIDE4RRB/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXASHCDD4PQFKTMKQN4YOP5ZH366ABN4/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KRYFIMISZ47NTAU3XWZUOFB7CYL62KES/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L25RTMKCF62DLC2XVSNXGX7C7HXISLVM/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TR6GCO3WTV4D5L23WTCBF275VE6BVNI3/",
"https://python-security.readthedocs.io/vuln/urlsplit-nfkc-normalization.html",
"https://security.gentoo.org/glsa/202003-26",
"https://security.netapp.com/advisory/ntap-20190517-0001/",
"https://usn.ubuntu.com/4127-1/",
"https://usn.ubuntu.com/4127-2/",
"https://www.oracle.com/security-alerts/cpujan2020.html",
"https://www.oracle.com/security-alerts/cpujul2022.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00092.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00097.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00024.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00050.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00042.html",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"http://www.securityfocus.com/bid/107400",
"https://access.redhat.com/errata/RHBA-2019:0763",
"https://access.redhat.com/errata/RHBA-2019:0764",
"https://access.redhat.com/errata/RHBA-2019:0959",
"https://access.redhat.com/errata/RHSA-2019:0710",
"https://access.redhat.com/errata/RHSA-2019:0765",
"https://access.redhat.com/errata/RHSA-2019:0806",
"https://access.redhat.com/errata/RHSA-2019:0902",
"https://access.redhat.com/errata/RHSA-2019:0981",
"https://access.redhat.com/errata/RHSA-2019:0997",
"https://access.redhat.com/errata/RHSA-2019:1467",
"https://access.redhat.com/errata/RHSA-2019:2980",
"https://access.redhat.com/errata/RHSA-2019:3170",
"https://bugs.python.org/issue36216",
"https://github.com/python/cpython/pull/12201",
"https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2019/06/msg00023.html",
"https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html",
"https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ORNTF62QPLMJXIQ7KTZQ2776LMIXEKL/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/44TS66GJMO5H3RLMVZEBGEFTB6O2LJJU/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/46PVWY5LFP4BRPG3BVQ5QEEFYBVEXHCK/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AEZ5IQT7OF7Q2NCGIVABOWYGKO7YU3NJ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CFBAAGM27H73OLYBUA2IAZFSUN6KGLME/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D3LXPABKVLFYUHRYJPM3CSS5MS6FXKS7/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E2HP37NUVLQSBW3J735A2DQDOZ4ZGBLY/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ER6LONC2B2WYIO56GBQUDU6QTWZDPUNQ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQEQLXLOCR3SNM3AA5RRYJFQ5AZBYJ4L/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ICBEGRHIPHWPG2VGYS6R4EVKVUUF4AQW/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IFAXBEY2TGOBDRKTR556JBXBVFSAKD6I/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMWSKTNOHSUOT3L25QFJAVCFYZX46FYK/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSKPGPZQNTAULHW4UH63KGOOUIDE4RRB/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXASHCDD4PQFKTMKQN4YOP5ZH366ABN4/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KRYFIMISZ47NTAU3XWZUOFB7CYL62KES/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L25RTMKCF62DLC2XVSNXGX7C7HXISLVM/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TR6GCO3WTV4D5L23WTCBF275VE6BVNI3/",
"https://python-security.readthedocs.io/vuln/urlsplit-nfkc-normalization.html",
"https://security.gentoo.org/glsa/202003-26",
"https://security.netapp.com/advisory/ntap-20190517-0001/",
"https://usn.ubuntu.com/4127-1/",
"https://usn.ubuntu.com/4127-2/",
"https://www.oracle.com/security-alerts/cpujan2020.html",
"https://www.oracle.com/security-alerts/cpujul2022.html"
],
"epss": 0.08786,
"cvss": 9.8
},
"CVE-2012-4360": {
"verified": false,
"ranking_epss": 0.58117,
"cvss_v2": 4.3,
"cvss_version": 2,
"summary": "Cross-site scripting (XSS) vulnerability in the mod_pagespeed module 0.10.19.1 through 0.10.22.4 for the Apache HTTP Server allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.",
"references": [
"http://osvdb.org/85430",
"https://developers.google.com/speed/docs/mod_pagespeed/CVE-2012-4360",
"https://developers.google.com/speed/docs/mod_pagespeed/announce-0.10.22.6",
"https://exchange.xforce.ibmcloud.com/vulnerabilities/78563",
"http://osvdb.org/85430",
"https://developers.google.com/speed/docs/mod_pagespeed/CVE-2012-4360",
"https://developers.google.com/speed/docs/mod_pagespeed/announce-0.10.22.6",
"https://exchange.xforce.ibmcloud.com/vulnerabilities/78563"
],
"epss": 0.00361,
"cvss": 4.3
},
"CVE-2013-1753": {
"verified": false,
"ranking_epss": 0.63728,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.",
"references": [
"https://bugs.python.org/issue16043",
"https://bugs.python.org/issue16043"
],
"epss": 0.00455,
"cvss": 7.5
},
"CVE-2015-4601": {
"verified": false,
"ranking_epss": 0.95664,
"cvss_v2": 10,
"cvss_version": 3,
"summary": "PHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to \"type confusion\" issues in (1) ext/soap/php_encoding.c, (2) ext/soap/php_http.c, and (3) ext/soap/soap.c, a different issue than CVE-2015-4600.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=0c136a2abd49298b66acb0cad504f0f972f5bfe8",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.openwall.com/lists/oss-security/2015/06/16/12",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75246",
"http://www.securitytracker.com/id/1032709",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=0c136a2abd49298b66acb0cad504f0f972f5bfe8",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.openwall.com/lists/oss-security/2015/06/16/12",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75246",
"http://www.securitytracker.com/id/1032709"
],
"epss": 0.21375,
"cvss": 9.8
},
"CVE-2015-4600": {
"verified": false,
"ranking_epss": 0.93299,
"cvss_v2": 10,
"cvss_version": 3,
"summary": "The SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to \"type confusion\" issues in the (1) SoapClient::__getLastRequest, (2) SoapClient::__getLastResponse, (3) SoapClient::__getLastRequestHeaders, (4) SoapClient::__getLastResponseHeaders, (5) SoapClient::__getCookies, and (6) SoapClient::__setCookie methods.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=0c136a2abd49298b66acb0cad504f0f972f5bfe8",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.openwall.com/lists/oss-security/2015/06/16/12",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/74413",
"http://www.securitytracker.com/id/1032709",
"https://bugs.php.net/bug.php?id=69152",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=0c136a2abd49298b66acb0cad504f0f972f5bfe8",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.openwall.com/lists/oss-security/2015/06/16/12",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/74413",
"http://www.securitytracker.com/id/1032709",
"https://bugs.php.net/bug.php?id=69152"
],
"epss": 0.10739,
"cvss": 9.8
},
"CVE-2015-4603": {
"verified": false,
"ranking_epss": 0.9213,
"cvss_v2": 10,
"cvss_version": 3,
"summary": "The exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to execute arbitrary code via an unexpected data type, related to a \"type confusion\" issue.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.openwall.com/lists/oss-security/2015/06/16/12",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75252",
"http://www.securitytracker.com/id/1032709",
"https://bugs.php.net/bug.php?id=69152",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.openwall.com/lists/oss-security/2015/06/16/12",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75252",
"http://www.securitytracker.com/id/1032709",
"https://bugs.php.net/bug.php?id=69152"
],
"epss": 0.08129,
"cvss": 9.8
},
"CVE-2015-4602": {
"verified": false,
"ranking_epss": 0.94001,
"cvss_v2": 10,
"cvss_version": 3,
"summary": "The __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to a \"type confusion\" issue.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=fb83c76deec58f1fab17c350f04c9f042e5977d1",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.openwall.com/lists/oss-security/2015/06/16/12",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75249",
"http://www.securitytracker.com/id/1032709",
"https://bugs.php.net/bug.php?id=69152",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=fb83c76deec58f1fab17c350f04c9f042e5977d1",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.openwall.com/lists/oss-security/2015/06/16/12",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75249",
"http://www.securitytracker.com/id/1032709",
"https://bugs.php.net/bug.php?id=69152"
],
"epss": 0.12863,
"cvss": 9.8
},
"CVE-2015-4605": {
"verified": false,
"ranking_epss": 0.92628,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "The mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly restrict a certain offset value, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string that is mishandled by a \"Python script text executable\" rule.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f938112c495b0d26572435c0be73ac0bfe642ecd",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://www.openwall.com/lists/oss-security/2015/06/16/12",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75233",
"http://www.securitytracker.com/id/1032709",
"https://bugs.php.net/bug.php?id=68819",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f938112c495b0d26572435c0be73ac0bfe642ecd",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://www.openwall.com/lists/oss-security/2015/06/16/12",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75233",
"http://www.securitytracker.com/id/1032709",
"https://bugs.php.net/bug.php?id=68819"
],
"epss": 0.09106,
"cvss": 7.5
},
"CVE-2015-4604": {
"verified": false,
"ranking_epss": 0.92628,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "The mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly maintain a certain pointer relationship, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string that is mishandled by a \"Python script text executable\" rule.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f938112c495b0d26572435c0be73ac0bfe642ecd",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://www.openwall.com/lists/oss-security/2015/06/16/12",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75241",
"http://www.securitytracker.com/id/1032709",
"https://bugs.php.net/bug.php?id=68819",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f938112c495b0d26572435c0be73ac0bfe642ecd",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://www.openwall.com/lists/oss-security/2015/06/16/12",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75241",
"http://www.securitytracker.com/id/1032709",
"https://bugs.php.net/bug.php?id=68819"
],
"epss": 0.09106,
"cvss": 7.5
},
"CVE-2011-4718": {
"verified": false,
"ranking_epss": 0.78666,
"cvss_v2": 6.8,
"cvss_version": 2,
"summary": "Session fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote attackers to hijack web sessions by specifying a session ID.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=169b78eb79b0e080b67f9798708eb3771c6d0b2f",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=25e8fcc88fa20dc9d4c47184471003f436927cde",
"https://bugs.php.net/bug.php?id=60491",
"https://wiki.php.net/rfc/strict_sessions",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=169b78eb79b0e080b67f9798708eb3771c6d0b2f",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=25e8fcc88fa20dc9d4c47184471003f436927cde",
"https://bugs.php.net/bug.php?id=60491",
"https://wiki.php.net/rfc/strict_sessions"
],
"epss": 0.01178,
"cvss": 6.8
},
"CVE-2014-9912": {
"verified": false,
"ranking_epss": 0.78544,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The get_icu_disp_value_src_php function in ext/intl/locale/locale_methods.c in PHP before 5.3.29, 5.4.x before 5.4.30, and 5.5.x before 5.5.14 does not properly restrict calls to the ICU uresbund.cpp component, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a locale_get_display_name call with a long first argument.",
"references": [
"http://www.openwall.com/lists/oss-security/2016/11/25/1",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/68549",
"https://bugs.php.net/bug.php?id=67397",
"https://bugzilla.redhat.com/show_bug.cgi?id=1383569",
"http://www.openwall.com/lists/oss-security/2016/11/25/1",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/68549",
"https://bugs.php.net/bug.php?id=67397",
"https://bugzilla.redhat.com/show_bug.cgi?id=1383569"
],
"epss": 0.01163,
"cvss": 9.8
},
"CVE-2014-0237": {
"verified": false,
"ranking_epss": 0.97198,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (performance degradation) by triggering many file_printf calls.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/59061",
"http://secunia.com/advisories/59329",
"http://secunia.com/advisories/59418",
"http://secunia.com/advisories/60998",
"http://support.apple.com/kb/HT6443",
"http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
"http://www.debian.org/security/2014/dsa-3021",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/67759",
"https://bugs.php.net/bug.php?id=67328",
"https://github.com/file/file/commit/b8acc83781d5a24cc5101e525d15efe0482c280d",
"https://support.apple.com/HT204659",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/59061",
"http://secunia.com/advisories/59329",
"http://secunia.com/advisories/59418",
"http://secunia.com/advisories/60998",
"http://support.apple.com/kb/HT6443",
"http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
"http://www.debian.org/security/2014/dsa-3021",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/67759",
"https://bugs.php.net/bug.php?id=67328",
"https://github.com/file/file/commit/b8acc83781d5a24cc5101e525d15efe0482c280d",
"https://support.apple.com/HT204659"
],
"epss": 0.38243,
"cvss": 5
},
"CVE-2014-3981": {
"verified": false,
"ranking_epss": 0.49354,
"cvss_v2": 3.3,
"cvss_version": 2,
"summary": "acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=91bcadd85e20e50d3f8c2e9721327681640e6f16",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://marc.info/?l=bugtraq&m=141017844705317&w=2",
"http://marc.info/?l=bugtraq&m=141390017113542&w=2",
"http://openwall.com/lists/oss-security/2014/06/06/12",
"http://seclists.org/fulldisclosure/2014/Jun/21",
"http://support.apple.com/kb/HT6443",
"http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"https://bugs.php.net/bug.php?id=67390",
"https://bugzilla.redhat.com/show_bug.cgi?id=1104978",
"https://support.apple.com/HT204659",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=91bcadd85e20e50d3f8c2e9721327681640e6f16",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://marc.info/?l=bugtraq&m=141017844705317&w=2",
"http://marc.info/?l=bugtraq&m=141390017113542&w=2",
"http://openwall.com/lists/oss-security/2014/06/06/12",
"http://seclists.org/fulldisclosure/2014/Jun/21",
"http://support.apple.com/kb/HT6443",
"http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"https://bugs.php.net/bug.php?id=67390",
"https://bugzilla.redhat.com/show_bug.cgi?id=1104978",
"https://support.apple.com/HT204659"
],
"epss": 0.00261,
"cvss": 3.3
},
"CVE-2016-5096": {
"verified": false,
"ranking_epss": 0.81626,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "Integer overflow in the fread function in ext/standard/file.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large integer in the second argument.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3602",
"http://www.openwall.com/lists/oss-security/2016/05/26/3",
"http://www.securityfocus.com/bid/90861",
"https://bugs.php.net/bug.php?id=72114",
"https://github.com/php/php-src/commit/abd159cce48f3e34f08e4751c568e09677d5ec9c?w=1",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3602",
"http://www.openwall.com/lists/oss-security/2016/05/26/3",
"http://www.securityfocus.com/bid/90861",
"https://bugs.php.net/bug.php?id=72114",
"https://github.com/php/php-src/commit/abd159cce48f3e34f08e4751c568e09677d5ec9c?w=1",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"
],
"epss": 0.01601,
"cvss": 8.6
},
"CVE-2016-5094": {
"verified": false,
"ranking_epss": 0.85003,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "Integer overflow in the php_html_entities function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from the htmlspecialchars function.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3602",
"http://www.openwall.com/lists/oss-security/2016/05/26/3",
"http://www.securityfocus.com/bid/90857",
"https://bugs.php.net/bug.php?id=72135",
"https://github.com/php/php-src/commit/0da8b8b801f9276359262f1ef8274c7812d3dfda?w=1",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3602",
"http://www.openwall.com/lists/oss-security/2016/05/26/3",
"http://www.securityfocus.com/bid/90857",
"https://bugs.php.net/bug.php?id=72135",
"https://github.com/php/php-src/commit/0da8b8b801f9276359262f1ef8274c7812d3dfda?w=1",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"
],
"epss": 0.02407,
"cvss": 8.6
},
"CVE-2016-5095": {
"verified": false,
"ranking_epss": 0.76319,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "Integer overflow in the php_escape_html_entities_ex function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from a FILTER_SANITIZE_FULL_SPECIAL_CHARS filter_var call. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-5094.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://www.debian.org/security/2016/dsa-3602",
"http://www.openwall.com/lists/oss-security/2016/05/26/3",
"http://www.securityfocus.com/bid/92144",
"https://bugs.php.net/bug.php?id=72135",
"https://gist.github.com/8ef775c117d84ff15185953990a28576",
"http://php.net/ChangeLog-5.php",
"http://www.debian.org/security/2016/dsa-3602",
"http://www.openwall.com/lists/oss-security/2016/05/26/3",
"http://www.securityfocus.com/bid/92144",
"https://bugs.php.net/bug.php?id=72135",
"https://gist.github.com/8ef775c117d84ff15185953990a28576"
],
"epss": 0.00952,
"cvss": 8.6
},
"CVE-2016-4543": {
"verified": false,
"ranking_epss": 0.90126,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate IFD sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.",
"references": [
"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html",
"http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html",
"http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3602",
"http://www.openwall.com/lists/oss-security/2016/05/05/21",
"http://www.securityfocus.com/bid/89844",
"https://bugs.php.net/bug.php?id=72094",
"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=082aecfc3a753ad03be82cf14f03ac065723ec92",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
"https://security.gentoo.org/glsa/201611-22",
"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html",
"http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html",
"http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3602",
"http://www.openwall.com/lists/oss-security/2016/05/05/21",
"http://www.securityfocus.com/bid/89844",
"https://bugs.php.net/bug.php?id=72094",
"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=082aecfc3a753ad03be82cf14f03ac065723ec92",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
"https://security.gentoo.org/glsa/201611-22"
],
"epss": 0.05437,
"cvss": 9.8
},
"CVE-2016-4542": {
"verified": false,
"ranking_epss": 0.79123,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not properly construct spprintf arguments, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.",
"references": [
"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html",
"http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html",
"http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3602",
"http://www.openwall.com/lists/oss-security/2016/05/05/21",
"http://www.securityfocus.com/bid/89844",
"https://bugs.php.net/bug.php?id=72094",
"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=082aecfc3a753ad03be82cf14f03ac065723ec92",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
"https://security.gentoo.org/glsa/201611-22",
"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html",
"http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html",
"http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3602",
"http://www.openwall.com/lists/oss-security/2016/05/05/21",
"http://www.securityfocus.com/bid/89844",
"https://bugs.php.net/bug.php?id=72094",
"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=082aecfc3a753ad03be82cf14f03ac065723ec92",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
"https://security.gentoo.org/glsa/201611-22"
],
"epss": 0.01233,
"cvss": 9.8
},
"CVE-2016-4541": {
"verified": false,
"ranking_epss": 0.83332,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset.",
"references": [
"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html",
"http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html",
"http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3602",
"http://www.openwall.com/lists/oss-security/2016/05/05/21",
"http://www.securityfocus.com/bid/90172",
"https://bugs.php.net/bug.php?id=72061",
"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=fd9689745c44341b1bd6af4756f324be8abba2fb",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
"https://security.gentoo.org/glsa/201611-22",
"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html",
"http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html",
"http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3602",
"http://www.openwall.com/lists/oss-security/2016/05/05/21",
"http://www.securityfocus.com/bid/90172",
"https://bugs.php.net/bug.php?id=72061",
"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=fd9689745c44341b1bd6af4756f324be8abba2fb",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
"https://security.gentoo.org/glsa/201611-22"
],
"epss": 0.01936,
"cvss": 9.8
},
"CVE-2016-4540": {
"verified": false,
"ranking_epss": 0.83454,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset.",
"references": [
"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html",
"http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html",
"http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3602",
"http://www.openwall.com/lists/oss-security/2016/05/05/21",
"http://www.securityfocus.com/bid/90172",
"https://bugs.php.net/bug.php?id=72061",
"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=fd9689745c44341b1bd6af4756f324be8abba2fb",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
"https://security.gentoo.org/glsa/201611-22",
"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html",
"http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html",
"http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3602",
"http://www.openwall.com/lists/oss-security/2016/05/05/21",
"http://www.securityfocus.com/bid/90172",
"https://bugs.php.net/bug.php?id=72061",
"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=fd9689745c44341b1bd6af4756f324be8abba2fb",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
"https://security.gentoo.org/glsa/201611-22"
],
"epss": 0.01969,
"cvss": 9.8
},
"CVE-2014-0238": {
"verified": false,
"ranking_epss": 0.96252,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite loop or out-of-bounds memory access) via a vector that (1) has zero length or (2) is too long.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/59061",
"http://secunia.com/advisories/59329",
"http://secunia.com/advisories/59418",
"http://secunia.com/advisories/60998",
"http://support.apple.com/kb/HT6443",
"http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
"http://www.debian.org/security/2014/dsa-3021",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/67765",
"https://bugs.php.net/bug.php?id=67327",
"https://github.com/file/file/commit/f97486ef5dc3e8735440edc4fc8808c63e1a3ef0",
"https://support.apple.com/HT204659",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/59061",
"http://secunia.com/advisories/59329",
"http://secunia.com/advisories/59418",
"http://secunia.com/advisories/60998",
"http://support.apple.com/kb/HT6443",
"http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
"http://www.debian.org/security/2014/dsa-3021",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/67765",
"https://bugs.php.net/bug.php?id=67327",
"https://github.com/file/file/commit/f97486ef5dc3e8735440edc4fc8808c63e1a3ef0",
"https://support.apple.com/HT204659"
],
"epss": 0.26161,
"cvss": 5
},
"CVE-2016-5399": {
"verified": false,
"ranking_epss": 0.94253,
"cvss_v2": 6.8,
"cvss_version": 3,
"summary": "The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive.",
"references": [
"http://packetstormsecurity.com/files/137998/PHP-7.0.8-5.6.23-5.5.37-bzread-OOB-Write.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2598.html",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://seclists.org/fulldisclosure/2016/Jul/72",
"http://www.debian.org/security/2016/dsa-3631",
"http://www.openwall.com/lists/oss-security/2016/07/21/1",
"http://www.securityfocus.com/archive/1/538966/100/0/threaded",
"http://www.securityfocus.com/bid/92051",
"http://www.securitytracker.com/id/1036430",
"https://bugs.php.net/bug.php?id=72613",
"https://bugzilla.redhat.com/show_bug.cgi?id=1358395",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.exploit-db.com/exploits/40155/",
"http://packetstormsecurity.com/files/137998/PHP-7.0.8-5.6.23-5.5.37-bzread-OOB-Write.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2598.html",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://seclists.org/fulldisclosure/2016/Jul/72",
"http://www.debian.org/security/2016/dsa-3631",
"http://www.openwall.com/lists/oss-security/2016/07/21/1",
"http://www.securityfocus.com/archive/1/538966/100/0/threaded",
"http://www.securityfocus.com/bid/92051",
"http://www.securitytracker.com/id/1036430",
"https://bugs.php.net/bug.php?id=72613",
"https://bugzilla.redhat.com/show_bug.cgi?id=1358395",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.exploit-db.com/exploits/40155/"
],
"epss": 0.13858,
"cvss": 7.8
},
"CVE-2013-7440": {
"verified": false,
"ranking_epss": 0.57895,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.",
"references": [
"http://seclists.org/oss-sec/2015/q2/483",
"http://seclists.org/oss-sec/2015/q2/523",
"http://www.securityfocus.com/bid/74707",
"https://access.redhat.com/errata/RHSA-2016:1166",
"https://bugs.python.org/issue17997",
"https://bugzilla.redhat.com/show_bug.cgi?id=1224999",
"https://hg.python.org/cpython/rev/10d0edadbcdd",
"http://seclists.org/oss-sec/2015/q2/483",
"http://seclists.org/oss-sec/2015/q2/523",
"http://www.securityfocus.com/bid/74707",
"https://access.redhat.com/errata/RHSA-2016:1166",
"https://bugs.python.org/issue17997",
"https://bugzilla.redhat.com/show_bug.cgi?id=1224999",
"https://hg.python.org/cpython/rev/10d0edadbcdd"
],
"epss": 0.00358,
"cvss": 5.9
},
"CVE-2016-10161": {
"verified": false,
"ranking_epss": 0.94436,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "The object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via crafted serialized data that is mishandled in a finish_nested_data call.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.debian.org/security/2017/dsa-3783",
"http://www.securityfocus.com/bid/95768",
"http://www.securitytracker.com/id/1037659",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=73825",
"https://github.com/php/php-src/commit/16b3003ffc6393e250f069aa28a78dc5a2c064b2",
"https://security.gentoo.org/glsa/201702-29",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.tenable.com/security/tns-2017-04",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.debian.org/security/2017/dsa-3783",
"http://www.securityfocus.com/bid/95768",
"http://www.securitytracker.com/id/1037659",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=73825",
"https://github.com/php/php-src/commit/16b3003ffc6393e250f069aa28a78dc5a2c064b2",
"https://security.gentoo.org/glsa/201702-29",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.tenable.com/security/tns-2017-04"
],
"epss": 0.14631,
"cvss": 7.5
},
"CVE-2013-2765": {
"verified": false,
"ranking_epss": 0.90051,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a denial of service (NULL pointer dereference, process crash, and disk consumption) via a POST request with a large body and a crafted Content-Type header.",
"references": [
"http://archives.neohapsis.com/archives/bugtraq/2013-05/0125.html",
"http://lists.opensuse.org/opensuse-updates/2013-08/msg00020.html",
"http://lists.opensuse.org/opensuse-updates/2013-08/msg00025.html",
"http://lists.opensuse.org/opensuse-updates/2013-08/msg00031.html",
"http://sourceforge.net/mailarchive/message.php?msg_id=30900019",
"http://www.modsecurity.org/",
"http://www.shookalabs.com/",
"https://bugzilla.redhat.com/show_bug.cgi?id=967615",
"https://github.com/SpiderLabs/ModSecurity/commit/0840b13612a0b7ef1ce7441cf811dcfc6b463fba",
"https://github.com/shookalabs/exploits/blob/master/modsecurity_cve_2013_2765_check.py",
"https://raw.github.com/SpiderLabs/ModSecurity/master/CHANGES",
"http://archives.neohapsis.com/archives/bugtraq/2013-05/0125.html",
"http://lists.opensuse.org/opensuse-updates/2013-08/msg00020.html",
"http://lists.opensuse.org/opensuse-updates/2013-08/msg00025.html",
"http://lists.opensuse.org/opensuse-updates/2013-08/msg00031.html",
"http://sourceforge.net/mailarchive/message.php?msg_id=30900019",
"http://www.modsecurity.org/",
"http://www.shookalabs.com/",
"https://bugzilla.redhat.com/show_bug.cgi?id=967615",
"https://github.com/SpiderLabs/ModSecurity/commit/0840b13612a0b7ef1ce7441cf811dcfc6b463fba",
"https://github.com/shookalabs/exploits/blob/master/modsecurity_cve_2013_2765_check.py",
"https://raw.github.com/SpiderLabs/ModSecurity/master/CHANGES"
],
"epss": 0.05375,
"cvss": 5
},
"CVE-2015-4116": {
"verified": false,
"ranking_epss": 0.87143,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "Use-after-free vulnerability in the spl_ptr_heap_insert function in ext/spl/spl_heap.c in PHP before 5.5.27 and 5.6.x before 5.6.11 allows remote attackers to execute arbitrary code by triggering a failed SplMinHeap::compare operation.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=1cbd25ca15383394ffa9ee8601c5de4c0f2f90e1",
"http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html",
"http://php.net/ChangeLog-5.php",
"https://bugs.php.net/bug.php?id=69737",
"https://www.htbridge.com/advisory/HTB23262",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=1cbd25ca15383394ffa9ee8601c5de4c0f2f90e1",
"http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html",
"http://php.net/ChangeLog-5.php",
"https://bugs.php.net/bug.php?id=69737",
"https://www.htbridge.com/advisory/HTB23262"
],
"epss": 0.03291,
"cvss": 9.8
},
"CVE-2015-8865": {
"verified": false,
"ranking_epss": 0.77072,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The file_check_mem function in funcs.c in file before 5.23, as used in the Fileinfo component in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5, mishandles continuation-level jumps, which allows context-dependent attackers to cause a denial of service (buffer overflow and application crash) or possibly execute arbitrary code via a crafted magic file.",
"references": [
"http://bugs.gw.com/view.php?id=522",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=fe13566c93f118a15a96320a546c7878fd0cfc5e",
"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3560",
"http://www.openwall.com/lists/oss-security/2016/04/24/1",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/85802",
"http://www.ubuntu.com/usn/USN-2952-1",
"http://www.ubuntu.com/usn/USN-2952-2",
"https://bugs.php.net/bug.php?id=71527",
"https://github.com/file/file/commit/6713ca45e7757297381f4b4cdb9cf5e624a9ad36",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://security.gentoo.org/glsa/201611-22",
"https://security.gentoo.org/glsa/201701-42",
"https://support.apple.com/HT206567",
"https://usn.ubuntu.com/3686-1/",
"https://usn.ubuntu.com/3686-2/",
"http://bugs.gw.com/view.php?id=522",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=fe13566c93f118a15a96320a546c7878fd0cfc5e",
"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3560",
"http://www.openwall.com/lists/oss-security/2016/04/24/1",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/85802",
"http://www.ubuntu.com/usn/USN-2952-1",
"http://www.ubuntu.com/usn/USN-2952-2",
"https://bugs.php.net/bug.php?id=71527",
"https://github.com/file/file/commit/6713ca45e7757297381f4b4cdb9cf5e624a9ad36",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://security.gentoo.org/glsa/201611-22",
"https://security.gentoo.org/glsa/201701-42",
"https://support.apple.com/HT206567",
"https://usn.ubuntu.com/3686-1/",
"https://usn.ubuntu.com/3686-2/"
],
"epss": 0.01014,
"cvss": 7.3
},
"CVE-2014-9705": {
"verified": false,
"ranking_epss": 0.97006,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allows remote attackers to execute arbitrary code via vectors that trigger creation of multiple dictionaries.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html",
"http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://openwall.com/lists/oss-security/2015/03/15/6",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://svn.php.net/viewvc/pecl/enchant/trunk/enchant.c?r1=317600&r2=335803",
"http://www.debian.org/security/2015/dsa-3195",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:079",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/73031",
"http://www.securitytracker.com/id/1031948",
"http://www.ubuntu.com/usn/USN-2535-1",
"https://bugs.php.net/bug.php?id=68552",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205267",
"https://www.htbridge.com/advisory/HTB23252",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html",
"http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://openwall.com/lists/oss-security/2015/03/15/6",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://svn.php.net/viewvc/pecl/enchant/trunk/enchant.c?r1=317600&r2=335803",
"http://www.debian.org/security/2015/dsa-3195",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:079",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/73031",
"http://www.securitytracker.com/id/1031948",
"http://www.ubuntu.com/usn/USN-2535-1",
"https://bugs.php.net/bug.php?id=68552",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205267",
"https://www.htbridge.com/advisory/HTB23252"
],
"epss": 0.35164,
"cvss": 7.5
},
"CVE-2015-8867": {
"verified": false,
"ranking_epss": 0.94139,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "The openssl_random_pseudo_bytes function in ext/openssl/openssl.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 incorrectly relies on the deprecated RAND_pseudo_bytes function, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=16023f3e3b9c06cf677c3c980e8d574e4c162827",
"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00031.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00033.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00056.html",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.openwall.com/lists/oss-security/2016/04/24/1",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.ubuntu.com/usn/USN-2952-1",
"http://www.ubuntu.com/usn/USN-2952-2",
"https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1534203",
"https://bugs.php.net/bug.php?id=70014",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=16023f3e3b9c06cf677c3c980e8d574e4c162827",
"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00031.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00033.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00056.html",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.openwall.com/lists/oss-security/2016/04/24/1",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.ubuntu.com/usn/USN-2952-1",
"http://www.ubuntu.com/usn/USN-2952-2",
"https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1534203",
"https://bugs.php.net/bug.php?id=70014"
],
"epss": 0.13368,
"cvss": 7.5
},
"CVE-2016-10712": {
"verified": false,
"ranking_epss": 0.68187,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "In PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of stream_get_meta_data can be controlled if the input can be controlled (e.g., during file uploads). For example, a \"$uri = stream_get_meta_data(fopen($file, \"r\"))['uri']\" call mishandles the case where $file is data:text/plain;uri=eviluri, -- in other words, metadata can be set by an attacker.",
"references": [
"https://bugs.php.net/bug.php?id=71323",
"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=6297a117d77fa3a0df2e21ca926a92c231819cd5",
"https://usn.ubuntu.com/3566-2/",
"https://usn.ubuntu.com/3600-1/",
"https://bugs.php.net/bug.php?id=71323",
"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=6297a117d77fa3a0df2e21ca926a92c231819cd5",
"https://usn.ubuntu.com/3566-2/",
"https://usn.ubuntu.com/3600-1/"
],
"epss": 0.0056,
"cvss": 7.5
},
"CVE-2014-9709": {
"verified": false,
"ranking_epss": 0.94871,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function.",
"references": [
"http://advisories.mageia.org/MGASA-2015-0040.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html",
"http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.debian.org/security/2015/dsa-3215",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:153",
"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/73306",
"http://www.securitytracker.com/id/1033703",
"http://www.ubuntu.com/usn/USN-2987-1",
"https://bitbucket.org/libgd/gd-libgd/commits/47eb44b2e90ca88a08dca9f9a1aa9041e9587f43",
"https://bugs.php.net/bug.php?id=68601",
"https://bugzilla.redhat.com/show_bug.cgi?id=1188639",
"https://security.gentoo.org/glsa/201606-10",
"https://security.gentoo.org/glsa/201607-04",
"https://support.apple.com/HT205267",
"http://advisories.mageia.org/MGASA-2015-0040.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html",
"http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.debian.org/security/2015/dsa-3215",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:153",
"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/73306",
"http://www.securitytracker.com/id/1033703",
"http://www.ubuntu.com/usn/USN-2987-1",
"https://bitbucket.org/libgd/gd-libgd/commits/47eb44b2e90ca88a08dca9f9a1aa9041e9587f43",
"https://bugs.php.net/bug.php?id=68601",
"https://bugzilla.redhat.com/show_bug.cgi?id=1188639",
"https://security.gentoo.org/glsa/201606-10",
"https://security.gentoo.org/glsa/201607-04",
"https://support.apple.com/HT205267"
],
"epss": 0.16543,
"cvss": 5
},
"CVE-2025-69421": {
"verified": false,
"ranking_epss": 0.09875,
"cvss_v2": null,
"cvss_version": 3,
"summary": "Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer\ndereference in the PKCS12_item_decrypt_d2i_ex() function.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to\nDenial of Service for an application processing PKCS#12 files.\n\nThe PKCS12_item_decrypt_d2i_ex() function does not check whether the oct\nparameter is NULL before dereferencing it. When called from\nPKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can\nbe NULL, causing a crash. The vulnerability is limited to Denial of Service\nand cannot be escalated to achieve code execution or memory disclosure.\n\nExploiting this issue requires an attacker to provide a malformed PKCS#12 file\nto an application that processes it. For that reason the issue was assessed as\nLow severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.",
"references": [
"https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b",
"https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7",
"https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd",
"https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3",
"https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c",
"https://openssl-library.org/news/secadv/20260127.txt"
],
"epss": 0.00034,
"cvss": 7.5
},
"CVE-2015-5589": {
"verified": false,
"ranking_epss": 0.93179,
"cvss_v2": 10,
"cvss_version": 3,
"summary": "The phar_convert_to_other function in ext/phar/phar_object.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 does not validate a file pointer before a close operation, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted TAR archive that is mishandled in a Phar::convertToData call.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=bf58162ddf970f63502837f366930e44d6a992cf",
"http://openwall.com/lists/oss-security/2015/07/18/1",
"http://php.net/ChangeLog-5.php",
"http://www.debian.org/security/2015/dsa-3344",
"http://www.securityfocus.com/bid/75974",
"https://bugs.php.net/bug.php?id=69958",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=bf58162ddf970f63502837f366930e44d6a992cf",
"http://openwall.com/lists/oss-security/2015/07/18/1",
"http://php.net/ChangeLog-5.php",
"http://www.debian.org/security/2015/dsa-3344",
"http://www.securityfocus.com/bid/75974",
"https://bugs.php.net/bug.php?id=69958"
],
"epss": 0.10384,
"cvss": 9.8
},
"CVE-2016-9138": {
"verified": false,
"ranking_epss": 0.88809,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "PHP through 5.6.27 and 7.x through 7.0.12 mishandles property modification during __wakeup processing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data, as demonstrated by Exception::__toString with DateInterval::__wakeup.",
"references": [
"http://www.openwall.com/lists/oss-security/2016/11/01/2",
"http://www.securityfocus.com/bid/95268",
"https://bugs.php.net/bug.php?id=73147",
"http://www.openwall.com/lists/oss-security/2016/11/01/2",
"http://www.securityfocus.com/bid/95268",
"https://bugs.php.net/bug.php?id=73147"
],
"epss": 0.04295,
"cvss": 9.8
},
"CVE-2015-4599": {
"verified": false,
"ranking_epss": 0.91092,
"cvss_v2": 10,
"cvss_version": 3,
"summary": "The SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information, cause a denial of service (application crash), or possibly execute arbitrary code via an unexpected data type, related to a \"type confusion\" issue.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=51856a76f87ecb24fe1385342be43610fb6c86e4",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.openwall.com/lists/oss-security/2015/06/16/12",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75251",
"http://www.securitytracker.com/id/1032709",
"https://bugs.php.net/bug.php?id=69152",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=51856a76f87ecb24fe1385342be43610fb6c86e4",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.openwall.com/lists/oss-security/2015/06/16/12",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75251",
"http://www.securitytracker.com/id/1032709",
"https://bugs.php.net/bug.php?id=69152"
],
"epss": 0.06568,
"cvss": 9.8
},
"CVE-2015-4598": {
"verified": false,
"ranking_epss": 0.80708,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument save method or (2) the GD imagepsloadfont function, as demonstrated by a filename\\0.html attack that bypasses an intended configuration in which client users may write to only .html files.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://rhn.redhat.com/errata/RHSA-2015-1219.html",
"http://www.debian.org/security/2015/dsa-3344",
"http://www.openwall.com/lists/oss-security/2015/06/16/12",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75244",
"http://www.securitytracker.com/id/1032709",
"https://bugs.php.net/bug.php?id=69719",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://rhn.redhat.com/errata/RHSA-2015-1219.html",
"http://www.debian.org/security/2015/dsa-3344",
"http://www.openwall.com/lists/oss-security/2015/06/16/12",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75244",
"http://www.securitytracker.com/id/1032709",
"https://bugs.php.net/bug.php?id=69719"
],
"epss": 0.01451,
"cvss": 6.5
},
"CVE-2016-7132": {
"verified": false,
"ranking_epss": 0.94479,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly have unspecified other impact via an invalid wddxPacket XML document that is mishandled in a wddx_deserialize call, as demonstrated by a stray element inside a boolean element, leading to incorrect pop processing.",
"references": [
"http://openwall.com/lists/oss-security/2016/09/02/9",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/92767",
"http://www.securitytracker.com/id/1036680",
"https://bugs.php.net/bug.php?id=72799",
"https://github.com/php/php-src/commit/0c8a2a2cd1056b7dc403eacb5d2c0eec6ce47c6f",
"https://github.com/php/php-src/commit/a14fdb9746262549bbbb96abb87338bacd147e1b?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19",
"http://openwall.com/lists/oss-security/2016/09/02/9",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/92767",
"http://www.securitytracker.com/id/1036680",
"https://bugs.php.net/bug.php?id=72799",
"https://github.com/php/php-src/commit/0c8a2a2cd1056b7dc403eacb5d2c0eec6ce47c6f",
"https://github.com/php/php-src/commit/a14fdb9746262549bbbb96abb87338bacd147e1b?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19"
],
"epss": 0.14856,
"cvss": 7.5
},
"CVE-2016-7131": {
"verified": false,
"ranking_epss": 0.90955,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly have unspecified other impact via a malformed wddxPacket XML document that is mishandled in a wddx_deserialize call, as demonstrated by a tag that lacks a < (less than) character.",
"references": [
"http://openwall.com/lists/oss-security/2016/09/02/9",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/92768",
"http://www.securitytracker.com/id/1036680",
"https://bugs.php.net/bug.php?id=72790",
"https://github.com/php/php-src/commit/0c8a2a2cd1056b7dc403eacb5d2c0eec6ce47c6f",
"https://github.com/php/php-src/commit/a14fdb9746262549bbbb96abb87338bacd147e1b?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19",
"http://openwall.com/lists/oss-security/2016/09/02/9",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/92768",
"http://www.securitytracker.com/id/1036680",
"https://bugs.php.net/bug.php?id=72790",
"https://github.com/php/php-src/commit/0c8a2a2cd1056b7dc403eacb5d2c0eec6ce47c6f",
"https://github.com/php/php-src/commit/a14fdb9746262549bbbb96abb87338bacd147e1b?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19"
],
"epss": 0.06375,
"cvss": 7.5
},
"CVE-2021-23841": {
"verified": false,
"ranking_epss": 0.71152,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).",
"references": [
"http://seclists.org/fulldisclosure/2021/May/67",
"http://seclists.org/fulldisclosure/2021/May/68",
"http://seclists.org/fulldisclosure/2021/May/70",
"https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807",
"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846",
"https://security.gentoo.org/glsa/202103-03",
"https://security.netapp.com/advisory/ntap-20210219-0009/",
"https://security.netapp.com/advisory/ntap-20210513-0002/",
"https://security.netapp.com/advisory/ntap-20240621-0006/",
"https://support.apple.com/kb/HT212528",
"https://support.apple.com/kb/HT212529",
"https://support.apple.com/kb/HT212534",
"https://www.debian.org/security/2021/dsa-4855",
"https://www.openssl.org/news/secadv/20210216.txt",
"https://www.oracle.com//security-alerts/cpujul2021.html",
"https://www.oracle.com/security-alerts/cpuApr2021.html",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpuoct2021.html",
"https://www.tenable.com/security/tns-2021-03",
"https://www.tenable.com/security/tns-2021-09",
"http://seclists.org/fulldisclosure/2021/May/67",
"http://seclists.org/fulldisclosure/2021/May/68",
"http://seclists.org/fulldisclosure/2021/May/70",
"https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807",
"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846",
"https://security.gentoo.org/glsa/202103-03",
"https://security.netapp.com/advisory/ntap-20210219-0009/",
"https://security.netapp.com/advisory/ntap-20210513-0002/",
"https://security.netapp.com/advisory/ntap-20240621-0006/",
"https://support.apple.com/kb/HT212528",
"https://support.apple.com/kb/HT212529",
"https://support.apple.com/kb/HT212534",
"https://www.debian.org/security/2021/dsa-4855",
"https://www.openssl.org/news/secadv/20210216.txt",
"https://www.oracle.com//security-alerts/cpujul2021.html",
"https://www.oracle.com/security-alerts/cpuApr2021.html",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpuoct2021.html",
"https://www.tenable.com/security/tns-2021-03",
"https://www.tenable.com/security/tns-2021-09"
],
"epss": 0.00665,
"cvss": 5.9
},
"CVE-2013-6438": {
"verified": false,
"ranking_epss": 0.96645,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "The dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server before 2.4.8 does not properly remove whitespace characters from CDATA sections, which allows remote attackers to cause a denial of service (daemon crash) via a crafted DAV WRITE request.",
"references": [
"http://advisories.mageia.org/MGASA-2014-0135.html",
"http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html",
"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://marc.info/?l=bugtraq&m=141017844705317&w=2",
"http://marc.info/?l=bugtraq&m=141390017113542&w=2",
"http://seclists.org/fulldisclosure/2014/Dec/23",
"http://secunia.com/advisories/58230",
"http://secunia.com/advisories/59315",
"http://secunia.com/advisories/59345",
"http://secunia.com/advisories/60536",
"http://security.gentoo.org/glsa/glsa-201408-12.xml",
"http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/dav/main/util.c",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/dav/main/util.c?r1=1528718&r2=1556428&diff_format=h",
"http://www-01.ibm.com/support/docview.wss?uid=swg21669554",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676091",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676092",
"http://www.apache.org/dist/httpd/CHANGES_2.4.9",
"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html",
"http://www.securityfocus.com/archive/1/534161/100/0/threaded",
"http://www.securityfocus.com/bid/66303",
"http://www.ubuntu.com/usn/USN-2152-1",
"http://www.vmware.com/security/advisories/VMSA-2014-0012.html",
"https://blogs.oracle.com/sunsecurity/entry/multiple_input_validation_vulnerabilities_in1",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://puppet.com/security/cve/cve-2013-6438",
"https://support.apple.com/HT204659",
"https://support.apple.com/kb/HT6535",
"http://advisories.mageia.org/MGASA-2014-0135.html",
"http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html",
"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://marc.info/?l=bugtraq&m=141017844705317&w=2",
"http://marc.info/?l=bugtraq&m=141390017113542&w=2",
"http://seclists.org/fulldisclosure/2014/Dec/23",
"http://secunia.com/advisories/58230",
"http://secunia.com/advisories/59315",
"http://secunia.com/advisories/59345",
"http://secunia.com/advisories/60536",
"http://security.gentoo.org/glsa/glsa-201408-12.xml",
"http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/dav/main/util.c",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/dav/main/util.c?r1=1528718&r2=1556428&diff_format=h",
"http://www-01.ibm.com/support/docview.wss?uid=swg21669554",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676091",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676092",
"http://www.apache.org/dist/httpd/CHANGES_2.4.9",
"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html",
"http://www.securityfocus.com/archive/1/534161/100/0/threaded",
"http://www.securityfocus.com/bid/66303",
"http://www.ubuntu.com/usn/USN-2152-1",
"http://www.vmware.com/security/advisories/VMSA-2014-0012.html",
"https://blogs.oracle.com/sunsecurity/entry/multiple_input_validation_vulnerabilities_in1",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://puppet.com/security/cve/cve-2013-6438",
"https://support.apple.com/HT204659",
"https://support.apple.com/kb/HT6535"
],
"epss": 0.30247,
"cvss": 5
},
"CVE-2021-26691": {
"verified": false,
"ranking_epss": 0.97325,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow",
"references": [
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://www.openwall.com/lists/oss-security/2021/06/10/7",
"https://lists.apache.org/thread.html/r50cae1b71f1e7421069036b213c26da7d8f47dd59874e3bd956959fe%40%3Cannounce.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r7f2b70b621651548f4b6f027552f1dd91705d7111bb5d15cda0a68dd%40%3Cdev.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re026d3da9d7824bd93b9f871c0fdda978d960c7e62d8c43cba8d0bf3%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2021/07/msg00006.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/",
"https://security.gentoo.org/glsa/202107-38",
"https://security.netapp.com/advisory/ntap-20210702-0001/",
"https://www.debian.org/security/2021/dsa-4937",
"https://www.oracle.com/security-alerts/cpujan2022.html",
"https://www.oracle.com/security-alerts/cpuoct2021.html",
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://www.openwall.com/lists/oss-security/2021/06/10/7",
"https://lists.apache.org/thread.html/r50cae1b71f1e7421069036b213c26da7d8f47dd59874e3bd956959fe%40%3Cannounce.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r7f2b70b621651548f4b6f027552f1dd91705d7111bb5d15cda0a68dd%40%3Cdev.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re026d3da9d7824bd93b9f871c0fdda978d960c7e62d8c43cba8d0bf3%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2021/07/msg00006.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/",
"https://security.gentoo.org/glsa/202107-38",
"https://security.netapp.com/advisory/ntap-20210702-0001/",
"https://www.debian.org/security/2021/dsa-4937",
"https://www.oracle.com/security-alerts/cpujan2022.html",
"https://www.oracle.com/security-alerts/cpuoct2021.html"
],
"epss": 0.40357,
"cvss": 9.8
},
"CVE-2019-10098": {
"verified": false,
"ranking_epss": 0.9911,
"cvss_v2": 5.8,
"cvss_version": 3,
"summary": "In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL.",
"references": [
"http://www.openwall.com/lists/oss-security/2020/04/01/4",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r3c5c3104813c1c5508b55564b66546933079250a46ce50eee90b2e36%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r5d12ffc80685b0df1d6801e68000a7707dd694fe32e4f221de67c210%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://www.oracle.com/security-alerts/cpuApr2021.html",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/security-alerts/cpujan2020.html",
"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
"http://www.openwall.com/lists/oss-security/2020/04/01/4",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r3c5c3104813c1c5508b55564b66546933079250a46ce50eee90b2e36%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r5d12ffc80685b0df1d6801e68000a7707dd694fe32e4f221de67c210%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://www.oracle.com/security-alerts/cpuApr2021.html",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/security-alerts/cpujan2020.html",
"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
],
"epss": 0.80306,
"cvss": 6.1
},
"CVE-2015-4021": {
"verified": false,
"ranking_epss": 0.97407,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that the first character of a filename is different from the \\0 character, which allows remote attackers to cause a denial of service (integer underflow and memory corruption) via a crafted entry in a tar archive.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html",
"http://lists.opensuse.org/opensuse-updates/2015-06/msg00002.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://rhn.redhat.com/errata/RHSA-2015-1219.html",
"http://www.debian.org/security/2015/dsa-3280",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/74700",
"http://www.securitytracker.com/id/1032433",
"https://bugs.php.net/bug.php?id=69453",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/kb/HT205031",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html",
"http://lists.opensuse.org/opensuse-updates/2015-06/msg00002.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://rhn.redhat.com/errata/RHSA-2015-1219.html",
"http://www.debian.org/security/2015/dsa-3280",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/74700",
"http://www.securitytracker.com/id/1032433",
"https://bugs.php.net/bug.php?id=69453",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/kb/HT205031"
],
"epss": 0.42026,
"cvss": 5
},
"CVE-2015-2305": {
"verified": false,
"ranking_epss": 0.96505,
"cvss_v2": 6.8,
"cvss_version": 2,
"summary": "Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular expression that leads to a heap-based buffer overflow.",
"references": [
"http://blog.clamav.net/2015/04/clamav-0987-has-been-released.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html",
"http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html",
"http://lists.opensuse.org/opensuse-updates/2015-05/msg00024.html",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://openwall.com/lists/oss-security/2015/02/07/14",
"http://openwall.com/lists/oss-security/2015/03/11/8",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://www.debian.org/security/2015/dsa-3195",
"http://www.kb.cert.org/vuls/id/695940",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/72611",
"http://www.securitytracker.com/id/1031947",
"http://www.ubuntu.com/usn/USN-2572-1",
"http://www.ubuntu.com/usn/USN-2594-1",
"https://guidovranken.wordpress.com/2015/02/04/full-disclosure-heap-overflow-in-h-spencers-regex-library-on-32-bit-systems/",
"https://support.apple.com/HT205267",
"http://blog.clamav.net/2015/04/clamav-0987-has-been-released.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html",
"http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html",
"http://lists.opensuse.org/opensuse-updates/2015-05/msg00024.html",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://openwall.com/lists/oss-security/2015/02/07/14",
"http://openwall.com/lists/oss-security/2015/03/11/8",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://www.debian.org/security/2015/dsa-3195",
"http://www.kb.cert.org/vuls/id/695940",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/72611",
"http://www.securitytracker.com/id/1031947",
"http://www.ubuntu.com/usn/USN-2572-1",
"http://www.ubuntu.com/usn/USN-2594-1",
"https://guidovranken.wordpress.com/2015/02/04/full-disclosure-heap-overflow-in-h-spencers-regex-library-on-32-bit-systems/",
"https://support.apple.com/HT205267"
],
"epss": 0.28664,
"cvss": 6.8
},
"CVE-2015-4025": {
"verified": false,
"ranking_epss": 0.90706,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \\x00 character in certain situations, which allows remote attackers to bypass intended extension restrictions and access files or directories with unexpected names via a crafted argument to (1) set_include_path, (2) tempnam, (3) rmdir, or (4) readlink. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1219.html",
"http://www.debian.org/security/2015/dsa-3280",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/74904",
"http://www.securitytracker.com/id/1032431",
"https://bugs.php.net/bug.php?id=69418",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/kb/HT205031",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1219.html",
"http://www.debian.org/security/2015/dsa-3280",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/74904",
"http://www.securitytracker.com/id/1032431",
"https://bugs.php.net/bug.php?id=69418",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/kb/HT205031"
],
"epss": 0.06077,
"cvss": 7.5
},
"CVE-2015-4024": {
"verified": false,
"ranking_epss": 0.98884,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service (CPU consumption) via crafted form data that triggers an improper order-of-growth outcome.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html",
"http://lists.opensuse.org/opensuse-updates/2015-06/msg00002.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://rhn.redhat.com/errata/RHSA-2015-1219.html",
"http://www.debian.org/security/2015/dsa-3280",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/74903",
"http://www.securitytracker.com/id/1032432",
"https://bugs.php.net/bug.php?id=69364",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763",
"https://support.apple.com/kb/HT205031",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html",
"http://lists.opensuse.org/opensuse-updates/2015-06/msg00002.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://rhn.redhat.com/errata/RHSA-2015-1219.html",
"http://www.debian.org/security/2015/dsa-3280",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/74903",
"http://www.securitytracker.com/id/1032432",
"https://bugs.php.net/bug.php?id=69364",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763",
"https://support.apple.com/kb/HT205031"
],
"epss": 0.75519,
"cvss": 5
},
"CVE-2015-2301": {
"verified": false,
"ranking_epss": 0.93467,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted renaming of a Phar archive to the name of an existing file.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=b2cf3f064b8f5efef89bb084521b61318c71781b",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html",
"http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://openwall.com/lists/oss-security/2015/03/15/6",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.debian.org/security/2015/dsa-3198",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:079",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/73037",
"http://www.securitytracker.com/id/1031949",
"http://www.ubuntu.com/usn/USN-2535-1",
"https://bugs.php.net/bug.php?id=68901",
"https://bugzilla.redhat.com/show_bug.cgi?id=1194747",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205267",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=b2cf3f064b8f5efef89bb084521b61318c71781b",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html",
"http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://openwall.com/lists/oss-security/2015/03/15/6",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.debian.org/security/2015/dsa-3198",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:079",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/73037",
"http://www.securitytracker.com/id/1031949",
"http://www.ubuntu.com/usn/USN-2535-1",
"https://bugs.php.net/bug.php?id=68901",
"https://bugzilla.redhat.com/show_bug.cgi?id=1194747",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205267"
],
"epss": 0.11208,
"cvss": 7.5
},
"CVE-2022-26377": {
"verified": false,
"ranking_epss": 0.97301,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.53 and prior versions.",
"references": [
"http://www.openwall.com/lists/oss-security/2022/06/08/2",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7QUGG2QZWHTITMABFLVXA4DNYUOTPWYQ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20220624-0005/",
"http://www.openwall.com/lists/oss-security/2022/06/08/2",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7QUGG2QZWHTITMABFLVXA4DNYUOTPWYQ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20220624-0005/"
],
"epss": 0.3988,
"cvss": 7.5
},
"CVE-2016-10158": {
"verified": false,
"ranking_epss": 0.89649,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "The exif_convert_any_to_int function in ext/exif/exif.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (application crash) via crafted EXIF data that triggers an attempt to divide the minimum representable negative integer by -1.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.debian.org/security/2017/dsa-3783",
"http://www.securityfocus.com/bid/95764",
"http://www.securitytracker.com/id/1037659",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=73737",
"https://github.com/php/php-src/commit/1cda0d7c2ffb62d8331c64e703131d9cabdc03ea",
"https://security.gentoo.org/glsa/201702-29",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.tenable.com/security/tns-2017-04",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.debian.org/security/2017/dsa-3783",
"http://www.securityfocus.com/bid/95764",
"http://www.securitytracker.com/id/1037659",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=73737",
"https://github.com/php/php-src/commit/1cda0d7c2ffb62d8331c64e703131d9cabdc03ea",
"https://security.gentoo.org/glsa/201702-29",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.tenable.com/security/tns-2017-04"
],
"epss": 0.04988,
"cvss": 7.5
},
"CVE-2016-10159": {
"verified": false,
"ranking_epss": 0.92113,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "Integer overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service (memory consumption or application crash) via a truncated manifest entry in a PHAR archive.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.debian.org/security/2017/dsa-3783",
"http://www.securityfocus.com/bid/95774",
"http://www.securitytracker.com/id/1037659",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=73764",
"https://github.com/php/php-src/commit/ca46d0acbce55019b970fcd4c1e8a10edfdded93",
"https://security.gentoo.org/glsa/201702-29",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.tenable.com/security/tns-2017-04",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.debian.org/security/2017/dsa-3783",
"http://www.securityfocus.com/bid/95774",
"http://www.securitytracker.com/id/1037659",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=73764",
"https://github.com/php/php-src/commit/ca46d0acbce55019b970fcd4c1e8a10edfdded93",
"https://security.gentoo.org/glsa/201702-29",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.tenable.com/security/tns-2017-04"
],
"epss": 0.08084,
"cvss": 7.5
},
"CVE-2015-3152": {
"verified": false,
"ranking_epss": 0.97875,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a \"BACKRONYM\" attack.",
"references": [
"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161436.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161625.html",
"http://mysqlblog.fivefarmers.com/2014/04/02/redefining-ssl-option/",
"http://mysqlblog.fivefarmers.com/2015/04/29/ssltls-in-5-6-and-5-5-ocert-advisory/",
"http://packetstormsecurity.com/files/131688/MySQL-SSL-TLS-Downgrade.html",
"http://rhn.redhat.com/errata/RHSA-2015-1646.html",
"http://rhn.redhat.com/errata/RHSA-2015-1647.html",
"http://rhn.redhat.com/errata/RHSA-2015-1665.html",
"http://www.debian.org/security/2015/dsa-3311",
"http://www.ocert.org/advisories/ocert-2015-003.html",
"http://www.securityfocus.com/archive/1/535397/100/1100/threaded",
"http://www.securityfocus.com/bid/74398",
"http://www.securitytracker.com/id/1032216",
"https://access.redhat.com/security/cve/cve-2015-3152",
"https://github.com/mysql/mysql-server/commit/3bd5589e1a5a93f9c224badf983cd65c45215390",
"https://jira.mariadb.org/browse/MDEV-7937",
"https://www.duosecurity.com/blog/backronym-mysql-vulnerability",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161436.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161625.html",
"http://mysqlblog.fivefarmers.com/2014/04/02/redefining-ssl-option/",
"http://mysqlblog.fivefarmers.com/2015/04/29/ssltls-in-5-6-and-5-5-ocert-advisory/",
"http://packetstormsecurity.com/files/131688/MySQL-SSL-TLS-Downgrade.html",
"http://rhn.redhat.com/errata/RHSA-2015-1646.html",
"http://rhn.redhat.com/errata/RHSA-2015-1647.html",
"http://rhn.redhat.com/errata/RHSA-2015-1665.html",
"http://www.debian.org/security/2015/dsa-3311",
"http://www.ocert.org/advisories/ocert-2015-003.html",
"http://www.securityfocus.com/archive/1/535397/100/1100/threaded",
"http://www.securityfocus.com/bid/74398",
"http://www.securitytracker.com/id/1032216",
"https://access.redhat.com/security/cve/cve-2015-3152",
"https://github.com/mysql/mysql-server/commit/3bd5589e1a5a93f9c224badf983cd65c45215390",
"https://jira.mariadb.org/browse/MDEV-7937",
"https://www.duosecurity.com/blog/backronym-mysql-vulnerability"
],
"epss": 0.51669,
"cvss": 5.9
},
"CVE-2014-1943": {
"verified": false,
"ranking_epss": 0.95678,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and crash) via a crafted indirect offset value in the magic of a file.",
"references": [
"http://lists.opensuse.org/opensuse-updates/2014-03/msg00034.html",
"http://lists.opensuse.org/opensuse-updates/2014-03/msg00037.html",
"http://mx.gw.com/pipermail/file/2014/001327.html",
"http://mx.gw.com/pipermail/file/2014/001330.html",
"http://mx.gw.com/pipermail/file/2014/001334.html",
"http://mx.gw.com/pipermail/file/2014/001337.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://support.apple.com/kb/HT6443",
"http://www.debian.org/security/2014/dsa-2861",
"http://www.debian.org/security/2014/dsa-2868",
"http://www.php.net/ChangeLog-5.php",
"http://www.ubuntu.com/usn/USN-2123-1",
"http://www.ubuntu.com/usn/USN-2126-1",
"https://github.com/glensc/file/blob/FILE5_17/ChangeLog",
"http://lists.opensuse.org/opensuse-updates/2014-03/msg00034.html",
"http://lists.opensuse.org/opensuse-updates/2014-03/msg00037.html",
"http://mx.gw.com/pipermail/file/2014/001327.html",
"http://mx.gw.com/pipermail/file/2014/001330.html",
"http://mx.gw.com/pipermail/file/2014/001334.html",
"http://mx.gw.com/pipermail/file/2014/001337.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://support.apple.com/kb/HT6443",
"http://www.debian.org/security/2014/dsa-2861",
"http://www.debian.org/security/2014/dsa-2868",
"http://www.php.net/ChangeLog-5.php",
"http://www.ubuntu.com/usn/USN-2123-1",
"http://www.ubuntu.com/usn/USN-2126-1",
"https://github.com/glensc/file/blob/FILE5_17/ChangeLog"
],
"epss": 0.21485,
"cvss": 5
},
"CVE-2014-3487": {
"verified": false,
"ranking_epss": 0.95347,
"cvss_v2": 4.3,
"cvss_version": 2,
"summary": "The cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate a stream offset, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF file.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html",
"http://marc.info/?l=bugtraq&m=141017844705317&w=2",
"http://mx.gw.com/pipermail/file/2014/001553.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/59794",
"http://secunia.com/advisories/59831",
"http://support.apple.com/kb/HT6443",
"http://www.debian.org/security/2014/dsa-2974",
"http://www.debian.org/security/2014/dsa-3021",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/68120",
"https://bugs.php.net/bug.php?id=67413",
"https://github.com/file/file/commit/93e063ee374b6a75729df9e7201fb511e47e259d",
"https://support.apple.com/HT204659",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html",
"http://marc.info/?l=bugtraq&m=141017844705317&w=2",
"http://mx.gw.com/pipermail/file/2014/001553.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/59794",
"http://secunia.com/advisories/59831",
"http://support.apple.com/kb/HT6443",
"http://www.debian.org/security/2014/dsa-2974",
"http://www.debian.org/security/2014/dsa-3021",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/68120",
"https://bugs.php.net/bug.php?id=67413",
"https://github.com/file/file/commit/93e063ee374b6a75729df9e7201fb511e47e259d",
"https://support.apple.com/HT204659"
],
"epss": 0.19441,
"cvss": 4.3
},
"CVE-2020-1971": {
"verified": false,
"ranking_epss": 0.57243,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).",
"references": [
"http://www.openwall.com/lists/oss-security/2021/09/14/2",
"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920",
"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676",
"https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E",
"https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html",
"https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/",
"https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc",
"https://security.gentoo.org/glsa/202012-13",
"https://security.netapp.com/advisory/ntap-20201218-0005/",
"https://security.netapp.com/advisory/ntap-20210513-0002/",
"https://security.netapp.com/advisory/ntap-20240621-0006/",
"https://www.debian.org/security/2020/dsa-4807",
"https://www.openssl.org/news/secadv/20201208.txt",
"https://www.oracle.com//security-alerts/cpujul2021.html",
"https://www.oracle.com/security-alerts/cpuApr2021.html",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujan2021.html",
"https://www.oracle.com/security-alerts/cpuoct2021.html",
"https://www.tenable.com/security/tns-2020-11",
"https://www.tenable.com/security/tns-2021-09",
"https://www.tenable.com/security/tns-2021-10",
"http://www.openwall.com/lists/oss-security/2021/09/14/2",
"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920",
"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676",
"https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E",
"https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html",
"https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/",
"https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc",
"https://security.gentoo.org/glsa/202012-13",
"https://security.netapp.com/advisory/ntap-20201218-0005/",
"https://security.netapp.com/advisory/ntap-20210513-0002/",
"https://security.netapp.com/advisory/ntap-20240621-0006/",
"https://www.debian.org/security/2020/dsa-4807",
"https://www.openssl.org/news/secadv/20201208.txt",
"https://www.oracle.com//security-alerts/cpujul2021.html",
"https://www.oracle.com/security-alerts/cpuApr2021.html",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujan2021.html",
"https://www.oracle.com/security-alerts/cpuoct2021.html",
"https://www.tenable.com/security/tns-2020-11",
"https://www.tenable.com/security/tns-2021-09",
"https://www.tenable.com/security/tns-2021-10"
],
"epss": 0.00348,
"cvss": 5.9
},
"CVE-2009-1390": {
"verified": false,
"ranking_epss": 0.62799,
"cvss_v2": 6.8,
"cvss_version": 2,
"summary": "Mutt 1.5.19, when linked against (1) OpenSSL (mutt_ssl.c) or (2) GnuTLS (mutt_ssl_gnutls.c), allows connections when only one TLS certificate in the chain is accepted instead of verifying the entire chain, which allows remote attackers to spoof trusted servers via a man-in-the-middle attack.",
"references": [
"http://dev.mutt.org/hg/mutt/rev/64bf199c8d8a",
"http://dev.mutt.org/hg/mutt/rev/8f11dd00c770",
"http://www.openwall.com/lists/oss-security/2009/06/10/2",
"http://www.securityfocus.com/bid/35288",
"https://exchange.xforce.ibmcloud.com/vulnerabilities/51068",
"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00715.html",
"http://dev.mutt.org/hg/mutt/rev/64bf199c8d8a",
"http://dev.mutt.org/hg/mutt/rev/8f11dd00c770",
"http://www.openwall.com/lists/oss-security/2009/06/10/2",
"http://www.securityfocus.com/bid/35288",
"https://exchange.xforce.ibmcloud.com/vulnerabilities/51068",
"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00715.html"
],
"epss": 0.00435,
"cvss": 6.8
},
"CVE-2023-5678": {
"verified": false,
"ranking_epss": 0.70922,
"cvss_v2": null,
"cvss_version": 3,
"summary": "Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays. Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions. An application calling any of those other\nfunctions may similarly be affected. The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
"references": [
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6",
"https://www.openssl.org/news/secadv/20231106.txt",
"http://www.openwall.com/lists/oss-security/2024/03/11/1",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6",
"https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html",
"https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html",
"https://security.netapp.com/advisory/ntap-20231130-0010/",
"https://www.openssl.org/news/secadv/20231106.txt"
],
"epss": 0.00656,
"cvss": 5.3
},
"CVE-2021-3733": {
"verified": false,
"ranking_epss": 0.71169,
"cvss_v2": 4,
"cvss_version": 3,
"summary": "There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.",
"references": [
"https://bugs.python.org/issue43075",
"https://bugzilla.redhat.com/show_bug.cgi?id=1995234",
"https://github.com/python/cpython/commit/7215d1ae25525c92b026166f9d5cac85fb",
"https://github.com/python/cpython/pull/24391",
"https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html",
"https://lists.debian.org/debian-lts-announce/2023/06/msg00039.html",
"https://security.netapp.com/advisory/ntap-20220407-0001/",
"https://ubuntu.com/security/CVE-2021-3733",
"https://bugs.python.org/issue43075",
"https://bugzilla.redhat.com/show_bug.cgi?id=1995234",
"https://github.com/python/cpython/commit/7215d1ae25525c92b026166f9d5cac85fb",
"https://github.com/python/cpython/pull/24391",
"https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html",
"https://lists.debian.org/debian-lts-announce/2023/06/msg00039.html",
"https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html",
"https://security.netapp.com/advisory/ntap-20220407-0001/",
"https://ubuntu.com/security/CVE-2021-3733"
],
"epss": 0.00666,
"cvss": 6.5
},
"CVE-2014-4698": {
"verified": false,
"ranking_epss": 0.63828,
"cvss_v2": 4.6,
"cvss_version": 2,
"summary": "Use-after-free vulnerability in ext/spl/spl_array.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact via crafted ArrayIterator usage within applications in certain web-hosting environments.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-07/msg00035.html",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html",
"http://rhn.redhat.com/errata/RHSA-2014-1326.html",
"http://rhn.redhat.com/errata/RHSA-2014-1327.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/54553",
"http://secunia.com/advisories/59831",
"http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"https://bugs.php.net/bug.php?id=67539",
"https://support.apple.com/HT204659",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-07/msg00035.html",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html",
"http://rhn.redhat.com/errata/RHSA-2014-1326.html",
"http://rhn.redhat.com/errata/RHSA-2014-1327.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/54553",
"http://secunia.com/advisories/59831",
"http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"https://bugs.php.net/bug.php?id=67539",
"https://support.apple.com/HT204659"
],
"epss": 0.00457,
"cvss": 4.6
},
"CVE-2015-3329": {
"verified": false,
"ranking_epss": 0.96614,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allow remote attackers to execute arbitrary code via a crafted length value in a (1) tar, (2) phar, or (3) ZIP archive.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f59b67ae50064560d7bfcdb0d6a8ab284179053c",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.debian.org/security/2015/dsa-3280",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/74240",
"http://www.securitytracker.com/id/1032145",
"http://www.ubuntu.com/usn/USN-2572-1",
"https://bugs.php.net/bug.php?id=69441",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205267",
"https://support.apple.com/kb/HT205031",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f59b67ae50064560d7bfcdb0d6a8ab284179053c",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.debian.org/security/2015/dsa-3280",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/74240",
"http://www.securitytracker.com/id/1032145",
"http://www.ubuntu.com/usn/USN-2572-1",
"https://bugs.php.net/bug.php?id=69441",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205267",
"https://support.apple.com/kb/HT205031"
],
"epss": 0.29962,
"cvss": 7.5
},
"CVE-2022-4900": {
"verified": false,
"ranking_epss": 0.20111,
"cvss_v2": null,
"cvss_version": 3,
"summary": "A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.",
"references": [
"https://access.redhat.com/security/cve/CVE-2022-4900",
"https://bugzilla.redhat.com/show_bug.cgi?id=2179880",
"https://security.netapp.com/advisory/ntap-20231130-0008/",
"https://access.redhat.com/security/cve/CVE-2022-4900",
"https://bugzilla.redhat.com/show_bug.cgi?id=2179880",
"https://lists.debian.org/debian-lts-announce/2024/10/msg00011.html",
"https://security.netapp.com/advisory/ntap-20231130-0008/"
],
"epss": 0.00065,
"cvss": 6.2
},
"CVE-2021-23840": {
"verified": false,
"ranking_epss": 0.69931,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).",
"references": [
"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2",
"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10366",
"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
"https://security.gentoo.org/glsa/202103-03",
"https://security.netapp.com/advisory/ntap-20210219-0009/",
"https://security.netapp.com/advisory/ntap-20240621-0006/",
"https://www.debian.org/security/2021/dsa-4855",
"https://www.openssl.org/news/secadv/20210216.txt",
"https://www.oracle.com//security-alerts/cpujul2021.html",
"https://www.oracle.com/security-alerts/cpuApr2021.html",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujan2022.html",
"https://www.oracle.com/security-alerts/cpuoct2021.html",
"https://www.tenable.com/security/tns-2021-03",
"https://www.tenable.com/security/tns-2021-09",
"https://www.tenable.com/security/tns-2021-10",
"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2",
"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10366",
"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
"https://security.gentoo.org/glsa/202103-03",
"https://security.netapp.com/advisory/ntap-20210219-0009/",
"https://security.netapp.com/advisory/ntap-20240621-0006/",
"https://www.debian.org/security/2021/dsa-4855",
"https://www.openssl.org/news/secadv/20210216.txt",
"https://www.oracle.com//security-alerts/cpujul2021.html",
"https://www.oracle.com/security-alerts/cpuApr2021.html",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujan2022.html",
"https://www.oracle.com/security-alerts/cpuoct2021.html",
"https://www.tenable.com/security/tns-2021-03",
"https://www.tenable.com/security/tns-2021-09",
"https://www.tenable.com/security/tns-2021-10"
],
"epss": 0.00619,
"cvss": 7.5
},
"CVE-2015-3411": {
"verified": false,
"ranking_epss": 0.52092,
"cvss_v2": 6.4,
"cvss_version": 3,
"summary": "PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument load method, (2) the xmlwriter_open_uri function, (3) the finfo_file function, or (4) the hash_hmac_file function, as demonstrated by a filename\\0.xml attack that bypasses an intended configuration in which client users may read only .xml files.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=4435b9142ff9813845d5c97ab29a5d637bedb257",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75255",
"http://www.securitytracker.com/id/1032709",
"https://bugs.php.net/bug.php?id=69353",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=4435b9142ff9813845d5c97ab29a5d637bedb257",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75255",
"http://www.securitytracker.com/id/1032709",
"https://bugs.php.net/bug.php?id=69353"
],
"epss": 0.00288,
"cvss": 6.5
},
"CVE-2016-7130": {
"verified": false,
"ranking_epss": 0.84363,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "The php_wddx_pop_element function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly have unspecified other impact via an invalid base64 binary value, as demonstrated by a wddx_deserialize call that mishandles a binary element in a wddxPacket XML document.",
"references": [
"http://openwall.com/lists/oss-security/2016/09/02/9",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/92764",
"http://www.securitytracker.com/id/1036680",
"https://bugs.php.net/bug.php?id=72750",
"https://github.com/php/php-src/commit/698a691724c0a949295991e5df091ce16f899e02?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19",
"http://openwall.com/lists/oss-security/2016/09/02/9",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/92764",
"http://www.securitytracker.com/id/1036680",
"https://bugs.php.net/bug.php?id=72750",
"https://github.com/php/php-src/commit/698a691724c0a949295991e5df091ce16f899e02?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19"
],
"epss": 0.02206,
"cvss": 7.5
},
"CVE-2016-9934": {
"verified": false,
"ranking_epss": 0.93602,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string.",
"references": [
"http://lists.opensuse.org/opensuse-updates/2016-12/msg00142.html",
"http://lists.opensuse.org/opensuse-updates/2017-01/msg00034.html",
"http://lists.opensuse.org/opensuse-updates/2017-01/msg00054.html",
"http://www.openwall.com/lists/oss-security/2016/12/12/2",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/94845",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=73331",
"https://github.com/php/php-src/commit/6045de69c7dedcba3eadf7c4bba424b19c81d00d",
"http://lists.opensuse.org/opensuse-updates/2016-12/msg00142.html",
"http://lists.opensuse.org/opensuse-updates/2017-01/msg00034.html",
"http://lists.opensuse.org/opensuse-updates/2017-01/msg00054.html",
"http://www.openwall.com/lists/oss-security/2016/12/12/2",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/94845",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=73331",
"https://github.com/php/php-src/commit/6045de69c7dedcba3eadf7c4bba424b19c81d00d"
],
"epss": 0.11579,
"cvss": 7.5
},
"CVE-2016-5699": {
"verified": false,
"ranking_epss": 0.97013,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL.",
"references": [
"http://blog.blindspotsecurity.com/2016/06/advisory-http-header-injection-in.html",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"http://rhn.redhat.com/errata/RHSA-2016-1626.html",
"http://rhn.redhat.com/errata/RHSA-2016-1627.html",
"http://rhn.redhat.com/errata/RHSA-2016-1628.html",
"http://rhn.redhat.com/errata/RHSA-2016-1629.html",
"http://rhn.redhat.com/errata/RHSA-2016-1630.html",
"http://www.openwall.com/lists/oss-security/2016/06/14/7",
"http://www.openwall.com/lists/oss-security/2016/06/15/12",
"http://www.openwall.com/lists/oss-security/2016/06/16/2",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html",
"http://www.securityfocus.com/bid/91226",
"http://www.splunk.com/view/SP-CAAAPSV",
"http://www.splunk.com/view/SP-CAAAPUE",
"https://docs.python.org/3.4/whatsnew/changelog.html#python-3-4-4",
"https://hg.python.org/cpython/raw-file/v2.7.10/Misc/NEWS",
"https://hg.python.org/cpython/rev/1c45047c5102",
"https://hg.python.org/cpython/rev/bf3e1c9b80e9",
"https://lists.debian.org/debian-lts-announce/2019/02/msg00011.html",
"http://blog.blindspotsecurity.com/2016/06/advisory-http-header-injection-in.html",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"http://rhn.redhat.com/errata/RHSA-2016-1626.html",
"http://rhn.redhat.com/errata/RHSA-2016-1627.html",
"http://rhn.redhat.com/errata/RHSA-2016-1628.html",
"http://rhn.redhat.com/errata/RHSA-2016-1629.html",
"http://rhn.redhat.com/errata/RHSA-2016-1630.html",
"http://www.openwall.com/lists/oss-security/2016/06/14/7",
"http://www.openwall.com/lists/oss-security/2016/06/15/12",
"http://www.openwall.com/lists/oss-security/2016/06/16/2",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html",
"http://www.securityfocus.com/bid/91226",
"http://www.splunk.com/view/SP-CAAAPSV",
"http://www.splunk.com/view/SP-CAAAPUE",
"https://docs.python.org/3.4/whatsnew/changelog.html#python-3-4-4",
"https://hg.python.org/cpython/raw-file/v2.7.10/Misc/NEWS",
"https://hg.python.org/cpython/rev/1c45047c5102",
"https://hg.python.org/cpython/rev/bf3e1c9b80e9",
"https://lists.debian.org/debian-lts-announce/2019/02/msg00011.html"
],
"epss": 0.35276,
"cvss": 6.1
},
"CVE-2017-9788": {
"verified": false,
"ranking_epss": 0.97919,
"cvss_v2": 6.4,
"cvss_version": 3,
"summary": "In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no '=' assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service.",
"references": [
"http://www.debian.org/security/2017/dsa-3913",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
"http://www.securityfocus.com/bid/99569",
"http://www.securitytracker.com/id/1038906",
"https://access.redhat.com/errata/RHSA-2017:2478",
"https://access.redhat.com/errata/RHSA-2017:2479",
"https://access.redhat.com/errata/RHSA-2017:2483",
"https://access.redhat.com/errata/RHSA-2017:2708",
"https://access.redhat.com/errata/RHSA-2017:2709",
"https://access.redhat.com/errata/RHSA-2017:2710",
"https://access.redhat.com/errata/RHSA-2017:3113",
"https://access.redhat.com/errata/RHSA-2017:3114",
"https://access.redhat.com/errata/RHSA-2017:3193",
"https://access.redhat.com/errata/RHSA-2017:3194",
"https://access.redhat.com/errata/RHSA-2017:3195",
"https://access.redhat.com/errata/RHSA-2017:3239",
"https://access.redhat.com/errata/RHSA-2017:3240",
"https://httpd.apache.org/security/vulnerabilities_22.html",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/0dd69204a6bd643cc4e9ccd008f07a9375525d977c6ebeb07a881afb%40%3Cannounce.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
"https://security.gentoo.org/glsa/201710-32",
"https://security.netapp.com/advisory/ntap-20170911-0002/",
"https://support.apple.com/HT208221",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",
"https://www.tenable.com/security/tns-2019-09",
"http://www.debian.org/security/2017/dsa-3913",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
"http://www.securityfocus.com/bid/99569",
"http://www.securitytracker.com/id/1038906",
"https://access.redhat.com/errata/RHSA-2017:2478",
"https://access.redhat.com/errata/RHSA-2017:2479",
"https://access.redhat.com/errata/RHSA-2017:2483",
"https://access.redhat.com/errata/RHSA-2017:2708",
"https://access.redhat.com/errata/RHSA-2017:2709",
"https://access.redhat.com/errata/RHSA-2017:2710",
"https://access.redhat.com/errata/RHSA-2017:3113",
"https://access.redhat.com/errata/RHSA-2017:3114",
"https://access.redhat.com/errata/RHSA-2017:3193",
"https://access.redhat.com/errata/RHSA-2017:3194",
"https://access.redhat.com/errata/RHSA-2017:3195",
"https://access.redhat.com/errata/RHSA-2017:3239",
"https://access.redhat.com/errata/RHSA-2017:3240",
"https://httpd.apache.org/security/vulnerabilities_22.html",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/0dd69204a6bd643cc4e9ccd008f07a9375525d977c6ebeb07a881afb%40%3Cannounce.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
"https://security.gentoo.org/glsa/201710-32",
"https://security.netapp.com/advisory/ntap-20170911-0002/",
"https://support.apple.com/HT208221",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",
"https://www.tenable.com/security/tns-2019-09"
],
"epss": 0.52641,
"cvss": 9.1
},
"CVE-2014-4049": {
"verified": false,
"ranking_epss": 0.96537,
"cvss_v2": 5.1,
"cvss_version": 2,
"summary": "Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS TXT record, related to the dns_get_record function.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00001.html",
"http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html",
"http://lists.opensuse.org/opensuse-updates/2014-06/msg00051.html",
"http://lists.opensuse.org/opensuse-updates/2014-07/msg00032.html",
"http://marc.info/?l=bugtraq&m=141017844705317&w=2",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/59270",
"http://secunia.com/advisories/59329",
"http://secunia.com/advisories/59418",
"http://secunia.com/advisories/59496",
"http://secunia.com/advisories/59513",
"http://secunia.com/advisories/59652",
"http://secunia.com/advisories/60998",
"http://support.apple.com/kb/HT6443",
"http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
"http://www.debian.org/security/2014/dsa-2961",
"http://www.openwall.com/lists/oss-security/2014/06/13/4",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.securityfocus.com/bid/68007",
"http://www.securitytracker.com/id/1030435",
"https://bugzilla.redhat.com/show_bug.cgi?id=1108447",
"https://github.com/php/php-src/commit/b34d7849ed90ced9345f8ea1c59bc8d101c18468",
"https://support.apple.com/HT204659",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00001.html",
"http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html",
"http://lists.opensuse.org/opensuse-updates/2014-06/msg00051.html",
"http://lists.opensuse.org/opensuse-updates/2014-07/msg00032.html",
"http://marc.info/?l=bugtraq&m=141017844705317&w=2",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/59270",
"http://secunia.com/advisories/59329",
"http://secunia.com/advisories/59418",
"http://secunia.com/advisories/59496",
"http://secunia.com/advisories/59513",
"http://secunia.com/advisories/59652",
"http://secunia.com/advisories/60998",
"http://support.apple.com/kb/HT6443",
"http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
"http://www.debian.org/security/2014/dsa-2961",
"http://www.openwall.com/lists/oss-security/2014/06/13/4",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.securityfocus.com/bid/68007",
"http://www.securitytracker.com/id/1030435",
"https://bugzilla.redhat.com/show_bug.cgi?id=1108447",
"https://github.com/php/php-src/commit/b34d7849ed90ced9345f8ea1c59bc8d101c18468",
"https://support.apple.com/HT204659"
],
"epss": 0.29001,
"cvss": 5.1
},
"CVE-2017-11142": {
"verified": false,
"ranking_epss": 0.97798,
"cvss_v2": 7.8,
"cvss_version": 3,
"summary": "In PHP before 5.6.31, 7.x before 7.0.17, and 7.1.x before 7.1.3, remote attackers could cause a CPU consumption denial of service attack by injecting long form variables, related to main/php_variables.c.",
"references": [
"http://openwall.com/lists/oss-security/2017/07/10/6",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/99601",
"https://bugs.php.net/bug.php?id=73807",
"https://github.com/php/php-src/commit/0f8cf3b8497dc45c010c44ed9e96518e11e19fc3",
"https://github.com/php/php-src/commit/a15bffd105ac28fd0dd9b596632dbf035238fda3",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.debian.org/security/2018/dsa-4081",
"https://www.tenable.com/security/tns-2017-12",
"http://openwall.com/lists/oss-security/2017/07/10/6",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/99601",
"https://bugs.php.net/bug.php?id=73807",
"https://github.com/php/php-src/commit/0f8cf3b8497dc45c010c44ed9e96518e11e19fc3",
"https://github.com/php/php-src/commit/a15bffd105ac28fd0dd9b596632dbf035238fda3",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.debian.org/security/2018/dsa-4081",
"https://www.tenable.com/security/tns-2017-12"
],
"epss": 0.50029,
"cvss": 7.5
},
"CVE-2015-3415": {
"verified": false,
"ranking_epss": 0.90315,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&O>O) in a CREATE TABLE statement.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://rhn.redhat.com/errata/RHSA-2015-1635.html",
"http://seclists.org/fulldisclosure/2015/Apr/31",
"http://www.debian.org/security/2015/dsa-3252",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:217",
"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
"http://www.securityfocus.com/bid/74228",
"http://www.securitytracker.com/id/1033703",
"http://www.ubuntu.com/usn/USN-2698-1",
"https://security.gentoo.org/glsa/201507-05",
"https://support.apple.com/HT205213",
"https://support.apple.com/HT205267",
"https://www.sqlite.org/src/info/02e3c88fbf6abdcf3975fb0fb71972b0ab30da30",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://rhn.redhat.com/errata/RHSA-2015-1635.html",
"http://seclists.org/fulldisclosure/2015/Apr/31",
"http://www.debian.org/security/2015/dsa-3252",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:217",
"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
"http://www.securityfocus.com/bid/74228",
"http://www.securitytracker.com/id/1033703",
"http://www.ubuntu.com/usn/USN-2698-1",
"https://security.gentoo.org/glsa/201507-05",
"https://support.apple.com/HT205213",
"https://support.apple.com/HT205267",
"https://www.sqlite.org/src/info/02e3c88fbf6abdcf3975fb0fb71972b0ab30da30"
],
"epss": 0.05653,
"cvss": 7.5
},
"CVE-2015-3414": {
"verified": false,
"ranking_epss": 0.90315,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE\"\"\"\"\"\"\"\" at the end of a SELECT statement.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://rhn.redhat.com/errata/RHSA-2015-1635.html",
"http://seclists.org/fulldisclosure/2015/Apr/31",
"http://www.debian.org/security/2015/dsa-3252",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:217",
"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
"http://www.securityfocus.com/bid/74228",
"http://www.securitytracker.com/id/1033703",
"http://www.ubuntu.com/usn/USN-2698-1",
"https://security.gentoo.org/glsa/201507-05",
"https://support.apple.com/HT205213",
"https://support.apple.com/HT205267",
"https://www.sqlite.org/src/info/eddc05e7bb31fae74daa86e0504a3478b99fa0f2",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://rhn.redhat.com/errata/RHSA-2015-1635.html",
"http://seclists.org/fulldisclosure/2015/Apr/31",
"http://www.debian.org/security/2015/dsa-3252",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:217",
"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
"http://www.securityfocus.com/bid/74228",
"http://www.securitytracker.com/id/1033703",
"http://www.ubuntu.com/usn/USN-2698-1",
"https://security.gentoo.org/glsa/201507-05",
"https://support.apple.com/HT205213",
"https://support.apple.com/HT205267",
"https://www.sqlite.org/src/info/eddc05e7bb31fae74daa86e0504a3478b99fa0f2"
],
"epss": 0.05653,
"cvss": 7.5
},
"CVE-2016-9933": {
"verified": false,
"ranking_epss": 0.93423,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (segmentation violation) via a crafted imagefilltoborder call that triggers use of a negative color value.",
"references": [
"http://lists.opensuse.org/opensuse-updates/2016-12/msg00133.html",
"http://lists.opensuse.org/opensuse-updates/2016-12/msg00142.html",
"http://lists.opensuse.org/opensuse-updates/2017-01/msg00002.html",
"http://lists.opensuse.org/opensuse-updates/2017-01/msg00034.html",
"http://lists.opensuse.org/opensuse-updates/2017-01/msg00054.html",
"http://www.debian.org/security/2017/dsa-3751",
"http://www.openwall.com/lists/oss-security/2016/12/12/2",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/94865",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=72696",
"https://github.com/libgd/libgd/commit/77f619d48259383628c3ec4654b1ad578e9eb40e",
"https://github.com/libgd/libgd/issues/215",
"https://github.com/php/php-src/commit/863d37ea66d5c960db08d6f4a2cbd2518f0f80d1",
"http://lists.opensuse.org/opensuse-updates/2016-12/msg00133.html",
"http://lists.opensuse.org/opensuse-updates/2016-12/msg00142.html",
"http://lists.opensuse.org/opensuse-updates/2017-01/msg00002.html",
"http://lists.opensuse.org/opensuse-updates/2017-01/msg00034.html",
"http://lists.opensuse.org/opensuse-updates/2017-01/msg00054.html",
"http://www.debian.org/security/2017/dsa-3751",
"http://www.openwall.com/lists/oss-security/2016/12/12/2",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/94865",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=72696",
"https://github.com/libgd/libgd/commit/77f619d48259383628c3ec4654b1ad578e9eb40e",
"https://github.com/libgd/libgd/issues/215",
"https://github.com/php/php-src/commit/863d37ea66d5c960db08d6f4a2cbd2518f0f80d1"
],
"epss": 0.11102,
"cvss": 7.5
},
"CVE-2022-28615": {
"verified": false,
"ranking_epss": 0.78079,
"cvss_v2": 6.4,
"cvss_version": 3,
"summary": "Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in ap_strcmp_match() when provided with an extremely large input buffer. While no code distributed with the server can be coerced into such a call, third-party modules or lua scripts that use ap_strcmp_match() may hypothetically be affected.",
"references": [
"http://www.openwall.com/lists/oss-security/2022/06/08/9",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7QUGG2QZWHTITMABFLVXA4DNYUOTPWYQ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20220624-0005/",
"http://www.openwall.com/lists/oss-security/2022/06/08/9",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7QUGG2QZWHTITMABFLVXA4DNYUOTPWYQ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20220624-0005/"
],
"epss": 0.01111,
"cvss": 9.1
},
"CVE-2022-28614": {
"verified": false,
"ranking_epss": 0.69181,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "The ap_rwrite() function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if an attacker can cause the server to reflect very large input using ap_rwrite() or ap_rputs(), such as with mod_luas r:puts() function. Modules compiled and distributed separately from Apache HTTP Server that use the 'ap_rputs' function and may pass it a very large (INT_MAX or larger) string must be compiled against current headers to resolve the issue.",
"references": [
"http://www.openwall.com/lists/oss-security/2022/06/08/4",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7QUGG2QZWHTITMABFLVXA4DNYUOTPWYQ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20220624-0005/",
"http://www.openwall.com/lists/oss-security/2022/06/08/4",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7QUGG2QZWHTITMABFLVXA4DNYUOTPWYQ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20220624-0005/"
],
"epss": 0.00593,
"cvss": 5.3
},
"CVE-2017-7272": {
"verified": false,
"ranking_epss": 0.78027,
"cvss_v2": 5.8,
"cvss_version": 3,
"summary": "PHP through 7.1.11 enables potential SSRF in applications that accept an fsockopen or pfsockopen hostname argument with an expectation that the port number is constrained. Because a :port syntax is recognized, fsockopen will use the port number that is specified in the hostname argument, instead of the port number in the second argument of the function.",
"references": [
"http://www.securityfocus.com/bid/97178",
"http://www.securitytracker.com/id/1038158",
"https://bugs.php.net/bug.php?id=74216",
"https://bugs.php.net/bug.php?id=75505",
"https://github.com/php/php-src/commit/bab0b99f376dac9170ac81382a5ed526938d595a",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170403-0_PHP_Misbehavior_of_fsockopen_function_v10.txt",
"http://www.securityfocus.com/bid/97178",
"http://www.securitytracker.com/id/1038158",
"https://bugs.php.net/bug.php?id=74216",
"https://bugs.php.net/bug.php?id=75505",
"https://github.com/php/php-src/commit/bab0b99f376dac9170ac81382a5ed526938d595a",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170403-0_PHP_Misbehavior_of_fsockopen_function_v10.txt"
],
"epss": 0.01106,
"cvss": 7.4
},
"CVE-2015-3185": {
"verified": false,
"ranking_epss": 0.92799,
"cvss_v2": 4.3,
"cvss_version": 2,
"summary": "The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require directive may be associated with an authorization setting rather than an authentication setting, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging the presence of a module that relies on the 2.2 API behavior.",
"references": [
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html",
"http://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html",
"http://rhn.redhat.com/errata/RHSA-2015-1666.html",
"http://rhn.redhat.com/errata/RHSA-2015-1667.html",
"http://rhn.redhat.com/errata/RHSA-2016-2957.html",
"http://www.apache.org/dist/httpd/CHANGES_2.4",
"http://www.debian.org/security/2015/dsa-3325",
"http://www.securityfocus.com/bid/75965",
"http://www.securitytracker.com/id/1032967",
"http://www.ubuntu.com/usn/USN-2686-1",
"https://access.redhat.com/errata/RHSA-2017:2708",
"https://access.redhat.com/errata/RHSA-2017:2709",
"https://access.redhat.com/errata/RHSA-2017:2710",
"https://github.com/apache/httpd/commit/cd2b7a26c776b0754fb98426a67804fd48118708",
"https://github.com/apache/httpd/commit/db81019ab88734ed35fa70294a0cfa7a19743f73",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://support.apple.com/HT205217",
"https://support.apple.com/HT205219",
"https://support.apple.com/kb/HT205031",
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html",
"http://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html",
"http://rhn.redhat.com/errata/RHSA-2015-1666.html",
"http://rhn.redhat.com/errata/RHSA-2015-1667.html",
"http://rhn.redhat.com/errata/RHSA-2016-2957.html",
"http://www.apache.org/dist/httpd/CHANGES_2.4",
"http://www.debian.org/security/2015/dsa-3325",
"http://www.securityfocus.com/bid/75965",
"http://www.securitytracker.com/id/1032967",
"http://www.ubuntu.com/usn/USN-2686-1",
"https://access.redhat.com/errata/RHSA-2017:2708",
"https://access.redhat.com/errata/RHSA-2017:2709",
"https://access.redhat.com/errata/RHSA-2017:2710",
"https://github.com/apache/httpd/commit/cd2b7a26c776b0754fb98426a67804fd48118708",
"https://github.com/apache/httpd/commit/db81019ab88734ed35fa70294a0cfa7a19743f73",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://support.apple.com/HT205217",
"https://support.apple.com/HT205219",
"https://support.apple.com/kb/HT205031"
],
"epss": 0.09491,
"cvss": 4.3
},
"CVE-2015-3184": {
"verified": false,
"ranking_epss": 0.94946,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict anonymous access, which allows remote anonymous users to read hidden files via the path name.",
"references": [
"http://lists.apple.com/archives/security-announce/2016/Mar/msg00003.html",
"http://lists.opensuse.org/opensuse-updates/2015-08/msg00022.html",
"http://rhn.redhat.com/errata/RHSA-2015-1742.html",
"http://subversion.apache.org/security/CVE-2015-3184-advisory.txt",
"http://www.debian.org/security/2015/dsa-3331",
"http://www.securityfocus.com/bid/76274",
"http://www.securitytracker.com/id/1033215",
"http://www.ubuntu.com/usn/USN-2721-1",
"https://security.gentoo.org/glsa/201610-05",
"https://support.apple.com/HT206172",
"http://lists.apple.com/archives/security-announce/2016/Mar/msg00003.html",
"http://lists.opensuse.org/opensuse-updates/2015-08/msg00022.html",
"http://rhn.redhat.com/errata/RHSA-2015-1742.html",
"http://subversion.apache.org/security/CVE-2015-3184-advisory.txt",
"http://www.debian.org/security/2015/dsa-3331",
"http://www.securityfocus.com/bid/76274",
"http://www.securitytracker.com/id/1033215",
"http://www.ubuntu.com/usn/USN-2721-1",
"https://security.gentoo.org/glsa/201610-05",
"https://support.apple.com/HT206172"
],
"epss": 0.17005,
"cvss": 5
},
"CVE-2015-3183": {
"verified": false,
"ranking_epss": 0.96476,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remote attackers to conduct HTTP request smuggling attacks via a crafted request, related to mishandling of large chunk-size values and invalid chunk-extension characters in modules/http/http_filters.c.",
"references": [
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html",
"http://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html",
"http://marc.info/?l=bugtraq&m=144493176821532&w=2",
"http://rhn.redhat.com/errata/RHSA-2015-1666.html",
"http://rhn.redhat.com/errata/RHSA-2015-1667.html",
"http://rhn.redhat.com/errata/RHSA-2015-1668.html",
"http://rhn.redhat.com/errata/RHSA-2015-2661.html",
"http://rhn.redhat.com/errata/RHSA-2016-0061.html",
"http://rhn.redhat.com/errata/RHSA-2016-0062.html",
"http://rhn.redhat.com/errata/RHSA-2016-2054.html",
"http://rhn.redhat.com/errata/RHSA-2016-2055.html",
"http://rhn.redhat.com/errata/RHSA-2016-2056.html",
"http://www.apache.org/dist/httpd/CHANGES_2.4",
"http://www.debian.org/security/2015/dsa-3325",
"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html",
"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html",
"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html",
"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html",
"http://www.securityfocus.com/bid/75963",
"http://www.securityfocus.com/bid/91787",
"http://www.securitytracker.com/id/1032967",
"http://www.ubuntu.com/usn/USN-2686-1",
"https://access.redhat.com/errata/RHSA-2015:2659",
"https://access.redhat.com/errata/RHSA-2015:2660",
"https://github.com/apache/httpd/commit/a6027e56924bb6227c1fdbf6f91e7e2438338be6",
"https://github.com/apache/httpd/commit/e427c41257957b57036d5a549b260b6185d1dd73",
"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246",
"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://puppet.com/security/cve/CVE-2015-3183",
"https://security.gentoo.org/glsa/201610-02",
"https://support.apple.com/HT205219",
"https://support.apple.com/kb/HT205031",
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html",
"http://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html",
"http://marc.info/?l=bugtraq&m=144493176821532&w=2",
"http://rhn.redhat.com/errata/RHSA-2015-1666.html",
"http://rhn.redhat.com/errata/RHSA-2015-1667.html",
"http://rhn.redhat.com/errata/RHSA-2015-1668.html",
"http://rhn.redhat.com/errata/RHSA-2015-2661.html",
"http://rhn.redhat.com/errata/RHSA-2016-0061.html",
"http://rhn.redhat.com/errata/RHSA-2016-0062.html",
"http://rhn.redhat.com/errata/RHSA-2016-2054.html",
"http://rhn.redhat.com/errata/RHSA-2016-2055.html",
"http://rhn.redhat.com/errata/RHSA-2016-2056.html",
"http://www.apache.org/dist/httpd/CHANGES_2.4",
"http://www.debian.org/security/2015/dsa-3325",
"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html",
"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html",
"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html",
"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html",
"http://www.securityfocus.com/bid/75963",
"http://www.securityfocus.com/bid/91787",
"http://www.securitytracker.com/id/1032967",
"http://www.ubuntu.com/usn/USN-2686-1",
"https://access.redhat.com/errata/RHSA-2015:2659",
"https://access.redhat.com/errata/RHSA-2015:2660",
"https://github.com/apache/httpd/commit/a6027e56924bb6227c1fdbf6f91e7e2438338be6",
"https://github.com/apache/httpd/commit/e427c41257957b57036d5a549b260b6185d1dd73",
"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246",
"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://puppet.com/security/cve/CVE-2015-3183",
"https://security.gentoo.org/glsa/201610-02",
"https://support.apple.com/HT205219",
"https://support.apple.com/kb/HT205031"
],
"epss": 0.28343,
"cvss": 5
},
"CVE-2019-1563": {
"verified": false,
"ranking_epss": 0.7951,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a very large number of messages to be decrypted, can recover a CMS/PKCS7 transported encryption key or decrypt any RSA encrypted message that was encrypted with the public RSA key, using a Bleichenbacher padding oracle attack. Applications are not affected if they use a certificate together with the private RSA key to the CMS_decrypt or PKCS7_decrypt functions to select the correct recipient info to decrypt. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s).",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00054.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00072.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00012.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00016.html",
"http://packetstormsecurity.com/files/154467/Slackware-Security-Advisory-openssl-Updates.html",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=08229ad838c50f644d7e928e2eef147b4308ad64",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=631f94db0065c78181ca9ba5546ebc8bb3884b97",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e21f8cf78a125cd3c8c0d1a1a6c8bb0b901f893f",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10365",
"https://lists.debian.org/debian-lts-announce/2019/09/msg00026.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6SNRJP2S7Y42GIIDO3HXPNMDYN2U3A/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZN4VVQJ3JDCHGIHV4Y2YTXBYQZ6PWQ7E/",
"https://seclists.org/bugtraq/2019/Oct/0",
"https://seclists.org/bugtraq/2019/Oct/1",
"https://seclists.org/bugtraq/2019/Sep/25",
"https://security.gentoo.org/glsa/201911-04",
"https://security.netapp.com/advisory/ntap-20190919-0002/",
"https://support.f5.com/csp/article/K97324400?utm_source=f5support&%3Butm_medium=RSS",
"https://usn.ubuntu.com/4376-1/",
"https://usn.ubuntu.com/4376-2/",
"https://usn.ubuntu.com/4504-1/",
"https://www.debian.org/security/2019/dsa-4539",
"https://www.debian.org/security/2019/dsa-4540",
"https://www.openssl.org/news/secadv/20190910.txt",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/security-alerts/cpujan2020.html",
"https://www.oracle.com/security-alerts/cpujul2020.html",
"https://www.oracle.com/security-alerts/cpuoct2020.html",
"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
"https://www.tenable.com/security/tns-2019-09",
"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00054.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00072.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00012.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00016.html",
"http://packetstormsecurity.com/files/154467/Slackware-Security-Advisory-openssl-Updates.html",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=08229ad838c50f644d7e928e2eef147b4308ad64",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=631f94db0065c78181ca9ba5546ebc8bb3884b97",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e21f8cf78a125cd3c8c0d1a1a6c8bb0b901f893f",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10365",
"https://lists.debian.org/debian-lts-announce/2019/09/msg00026.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6SNRJP2S7Y42GIIDO3HXPNMDYN2U3A/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZN4VVQJ3JDCHGIHV4Y2YTXBYQZ6PWQ7E/",
"https://seclists.org/bugtraq/2019/Oct/0",
"https://seclists.org/bugtraq/2019/Oct/1",
"https://seclists.org/bugtraq/2019/Sep/25",
"https://security.gentoo.org/glsa/201911-04",
"https://security.netapp.com/advisory/ntap-20190919-0002/",
"https://support.f5.com/csp/article/K97324400?utm_source=f5support&%3Butm_medium=RSS",
"https://usn.ubuntu.com/4376-1/",
"https://usn.ubuntu.com/4376-2/",
"https://usn.ubuntu.com/4504-1/",
"https://www.debian.org/security/2019/dsa-4539",
"https://www.debian.org/security/2019/dsa-4540",
"https://www.openssl.org/news/secadv/20190910.txt",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/security-alerts/cpujan2020.html",
"https://www.oracle.com/security-alerts/cpujul2020.html",
"https://www.oracle.com/security-alerts/cpuoct2020.html",
"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
"https://www.tenable.com/security/tns-2019-09"
],
"epss": 0.0128,
"cvss": 3.7
},
"CVE-2024-3566": {
"verified": false,
"ranking_epss": 0.91475,
"cvss_v2": null,
"cvss_version": 3,
"summary": "A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when the specific conditions are satisfied.",
"references": [
"https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/",
"https://kb.cert.org/vuls/id/123335",
"https://learn.microsoft.com/en-us/archive/blogs/twistylittlepassagesallalike/everyone-quotes-command-line-arguments-the-wrong-way",
"https://www.cve.org/CVERecord?id=CVE-2024-1874",
"https://www.cve.org/CVERecord?id=CVE-2024-22423",
"https://www.cve.org/CVERecord?id=CVE-2024-24576",
"https://www.kb.cert.org/vuls/id/123335",
"https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/",
"https://github.com/nu11secur1ty/Windows11Exploits/tree/main/2024/CVE-2024-3566",
"https://kb.cert.org/vuls/id/123335",
"https://learn.microsoft.com/en-us/archive/blogs/twistylittlepassagesallalike/everyone-quotes-command-line-arguments-the-wrong-way",
"https://www.cve.org/CVERecord?id=CVE-2024-1874",
"https://www.cve.org/CVERecord?id=CVE-2024-22423",
"https://www.cve.org/CVERecord?id=CVE-2024-24576",
"https://www.kb.cert.org/vuls/id/123335"
],
"epss": 0.0709,
"cvss": 9.8
},
"CVE-2016-7418": {
"verified": false,
"ranking_epss": 0.8358,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attackers to cause a denial of service (invalid pointer access and out-of-bounds read) or possibly have unspecified other impact via an incorrect boolean element in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call.",
"references": [
"http://www.openwall.com/lists/oss-security/2016/09/15/10",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/93011",
"http://www.securitytracker.com/id/1036836",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=73065",
"https://github.com/php/php-src/commit/c4cca4c20e75359c9a13a1f9a36cb7b4e9601d29?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19",
"http://www.openwall.com/lists/oss-security/2016/09/15/10",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/93011",
"http://www.securitytracker.com/id/1036836",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=73065",
"https://github.com/php/php-src/commit/c4cca4c20e75359c9a13a1f9a36cb7b4e9601d29?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19"
],
"epss": 0.02,
"cvss": 7.5
},
"CVE-2016-7414": {
"verified": false,
"ranking_epss": 0.82412,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The ZIP signature-verification feature in PHP before 5.6.26 and 7.x before 7.0.11 does not ensure that the uncompressed_filesize field is large enough, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via a crafted PHAR archive, related to ext/phar/util.c and ext/phar/zip.c.",
"references": [
"http://www.openwall.com/lists/oss-security/2016/09/15/10",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/93004",
"http://www.securitytracker.com/id/1036836",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=72928",
"https://github.com/php/php-src/commit/0bfb970f43acd1e81d11be1154805f86655f15d5?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19",
"http://www.openwall.com/lists/oss-security/2016/09/15/10",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/93004",
"http://www.securitytracker.com/id/1036836",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=72928",
"https://github.com/php/php-src/commit/0bfb970f43acd1e81d11be1154805f86655f15d5?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19"
],
"epss": 0.01738,
"cvss": 9.8
},
"CVE-2016-7416": {
"verified": false,
"ranking_epss": 0.85353,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "ext/intl/msgformat/msgformat_format.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale length provided to the Locale class in the ICU library, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a MessageFormatter::formatMessage call with a long first argument.",
"references": [
"http://www.openwall.com/lists/oss-security/2016/09/15/10",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/93008",
"http://www.securitytracker.com/id/1036836",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=73007",
"https://github.com/php/php-src/commit/6d55ba265637d6adf0ba7e9c9ef11187d1ec2f5b?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19",
"http://www.openwall.com/lists/oss-security/2016/09/15/10",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/93008",
"http://www.securitytracker.com/id/1036836",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=73007",
"https://github.com/php/php-src/commit/6d55ba265637d6adf0ba7e9c9ef11187d1ec2f5b?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19"
],
"epss": 0.02527,
"cvss": 7.5
},
"CVE-2016-7417": {
"verified": false,
"ranking_epss": 0.84192,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "ext/spl/spl_array.c in PHP before 5.6.26 and 7.x before 7.0.11 proceeds with SplArray unserialization without validating a return value and data type, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data.",
"references": [
"http://www.openwall.com/lists/oss-security/2016/09/15/10",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/93007",
"http://www.securitytracker.com/id/1036836",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=73029",
"https://github.com/php/php-src/commit/ecb7f58a069be0dec4a6131b6351a761f808f22e?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19",
"http://www.openwall.com/lists/oss-security/2016/09/15/10",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/93007",
"http://www.securitytracker.com/id/1036836",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=73029",
"https://github.com/php/php-src/commit/ecb7f58a069be0dec4a6131b6351a761f808f22e?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19"
],
"epss": 0.02157,
"cvss": 9.8
},
"CVE-2016-7411": {
"verified": false,
"ranking_epss": 0.67748,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "ext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an unserialize call that references a partially constructed object.",
"references": [
"http://www.openwall.com/lists/oss-security/2016/09/15/10",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/93009",
"http://www.securitytracker.com/id/1036836",
"https://bugs.php.net/bug.php?id=73052",
"https://github.com/php/php-src/commit/6a7cc8ff85827fa9ac715b3a83c2d9147f33cd43?w=1",
"https://security.gentoo.org/glsa/201611-22",
"http://www.openwall.com/lists/oss-security/2016/09/15/10",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/93009",
"http://www.securitytracker.com/id/1036836",
"https://bugs.php.net/bug.php?id=73052",
"https://github.com/php/php-src/commit/6a7cc8ff85827fa9ac715b3a83c2d9147f33cd43?w=1",
"https://security.gentoo.org/glsa/201611-22"
],
"epss": 0.00546,
"cvss": 9.8
},
"CVE-2016-1000110": {
"verified": false,
"ranking_epss": 0.92975,
"cvss_v2": 5.8,
"cvss_version": 3,
"summary": "The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-1000110",
"https://bugzilla.suse.com/show_bug.cgi?id=CVE-2016-1000110",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7K3WFJO3SJQCODKRKU6EQV3ZGHH53YPU/",
"https://security-tracker.debian.org/tracker/CVE-2016-1000110",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-1000110",
"https://bugzilla.suse.com/show_bug.cgi?id=CVE-2016-1000110",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7K3WFJO3SJQCODKRKU6EQV3ZGHH53YPU/",
"https://security-tracker.debian.org/tracker/CVE-2016-1000110"
],
"epss": 0.09899,
"cvss": 6.1
},
"CVE-2016-7413": {
"verified": false,
"ranking_epss": 0.81594,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "Use-after-free vulnerability in the wddx_stack_destroy function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a wddxPacket XML document that lacks an end-tag for a recordset field element, leading to mishandling in a wddx_deserialize call.",
"references": [
"http://www.openwall.com/lists/oss-security/2016/09/15/10",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/93006",
"http://www.securitytracker.com/id/1036836",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=72860",
"https://github.com/php/php-src/commit/b88393f08a558eec14964a55d3c680fe67407712?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19",
"http://www.openwall.com/lists/oss-security/2016/09/15/10",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/93006",
"http://www.securitytracker.com/id/1036836",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=72860",
"https://github.com/php/php-src/commit/b88393f08a558eec14964a55d3c680fe67407712?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19"
],
"epss": 0.01595,
"cvss": 9.8
},
"CVE-2024-9287": {
"verified": false,
"ranking_epss": 0.19384,
"cvss_v2": null,
"cvss_version": 3,
"summary": "A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment \"activation\" scripts (ie \"source venv/bin/activate\"). This means that attacker-controlled virtual environments are able to run commands when the virtual environment is activated. Virtual environments which are not created by an attacker or which aren't activated before being used (ie \"./venv/bin/python\") are not affected.",
"references": [
"https://github.com/python/cpython/commit/633555735a023d3e4d92ba31da35b1205f9ecbd7",
"https://github.com/python/cpython/commit/8450b2482586857d689b6658f08de9c8179af7db",
"https://github.com/python/cpython/commit/9286ab3a107ea41bd3f3c3682ce2512692bdded8",
"https://github.com/python/cpython/commit/ae961ae94bf19c8f8c7fbea3d1c25cc55ce8ae97",
"https://github.com/python/cpython/commit/d48cc82ed25e26b02eb97c6263d95dcaa1e9111b",
"https://github.com/python/cpython/commit/e52095a0c1005a87eed2276af7a1f2f66e2b6483",
"https://github.com/python/cpython/issues/124651",
"https://github.com/python/cpython/pull/124712",
"https://mail.python.org/archives/list/security-announce@python.org/thread/RSPJ2B5JL22FG3TKUJ7D7DQ4N5JRRBZL/",
"https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html",
"https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html",
"https://security.netapp.com/advisory/ntap-20250425-0006/"
],
"epss": 0.00062,
"cvss": 7.8
},
"CVE-2017-1000158": {
"verified": false,
"ranking_epss": 0.87915,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)",
"references": [
"http://www.securitytracker.com/id/1039890",
"https://bugs.python.org/issue30657",
"https://lists.debian.org/debian-lts-announce/2017/11/msg00035.html",
"https://lists.debian.org/debian-lts-announce/2017/11/msg00036.html",
"https://lists.debian.org/debian-lts-announce/2018/09/msg00030.html",
"https://lists.debian.org/debian-lts-announce/2018/09/msg00031.html",
"https://security.gentoo.org/glsa/201805-02",
"https://security.netapp.com/advisory/ntap-20230216-0001/",
"https://www.debian.org/security/2018/dsa-4307",
"http://www.securitytracker.com/id/1039890",
"https://bugs.python.org/issue30657",
"https://lists.debian.org/debian-lts-announce/2017/11/msg00035.html",
"https://lists.debian.org/debian-lts-announce/2017/11/msg00036.html",
"https://lists.debian.org/debian-lts-announce/2018/09/msg00030.html",
"https://lists.debian.org/debian-lts-announce/2018/09/msg00031.html",
"https://security.gentoo.org/glsa/201805-02",
"https://security.netapp.com/advisory/ntap-20230216-0001/",
"https://www.debian.org/security/2018/dsa-4307"
],
"epss": 0.03719,
"cvss": 9.8
},
"CVE-2015-8994": {
"verified": false,
"ranking_epss": 0.83571,
"cvss_v2": 6.8,
"cvss_version": 3,
"summary": "An issue was discovered in PHP 5.x and 7.x, when the configuration uses apache2handler/mod_php or php-fpm with OpCache enabled. With 5.x after 5.6.28 or 7.x after 7.0.13, the issue is resolved in a non-default configuration with the opcache.validate_permission=1 setting. The vulnerability details are as follows. In PHP SAPIs where PHP interpreters share a common parent process, Zend OpCache creates a shared memory object owned by the common parent during initialization. Child PHP processes inherit the SHM descriptor, using it to cache and retrieve compiled script bytecode (\"opcode\" in PHP jargon). Cache keys vary depending on configuration, but filename is a central key component, and compiled opcode can generally be run if a script's filename is known or can be guessed. Many common shared-hosting configurations change EUID in child processes to enforce privilege separation among hosted users (for example using mod_ruid2 for the Apache HTTP Server, or php-fpm user settings). In these scenarios, the default Zend OpCache behavior defeats script file permissions by sharing a single SHM cache among all child PHP processes. PHP scripts often contain sensitive information: Think of CMS configurations where reading or running another user's script usually means gaining privileges to the CMS database.",
"references": [
"http://marc.info/?l=php-internals&m=147876797317925&w=2",
"http://marc.info/?l=php-internals&m=147921016724565&w=2",
"http://openwall.com/lists/oss-security/2017/02/28/1",
"http://seclists.org/oss-sec/2016/q4/343",
"http://seclists.org/oss-sec/2017/q1/520",
"https://bugs.php.net/bug.php?id=69090",
"https://ma.ttias.be/a-better-way-to-run-php-fpm/",
"http://marc.info/?l=php-internals&m=147876797317925&w=2",
"http://marc.info/?l=php-internals&m=147921016724565&w=2",
"http://openwall.com/lists/oss-security/2017/02/28/1",
"http://seclists.org/oss-sec/2016/q4/343",
"http://seclists.org/oss-sec/2017/q1/520",
"https://bugs.php.net/bug.php?id=69090",
"https://ma.ttias.be/a-better-way-to-run-php-fpm/"
],
"epss": 0.01997,
"cvss": 7.5
},
"CVE-2014-0117": {
"verified": false,
"ranking_epss": 0.98121,
"cvss_v2": 4.3,
"cvss_version": 2,
"summary": "The mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is enabled, allows remote attackers to cause a denial of service (child-process crash) via a crafted HTTP Connection header.",
"references": [
"http://advisories.mageia.org/MGASA-2014-0305.html",
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://seclists.org/fulldisclosure/2014/Jul/117",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c?r1=1599486&r2=1610674&diff_format=h",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/proxy_util.c",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/proxy_util.c?r1=1609680&r2=1610674&diff_format=h",
"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
"http://zerodayinitiative.com/advisories/ZDI-14-239/",
"https://bugzilla.redhat.com/show_bug.cgi?id=1120599",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://support.apple.com/HT204659",
"http://advisories.mageia.org/MGASA-2014-0305.html",
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://seclists.org/fulldisclosure/2014/Jul/117",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c?r1=1599486&r2=1610674&diff_format=h",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/proxy_util.c",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/proxy_util.c?r1=1609680&r2=1610674&diff_format=h",
"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
"http://zerodayinitiative.com/advisories/ZDI-14-239/",
"https://bugzilla.redhat.com/show_bug.cgi?id=1120599",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://support.apple.com/HT204659"
],
"epss": 0.56996,
"cvss": 4.3
},
"CVE-2015-2348": {
"verified": false,
"ranking_epss": 0.91577,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "The move_uploaded_file implementation in ext/standard/basic_functions.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 truncates a pathname upon encountering a \\x00 character, which allows remote attackers to bypass intended extension restrictions and create files with unexpected names via a crafted second argument. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=1291d6bbee93b6109eb07e8f7916ff1b7fcc13e1",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html",
"http://lists.opensuse.org/opensuse-updates/2015-04/msg00015.html",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/73434",
"http://www.securitytracker.com/id/1032484",
"http://www.ubuntu.com/usn/USN-2572-1",
"https://bugs.php.net/bug.php?id=69207",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205267",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=1291d6bbee93b6109eb07e8f7916ff1b7fcc13e1",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html",
"http://lists.opensuse.org/opensuse-updates/2015-04/msg00015.html",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/73434",
"http://www.securitytracker.com/id/1032484",
"http://www.ubuntu.com/usn/USN-2572-1",
"https://bugs.php.net/bug.php?id=69207",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205267"
],
"epss": 0.07236,
"cvss": 5
},
"CVE-2015-4022": {
"verified": false,
"ranking_epss": 0.95549,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html",
"http://lists.opensuse.org/opensuse-updates/2015-06/msg00002.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://rhn.redhat.com/errata/RHSA-2015-1219.html",
"http://www.debian.org/security/2015/dsa-3280",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/74902",
"http://www.securitytracker.com/id/1032433",
"https://bugs.php.net/bug.php?id=69545",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/kb/HT205031",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html",
"http://lists.opensuse.org/opensuse-updates/2015-06/msg00002.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://rhn.redhat.com/errata/RHSA-2015-1219.html",
"http://www.debian.org/security/2015/dsa-3280",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/74902",
"http://www.securitytracker.com/id/1032433",
"https://bugs.php.net/bug.php?id=69545",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/kb/HT205031"
],
"epss": 0.20639,
"cvss": 7.5
},
"CVE-2015-8838": {
"verified": false,
"ranking_epss": 0.71049,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "ext/mysqlnd/mysqlnd.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 uses a client SSL option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=97aa752fee61fccdec361279adbfb17a3c60f3f4",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html",
"http://php.net/ChangeLog-5.php",
"http://www.ubuntu.com/usn/USN-2952-1",
"http://www.ubuntu.com/usn/USN-2952-2",
"https://bugs.php.net/bug.php?id=69669",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=97aa752fee61fccdec361279adbfb17a3c60f3f4",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html",
"http://php.net/ChangeLog-5.php",
"http://www.ubuntu.com/usn/USN-2952-1",
"http://www.ubuntu.com/usn/USN-2952-2",
"https://bugs.php.net/bug.php?id=69669"
],
"epss": 0.00661,
"cvss": 5.9
},
"CVE-2015-8835": {
"verified": false,
"ranking_epss": 0.88449,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not properly retrieve keys, which allows remote attackers to cause a denial of service (NULL pointer dereference, type confusion, and application crash) or possibly execute arbitrary code via crafted serialized data representing a numerically indexed _cookies array, related to the SoapClient::__call method in ext/soap/soap.c.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.securityfocus.com/bid/84426",
"http://www.ubuntu.com/usn/USN-2952-1",
"http://www.ubuntu.com/usn/USN-2952-2",
"https://bugs.php.net/bug.php?id=70081",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.securityfocus.com/bid/84426",
"http://www.ubuntu.com/usn/USN-2952-1",
"http://www.ubuntu.com/usn/USN-2952-2",
"https://bugs.php.net/bug.php?id=70081"
],
"epss": 0.04045,
"cvss": 9.8
},
"CVE-2007-4723": {
"verified": false,
"ranking_epss": 0.3964,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "Directory traversal vulnerability in Ragnarok Online Control Panel 4.3.4a, when the Apache HTTP Server is used, allows remote attackers to bypass authentication via directory traversal sequences in a URI that ends with the name of a publicly available page, as demonstrated by a \"/...../\" sequence and an account_manage.php/login.php final component for reaching the protected account_manage.php page.",
"references": [
"http://osvdb.org/45879",
"http://securityreason.com/securityalert/3100",
"http://www.securityfocus.com/archive/1/478263/100/0/threaded",
"http://osvdb.org/45879",
"http://securityreason.com/securityalert/3100",
"http://www.securityfocus.com/archive/1/478263/100/0/threaded"
],
"epss": 0.00181,
"cvss": 7.5
},
"CVE-2015-4026": {
"verified": false,
"ranking_epss": 0.92862,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \\x00 character, which might allow remote attackers to bypass intended extension restrictions and execute files with unexpected names via a crafted first argument. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html",
"http://lists.opensuse.org/opensuse-updates/2015-06/msg00002.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://rhn.redhat.com/errata/RHSA-2015-1219.html",
"http://www.debian.org/security/2015/dsa-3280",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75056",
"http://www.securitytracker.com/id/1032431",
"https://bugs.php.net/bug.php?id=68598",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/kb/HT205031",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html",
"http://lists.opensuse.org/opensuse-updates/2015-06/msg00002.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://rhn.redhat.com/errata/RHSA-2015-1219.html",
"http://www.debian.org/security/2015/dsa-3280",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75056",
"http://www.securitytracker.com/id/1032431",
"https://bugs.php.net/bug.php?id=68598",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/kb/HT205031"
],
"epss": 0.09632,
"cvss": 7.5
},
"CVE-2016-4975": {
"verified": false,
"ranking_epss": 0.98875,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigated by changes made in 2.4.25 and 2.2.32 which prohibit CR or LF injection into the \"Location\" or other outbound header key or value. Fixed in Apache HTTP Server 2.4.25 (Affected 2.4.1-2.4.23). Fixed in Apache HTTP Server 2.2.32 (Affected 2.2.0-2.2.31).",
"references": [
"http://www.securityfocus.com/bid/105093",
"https://httpd.apache.org/security/vulnerabilities_22.html#CVE-2016-4975",
"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-4975",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://security.netapp.com/advisory/ntap-20180926-0006/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",
"http://www.securityfocus.com/bid/105093",
"https://httpd.apache.org/security/vulnerabilities_22.html#CVE-2016-4975",
"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-4975",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://security.netapp.com/advisory/ntap-20180926-0006/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us"
],
"epss": 0.75341,
"cvss": 6.1
},
"CVE-2023-2650": {
"verified": false,
"ranking_epss": 0.99704,
"cvss_v2": null,
"cvss_version": 3,
"summary": "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit. OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime. The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced. This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL. If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS. It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain. Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates. This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.",
"references": [
"http://www.openwall.com/lists/oss-security/2023/05/30/1",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a",
"https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html",
"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009",
"https://security.gentoo.org/glsa/202402-08",
"https://security.netapp.com/advisory/ntap-20230703-0001/",
"https://security.netapp.com/advisory/ntap-20231027-0009/",
"https://www.debian.org/security/2023/dsa-5417",
"https://www.openssl.org/news/secadv/20230530.txt",
"http://www.openwall.com/lists/oss-security/2023/05/30/1",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a",
"https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html",
"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009",
"https://security.gentoo.org/glsa/202402-08",
"https://security.netapp.com/advisory/ntap-20230703-0001/",
"https://security.netapp.com/advisory/ntap-20231027-0009/",
"https://www.debian.org/security/2023/dsa-5417",
"https://www.openssl.org/news/secadv/20230530.txt"
],
"epss": 0.92129,
"cvss": 6.5
},
"CVE-2013-6420": {
"verified": false,
"ranking_epss": 0.9732,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate that is not properly handled by the openssl_x509_parse function.",
"references": [
"http://forums.interworx.com/threads/8000-InterWorx-Version-5-0-14-Released-on-Beta-Channel%21",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=c1224573c773b6845e83505f717fbf820fc18415",
"http://lists.opensuse.org/opensuse-updates/2013-12/msg00125.html",
"http://lists.opensuse.org/opensuse-updates/2013-12/msg00126.html",
"http://rhn.redhat.com/errata/RHSA-2013-1813.html",
"http://rhn.redhat.com/errata/RHSA-2013-1815.html",
"http://rhn.redhat.com/errata/RHSA-2013-1824.html",
"http://rhn.redhat.com/errata/RHSA-2013-1825.html",
"http://rhn.redhat.com/errata/RHSA-2013-1826.html",
"http://secunia.com/advisories/59652",
"http://support.apple.com/kb/HT6150",
"http://www.debian.org/security/2013/dsa-2816",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/64225",
"http://www.securitytracker.com/id/1029472",
"http://www.ubuntu.com/usn/USN-2055-1",
"https://bugzilla.redhat.com/show_bug.cgi?id=1036830",
"https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04463322",
"https://www.sektioneins.de/advisories/advisory-012013-php-openssl_x509_parse-memory-corruption-vulnerability.html",
"http://forums.interworx.com/threads/8000-InterWorx-Version-5-0-14-Released-on-Beta-Channel%21",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=c1224573c773b6845e83505f717fbf820fc18415",
"http://lists.opensuse.org/opensuse-updates/2013-12/msg00125.html",
"http://lists.opensuse.org/opensuse-updates/2013-12/msg00126.html",
"http://rhn.redhat.com/errata/RHSA-2013-1813.html",
"http://rhn.redhat.com/errata/RHSA-2013-1815.html",
"http://rhn.redhat.com/errata/RHSA-2013-1824.html",
"http://rhn.redhat.com/errata/RHSA-2013-1825.html",
"http://rhn.redhat.com/errata/RHSA-2013-1826.html",
"http://secunia.com/advisories/59652",
"http://support.apple.com/kb/HT6150",
"http://www.debian.org/security/2013/dsa-2816",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/64225",
"http://www.securitytracker.com/id/1029472",
"http://www.ubuntu.com/usn/USN-2055-1",
"https://bugzilla.redhat.com/show_bug.cgi?id=1036830",
"https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04463322",
"https://www.sektioneins.de/advisories/advisory-012013-php-openssl_x509_parse-memory-corruption-vulnerability.html"
],
"epss": 0.40224,
"cvss": 7.5
},
"CVE-2016-4472": {
"verified": false,
"ranking_epss": 0.84563,
"cvss_v2": 6.8,
"cvss_version": 3,
"summary": "The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and CVE-2015-2716.",
"references": [
"http://www.securityfocus.com/bid/91528",
"http://www.ubuntu.com/usn/USN-3013-1",
"https://bugzilla.redhat.com/show_bug.cgi?id=1344251",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10365",
"https://security.gentoo.org/glsa/201701-21",
"https://sourceforge.net/p/expat/code_git/ci/f0bec73b018caa07d3e75ec8dd967f3785d71bde",
"https://www.tenable.com/security/tns-2016-20",
"http://www.securityfocus.com/bid/91528",
"http://www.ubuntu.com/usn/USN-3013-1",
"https://bugzilla.redhat.com/show_bug.cgi?id=1344251",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10365",
"https://security.gentoo.org/glsa/201701-21",
"https://sourceforge.net/p/expat/code_git/ci/f0bec73b018caa07d3e75ec8dd967f3785d71bde",
"https://www.tenable.com/security/tns-2016-20"
],
"epss": 0.02271,
"cvss": 8.1
},
"CVE-2022-31628": {
"verified": false,
"ranking_epss": 0.1343,
"cvss_v2": null,
"cvss_version": 3,
"summary": "In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress \"quines\" gzip files, resulting in an infinite loop.",
"references": [
"https://bugs.php.net/bug.php?id=81726",
"https://lists.debian.org/debian-lts-announce/2022/12/msg00030.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2L5SUVYGAKSWODUQPZFBUB3AL6E6CSEV/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VI3E6A3ZTH2RP7OMLJHSVFIEQBIFM6RF/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XNIEABBH5XCXLFWWZYIDE457SPEDZTXV/",
"https://security.gentoo.org/glsa/202211-03",
"https://security.netapp.com/advisory/ntap-20221209-0001/",
"https://www.debian.org/security/2022/dsa-5277",
"https://bugs.php.net/bug.php?id=81726",
"https://lists.debian.org/debian-lts-announce/2022/12/msg00030.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2L5SUVYGAKSWODUQPZFBUB3AL6E6CSEV/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VI3E6A3ZTH2RP7OMLJHSVFIEQBIFM6RF/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XNIEABBH5XCXLFWWZYIDE457SPEDZTXV/",
"https://security.gentoo.org/glsa/202211-03",
"https://security.netapp.com/advisory/ntap-20221209-0001/",
"https://www.debian.org/security/2022/dsa-5277"
],
"epss": 0.00044,
"cvss": 2.3
},
"CVE-2022-31629": {
"verified": false,
"ranking_epss": 0.9461,
"cvss_v2": null,
"cvss_version": 3,
"summary": "In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.",
"references": [
"http://www.openwall.com/lists/oss-security/2024/04/12/11",
"https://bugs.php.net/bug.php?id=81727",
"https://lists.debian.org/debian-lts-announce/2022/12/msg00030.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2L5SUVYGAKSWODUQPZFBUB3AL6E6CSEV/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJZK3X6B7FBE32FETDSMRLJXTFTHKWSY/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSJVPJTX7T3J5V7XHR4MFNHZGP44R5XE/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VI3E6A3ZTH2RP7OMLJHSVFIEQBIFM6RF/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XNIEABBH5XCXLFWWZYIDE457SPEDZTXV/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZGWIK3HMBACERGB4TSBB2JUOMPYY2VKY/",
"https://security.gentoo.org/glsa/202211-03",
"https://security.netapp.com/advisory/ntap-20221209-0001/",
"https://www.debian.org/security/2022/dsa-5277",
"http://www.openwall.com/lists/oss-security/2024/04/12/11",
"https://bugs.php.net/bug.php?id=81727",
"https://lists.debian.org/debian-lts-announce/2022/12/msg00030.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2L5SUVYGAKSWODUQPZFBUB3AL6E6CSEV/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJZK3X6B7FBE32FETDSMRLJXTFTHKWSY/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSJVPJTX7T3J5V7XHR4MFNHZGP44R5XE/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VI3E6A3ZTH2RP7OMLJHSVFIEQBIFM6RF/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XNIEABBH5XCXLFWWZYIDE457SPEDZTXV/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZGWIK3HMBACERGB4TSBB2JUOMPYY2VKY/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJZK3X6B7FBE32FETDSMRLJXTFTHKWSY/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZGWIK3HMBACERGB4TSBB2JUOMPYY2VKY/",
"https://security.gentoo.org/glsa/202211-03",
"https://security.netapp.com/advisory/ntap-20221209-0001/",
"https://www.debian.org/security/2022/dsa-5277"
],
"epss": 0.15416,
"cvss": 6.5
},
"CVE-2015-2783": {
"verified": false,
"ranking_epss": 0.92878,
"cvss_v2": 5.8,
"cvss_version": 2,
"summary": "ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read and application crash) via a crafted length value in conjunction with crafted serialized data in a phar archive, related to the phar_parse_metadata and phar_parse_pharfile functions.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.debian.org/security/2015/dsa-3280",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/74239",
"http://www.securitytracker.com/id/1032146",
"http://www.ubuntu.com/usn/USN-2572-1",
"https://bugs.php.net/bug.php?id=69324",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205267",
"https://support.apple.com/kb/HT205031",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.debian.org/security/2015/dsa-3280",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/74239",
"http://www.securitytracker.com/id/1032146",
"http://www.ubuntu.com/usn/USN-2572-1",
"https://bugs.php.net/bug.php?id=69324",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205267",
"https://support.apple.com/kb/HT205031"
],
"epss": 0.09675,
"cvss": 5.8
},
"CVE-2020-1934": {
"verified": false,
"ranking_epss": 0.9722,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00002.html",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r09bb998baee74a2c316446bd1a41ae7f8d7049d09d9ff991471e8775%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r1719675306dfbeaceff3dc63ccad3de2d5615919ca3c13276948b9ac%40%3Cdev.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r26706d75f6b9080ca6a29955aeb8de98ec71bbea6e9f05809c46bca4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r33e626224386d2851a83c352f784ba90dedee5dc7fcfcc221d5d7527%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r3c5c3104813c1c5508b55564b66546933079250a46ce50eee90b2e36%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r52a52fd60a258f5999a8fa5424b30d9fd795885f9ff4828d889cd201%40%3Cdev.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r5d12ffc80685b0df1d6801e68000a7707dd694fe32e4f221de67c210%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdf3e5d0a5f5c3d90d6013bccc6c4d5af59cf1f8c8dea5d9a283d13ce%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2021/07/msg00006.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A2RN46PRBJE7E7OPD4YZX5SVWV5QKGV5/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYVYE2ZERFXDV6RMKK3I5SDSDQLPSEIQ/",
"https://security.netapp.com/advisory/ntap-20200413-0002/",
"https://usn.ubuntu.com/4458-1/",
"https://www.debian.org/security/2020/dsa-4757",
"https://www.oracle.com/security-alerts/cpujul2020.html",
"http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00002.html",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r09bb998baee74a2c316446bd1a41ae7f8d7049d09d9ff991471e8775%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r1719675306dfbeaceff3dc63ccad3de2d5615919ca3c13276948b9ac%40%3Cdev.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r26706d75f6b9080ca6a29955aeb8de98ec71bbea6e9f05809c46bca4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r33e626224386d2851a83c352f784ba90dedee5dc7fcfcc221d5d7527%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r3c5c3104813c1c5508b55564b66546933079250a46ce50eee90b2e36%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r52a52fd60a258f5999a8fa5424b30d9fd795885f9ff4828d889cd201%40%3Cdev.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r5d12ffc80685b0df1d6801e68000a7707dd694fe32e4f221de67c210%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdf3e5d0a5f5c3d90d6013bccc6c4d5af59cf1f8c8dea5d9a283d13ce%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2021/07/msg00006.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A2RN46PRBJE7E7OPD4YZX5SVWV5QKGV5/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYVYE2ZERFXDV6RMKK3I5SDSDQLPSEIQ/",
"https://security.netapp.com/advisory/ntap-20200413-0002/",
"https://usn.ubuntu.com/4458-1/",
"https://www.debian.org/security/2020/dsa-4757",
"https://www.oracle.com/security-alerts/cpujul2020.html"
],
"epss": 0.38657,
"cvss": 5.3
},
"CVE-2015-2787": {
"verified": false,
"ranking_epss": 0.97088,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages use of the unset function within an __wakeup function, a related issue to CVE-2015-0231.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html",
"http://lists.opensuse.org/opensuse-updates/2015-04/msg00015.html",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/73431",
"http://www.securitytracker.com/id/1032485",
"http://www.ubuntu.com/usn/USN-2572-1",
"https://bugs.php.net/bug.php?id=68976",
"https://gist.github.com/smalyshev/eea9eafc7c88a4a6d10d",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205267",
"https://support.apple.com/kb/HT205031",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html",
"http://lists.opensuse.org/opensuse-updates/2015-04/msg00015.html",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/73431",
"http://www.securitytracker.com/id/1032485",
"http://www.ubuntu.com/usn/USN-2572-1",
"https://bugs.php.net/bug.php?id=68976",
"https://gist.github.com/smalyshev/eea9eafc7c88a4a6d10d",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205267",
"https://support.apple.com/kb/HT205031"
],
"epss": 0.3643,
"cvss": 7.5
},
"CVE-2016-0718": {
"verified": false,
"ranking_epss": 0.86099,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.",
"references": [
"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html",
"http://packetstormsecurity.com/files/141350/ESET-Endpoint-Antivirus-6-Remote-Code-Execution.html",
"http://rhn.redhat.com/errata/RHSA-2016-2824.html",
"http://seclists.org/fulldisclosure/2017/Feb/68",
"http://support.eset.com/ca6333/",
"http://www.debian.org/security/2016/dsa-3582",
"http://www.mozilla.org/security/announce/2016/mfsa2016-68.html",
"http://www.openwall.com/lists/oss-security/2016/05/17/12",
"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html",
"http://www.securityfocus.com/bid/90729",
"http://www.securitytracker.com/id/1036348",
"http://www.securitytracker.com/id/1036415",
"http://www.securitytracker.com/id/1037705",
"http://www.ubuntu.com/usn/USN-2983-1",
"http://www.ubuntu.com/usn/USN-3044-1",
"https://access.redhat.com/errata/RHSA-2018:2486",
"https://bugzilla.mozilla.org/show_bug.cgi?id=1236923",
"https://bugzilla.redhat.com/show_bug.cgi?id=1296102",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10365",
"https://security.gentoo.org/glsa/201701-21",
"https://source.android.com/security/bulletin/2016-11-01.html",
"https://support.apple.com/HT206903",
"https://www.tenable.com/security/tns-2016-20",
"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html",
"http://packetstormsecurity.com/files/141350/ESET-Endpoint-Antivirus-6-Remote-Code-Execution.html",
"http://rhn.redhat.com/errata/RHSA-2016-2824.html",
"http://seclists.org/fulldisclosure/2017/Feb/68",
"http://support.eset.com/ca6333/",
"http://www.debian.org/security/2016/dsa-3582",
"http://www.mozilla.org/security/announce/2016/mfsa2016-68.html",
"http://www.openwall.com/lists/oss-security/2016/05/17/12",
"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html",
"http://www.securityfocus.com/bid/90729",
"http://www.securitytracker.com/id/1036348",
"http://www.securitytracker.com/id/1036415",
"http://www.securitytracker.com/id/1037705",
"http://www.ubuntu.com/usn/USN-2983-1",
"http://www.ubuntu.com/usn/USN-3044-1",
"https://access.redhat.com/errata/RHSA-2018:2486",
"https://bugzilla.mozilla.org/show_bug.cgi?id=1236923",
"https://bugzilla.redhat.com/show_bug.cgi?id=1296102",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10365",
"https://security.gentoo.org/glsa/201701-21",
"https://source.android.com/security/bulletin/2016-11-01.html",
"https://support.apple.com/HT206903",
"https://www.tenable.com/security/tns-2016-20"
],
"epss": 0.02827,
"cvss": 9.8
},
"CVE-2018-1061": {
"verified": false,
"ranking_epss": 0.80897,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"http://www.securitytracker.com/id/1042001",
"https://access.redhat.com/errata/RHBA-2019:0327",
"https://access.redhat.com/errata/RHSA-2018:3041",
"https://access.redhat.com/errata/RHSA-2018:3505",
"https://access.redhat.com/errata/RHSA-2019:1260",
"https://access.redhat.com/errata/RHSA-2019:3725",
"https://bugs.python.org/issue32981",
"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1061",
"https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-6-release-candidate-1",
"https://docs.python.org/3.6/whatsnew/changelog.html#python-3-6-5-release-candidate-1",
"https://lists.debian.org/debian-lts-announce/2018/09/msg00030.html",
"https://lists.debian.org/debian-lts-announce/2018/09/msg00031.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/46PVWY5LFP4BRPG3BVQ5QEEFYBVEXHCK/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AEZ5IQT7OF7Q2NCGIVABOWYGKO7YU3NJ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSKPGPZQNTAULHW4UH63KGOOUIDE4RRB/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03951en_us",
"https://usn.ubuntu.com/3817-1/",
"https://usn.ubuntu.com/3817-2/",
"https://www.debian.org/security/2018/dsa-4306",
"https://www.debian.org/security/2018/dsa-4307",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"http://www.securitytracker.com/id/1042001",
"https://access.redhat.com/errata/RHBA-2019:0327",
"https://access.redhat.com/errata/RHSA-2018:3041",
"https://access.redhat.com/errata/RHSA-2018:3505",
"https://access.redhat.com/errata/RHSA-2019:1260",
"https://access.redhat.com/errata/RHSA-2019:3725",
"https://bugs.python.org/issue32981",
"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1061",
"https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-6-release-candidate-1",
"https://docs.python.org/3.6/whatsnew/changelog.html#python-3-6-5-release-candidate-1",
"https://lists.debian.org/debian-lts-announce/2018/09/msg00030.html",
"https://lists.debian.org/debian-lts-announce/2018/09/msg00031.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/46PVWY5LFP4BRPG3BVQ5QEEFYBVEXHCK/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AEZ5IQT7OF7Q2NCGIVABOWYGKO7YU3NJ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSKPGPZQNTAULHW4UH63KGOOUIDE4RRB/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03951en_us",
"https://usn.ubuntu.com/3817-1/",
"https://usn.ubuntu.com/3817-2/",
"https://www.debian.org/security/2018/dsa-4306",
"https://www.debian.org/security/2018/dsa-4307"
],
"epss": 0.01476,
"cvss": 6.5
},
"CVE-2018-1060": {
"verified": false,
"ranking_epss": 0.76407,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"http://www.securitytracker.com/id/1042001",
"https://access.redhat.com/errata/RHBA-2019:0327",
"https://access.redhat.com/errata/RHSA-2018:3041",
"https://access.redhat.com/errata/RHSA-2018:3505",
"https://access.redhat.com/errata/RHSA-2019:1260",
"https://access.redhat.com/errata/RHSA-2019:3725",
"https://bugs.python.org/issue32981",
"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1060",
"https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-6-release-candidate-1",
"https://docs.python.org/3.6/whatsnew/changelog.html#python-3-6-5-release-candidate-1",
"https://lists.debian.org/debian-lts-announce/2018/09/msg00030.html",
"https://lists.debian.org/debian-lts-announce/2018/09/msg00031.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/46PVWY5LFP4BRPG3BVQ5QEEFYBVEXHCK/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AEZ5IQT7OF7Q2NCGIVABOWYGKO7YU3NJ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSKPGPZQNTAULHW4UH63KGOOUIDE4RRB/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03951en_us",
"https://usn.ubuntu.com/3817-1/",
"https://usn.ubuntu.com/3817-2/",
"https://www.debian.org/security/2018/dsa-4306",
"https://www.debian.org/security/2018/dsa-4307",
"https://www.oracle.com/security-alerts/cpujan2020.html",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"http://www.securitytracker.com/id/1042001",
"https://access.redhat.com/errata/RHBA-2019:0327",
"https://access.redhat.com/errata/RHSA-2018:3041",
"https://access.redhat.com/errata/RHSA-2018:3505",
"https://access.redhat.com/errata/RHSA-2019:1260",
"https://access.redhat.com/errata/RHSA-2019:3725",
"https://bugs.python.org/issue32981",
"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1060",
"https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-6-release-candidate-1",
"https://docs.python.org/3.6/whatsnew/changelog.html#python-3-6-5-release-candidate-1",
"https://lists.debian.org/debian-lts-announce/2018/09/msg00030.html",
"https://lists.debian.org/debian-lts-announce/2018/09/msg00031.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/46PVWY5LFP4BRPG3BVQ5QEEFYBVEXHCK/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AEZ5IQT7OF7Q2NCGIVABOWYGKO7YU3NJ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSKPGPZQNTAULHW4UH63KGOOUIDE4RRB/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03951en_us",
"https://usn.ubuntu.com/3817-1/",
"https://usn.ubuntu.com/3817-2/",
"https://www.debian.org/security/2018/dsa-4306",
"https://www.debian.org/security/2018/dsa-4307",
"https://www.oracle.com/security-alerts/cpujan2020.html"
],
"epss": 0.00961,
"cvss": 4.3
},
"CVE-2017-11143": {
"verified": false,
"ranking_epss": 0.93689,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "In PHP before 5.6.31, an invalid free in the WDDX deserialization of boolean parameters could be used by attackers able to inject XML for deserialization to crash the PHP interpreter, related to an invalid free for an empty boolean element in ext/wddx/wddx.c.",
"references": [
"http://openwall.com/lists/oss-security/2017/07/10/6",
"http://php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/99553",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=74145",
"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2aae60461c2ff7b7fbcdd194c789ac841d0747d7",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.debian.org/security/2018/dsa-4081",
"https://www.tenable.com/security/tns-2017-12",
"http://openwall.com/lists/oss-security/2017/07/10/6",
"http://php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/99553",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=74145",
"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2aae60461c2ff7b7fbcdd194c789ac841d0747d7",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.debian.org/security/2018/dsa-4081",
"https://www.tenable.com/security/tns-2017-12"
],
"epss": 0.11856,
"cvss": 7.5
},
"CVE-2015-3412": {
"verified": false,
"ranking_epss": 0.7697,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read arbitrary files via crafted input to an application that calls the stream_resolve_include_path function in ext/standard/streamsfuncs.c, as demonstrated by a filename\\0.extension attack that bypasses an intended configuration in which client users may read files with only one specific extension.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=4435b9142ff9813845d5c97ab29a5d637bedb257",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75250",
"http://www.securitytracker.com/id/1032709",
"https://bugs.php.net/bug.php?id=69353",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=4435b9142ff9813845d5c97ab29a5d637bedb257",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75250",
"http://www.securitytracker.com/id/1032709",
"https://bugs.php.net/bug.php?id=69353"
],
"epss": 0.01006,
"cvss": 5.3
},
"CVE-2017-11145": {
"verified": false,
"ranking_epss": 0.92198,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelib_meridian parsing code could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: the correct fix is in the e8b7698f5ee757ce2c8bd10a192a491a498f891c commit, not the bd77ac90d3bdf31ce2a5251ad92e9e75 gist.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=e8b7698f5ee757ce2c8bd10a192a491a498f891c",
"http://openwall.com/lists/oss-security/2017/07/10/6",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/99550",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=74819",
"https://gist.github.com/anonymous/bd77ac90d3bdf31ce2a5251ad92e9e75",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.debian.org/security/2018/dsa-4080",
"https://www.debian.org/security/2018/dsa-4081",
"https://www.tenable.com/security/tns-2017-12",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=e8b7698f5ee757ce2c8bd10a192a491a498f891c",
"http://openwall.com/lists/oss-security/2017/07/10/6",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/99550",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=74819",
"https://gist.github.com/anonymous/bd77ac90d3bdf31ce2a5251ad92e9e75",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.debian.org/security/2018/dsa-4080",
"https://www.debian.org/security/2018/dsa-4081",
"https://www.tenable.com/security/tns-2017-12"
],
"epss": 0.08268,
"cvss": 7.5
},
"CVE-2017-11144": {
"verified": false,
"ranking_epss": 0.9671,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check the return value of the OpenSSL sealing function, which could lead to a crash of the PHP interpreter, related to an interpretation conflict for a negative number in ext/openssl/openssl.c, and an OpenSSL documentation omission.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=73cabfedf519298e1a11192699f44d53c529315e",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=89637c6b41b510c20d262c17483f582f115c66d6",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=91826a311dd37f4c4e5d605fa7af331e80ddd4c3",
"http://openwall.com/lists/oss-security/2017/07/10/6",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=74651",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.debian.org/security/2018/dsa-4080",
"https://www.debian.org/security/2018/dsa-4081",
"https://www.tenable.com/security/tns-2017-12",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=73cabfedf519298e1a11192699f44d53c529315e",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=89637c6b41b510c20d262c17483f582f115c66d6",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=91826a311dd37f4c4e5d605fa7af331e80ddd4c3",
"http://openwall.com/lists/oss-security/2017/07/10/6",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=74651",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.debian.org/security/2018/dsa-4080",
"https://www.debian.org/security/2018/dsa-4081",
"https://www.tenable.com/security/tns-2017-12"
],
"epss": 0.31032,
"cvss": 7.5
},
"CVE-2017-11147": {
"verified": false,
"ranking_epss": 0.86169,
"cvss_v2": 6.4,
"cvss_version": 3,
"summary": "In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying malicious archive files to crash the PHP interpreter or potentially disclose information due to a buffer over-read in the phar_parse_pharfile function in ext/phar/phar.c.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=e5246580a85f031e1a3b8064edbaa55c1643a451",
"http://openwall.com/lists/oss-security/2017/07/10/6",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/99607",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=73773",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.tenable.com/security/tns-2017-12",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=e5246580a85f031e1a3b8064edbaa55c1643a451",
"http://openwall.com/lists/oss-security/2017/07/10/6",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/99607",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=73773",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.tenable.com/security/tns-2017-12"
],
"epss": 0.02855,
"cvss": 9.1
},
"CVE-2015-3416": {
"verified": false,
"ranking_epss": 0.91768,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service (integer overflow and stack-based buffer overflow) or possibly have unspecified other impact via large integers in a crafted printf function call in a SELECT statement.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://rhn.redhat.com/errata/RHSA-2015-1634.html",
"http://rhn.redhat.com/errata/RHSA-2015-1635.html",
"http://seclists.org/fulldisclosure/2015/Apr/31",
"http://www.debian.org/security/2015/dsa-3252",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:217",
"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
"http://www.securityfocus.com/bid/74228",
"http://www.securitytracker.com/id/1033703",
"http://www.sqlite.org/src/info/c494171f77dc2e5e04cb6d865e688448f04e5920",
"http://www.ubuntu.com/usn/USN-2698-1",
"https://security.gentoo.org/glsa/201507-05",
"https://support.apple.com/HT205213",
"https://support.apple.com/HT205267",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://rhn.redhat.com/errata/RHSA-2015-1634.html",
"http://rhn.redhat.com/errata/RHSA-2015-1635.html",
"http://seclists.org/fulldisclosure/2015/Apr/31",
"http://www.debian.org/security/2015/dsa-3252",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:217",
"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
"http://www.securityfocus.com/bid/74228",
"http://www.securitytracker.com/id/1033703",
"http://www.sqlite.org/src/info/c494171f77dc2e5e04cb6d865e688448f04e5920",
"http://www.ubuntu.com/usn/USN-2698-1",
"https://security.gentoo.org/glsa/201507-05",
"https://support.apple.com/HT205213",
"https://support.apple.com/HT205267"
],
"epss": 0.07527,
"cvss": 7.5
},
"CVE-2019-0217": {
"verified": false,
"ranking_epss": 0.97464,
"cvss_v2": 6,
"cvss_version": 3,
"summary": "In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html",
"http://www.openwall.com/lists/oss-security/2019/04/02/5",
"http://www.securityfocus.com/bid/107668",
"https://access.redhat.com/errata/RHSA-2019:2343",
"https://access.redhat.com/errata/RHSA-2019:3436",
"https://access.redhat.com/errata/RHSA-2019:3932",
"https://access.redhat.com/errata/RHSA-2019:3933",
"https://access.redhat.com/errata/RHSA-2019:3935",
"https://access.redhat.com/errata/RHSA-2019:4126",
"https://bugzilla.redhat.com/show_bug.cgi?id=1695020",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/e0b8f6e858b1c8ec2ce8e291a2c543d438915037c7af661ab6d33808%40%3Cdev.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re473305a65b4db888e3556e4dae10c2a04ee89dcff2e26ecdbd860a9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2019/04/msg00008.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ALIR5S3O7NRHEGFMIDMUSYQIZOE4TJJN/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZRMTEIGZKYFNGIDOTXN3GNEJTLVCYU7/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/",
"https://seclists.org/bugtraq/2019/Apr/5",
"https://security.netapp.com/advisory/ntap-20190423-0001/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03950en_us",
"https://usn.ubuntu.com/3937-1/",
"https://usn.ubuntu.com/3937-2/",
"https://www.debian.org/security/2019/dsa-4422",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html",
"http://www.openwall.com/lists/oss-security/2019/04/02/5",
"http://www.securityfocus.com/bid/107668",
"https://access.redhat.com/errata/RHSA-2019:2343",
"https://access.redhat.com/errata/RHSA-2019:3436",
"https://access.redhat.com/errata/RHSA-2019:3932",
"https://access.redhat.com/errata/RHSA-2019:3933",
"https://access.redhat.com/errata/RHSA-2019:3935",
"https://access.redhat.com/errata/RHSA-2019:4126",
"https://bugzilla.redhat.com/show_bug.cgi?id=1695020",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/e0b8f6e858b1c8ec2ce8e291a2c543d438915037c7af661ab6d33808%40%3Cdev.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re473305a65b4db888e3556e4dae10c2a04ee89dcff2e26ecdbd860a9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2019/04/msg00008.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ALIR5S3O7NRHEGFMIDMUSYQIZOE4TJJN/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZRMTEIGZKYFNGIDOTXN3GNEJTLVCYU7/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/",
"https://seclists.org/bugtraq/2019/Apr/5",
"https://security.netapp.com/advisory/ntap-20190423-0001/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03950en_us",
"https://usn.ubuntu.com/3937-1/",
"https://usn.ubuntu.com/3937-2/",
"https://www.debian.org/security/2019/dsa-4422",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
],
"epss": 0.43022,
"cvss": 7.5
},
"CVE-2022-28330": {
"verified": false,
"ranking_epss": 0.68003,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "Apache HTTP Server 2.4.53 and earlier on Windows may read beyond bounds when configured to process requests with the mod_isapi module.",
"references": [
"http://www.openwall.com/lists/oss-security/2022/06/08/3",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://security.netapp.com/advisory/ntap-20220624-0005/",
"http://www.openwall.com/lists/oss-security/2022/06/08/3",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://security.netapp.com/advisory/ntap-20220624-0005/"
],
"epss": 0.00555,
"cvss": 5.3
},
"CVE-2024-42516": {
"verified": false,
"ranking_epss": 0.53474,
"cvss_v2": null,
"cvss_version": 3,
"summary": "HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type response headers of applications hosted or proxied by the server can split the HTTP response.\n\nThis vulnerability was described as CVE-2023-38709 but the patch included in Apache HTTP Server 2.4.59 did not address the issue.\n\nUsers are recommended to upgrade to version 2.4.64, which fixes this issue.",
"references": [
"https://httpd.apache.org/security/vulnerabilities_24.html",
"http://www.openwall.com/lists/oss-security/2025/07/10/2",
"http://www.openwall.com/lists/oss-security/2025/07/10/3",
"https://lists.debian.org/debian-lts-announce/2025/08/msg00009.html"
],
"epss": 0.00302,
"cvss": 7.5
},
"CVE-2016-8743": {
"verified": false,
"ranking_epss": 0.92286,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution.",
"references": [
"http://rhn.redhat.com/errata/RHSA-2017-1415.html",
"http://www.debian.org/security/2017/dsa-3796",
"http://www.securityfocus.com/bid/95077",
"http://www.securitytracker.com/id/1037508",
"https://access.redhat.com/errata/RHSA-2017:0906",
"https://access.redhat.com/errata/RHSA-2017:1161",
"https://access.redhat.com/errata/RHSA-2017:1413",
"https://access.redhat.com/errata/RHSA-2017:1414",
"https://access.redhat.com/errata/RHSA-2017:1721",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03753en_us",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us",
"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-8743",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r09b8a39d1262adbab5528eea73df1b1f93e919bf004ed5a843d9cad1%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r4fe84db67fe9dc906c6185e58bbd9913f4356dd555a5c3db490694e5%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r94284b139540e5287ebdd3450682d3e3d187263dd6b75af8fa7d4890%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfcb6c7b9e7ca727a7eeeb5f13f89488a03981cfa0e7c3125f18fa239%40%3Ccvs.httpd.apache.org%3E",
"https://security.gentoo.org/glsa/201701-36",
"https://security.netapp.com/advisory/ntap-20180423-0001/",
"https://support.apple.com/HT208221",
"https://www.tenable.com/security/tns-2017-04",
"http://rhn.redhat.com/errata/RHSA-2017-1415.html",
"http://www.debian.org/security/2017/dsa-3796",
"http://www.securityfocus.com/bid/95077",
"http://www.securitytracker.com/id/1037508",
"https://access.redhat.com/errata/RHSA-2017:0906",
"https://access.redhat.com/errata/RHSA-2017:1161",
"https://access.redhat.com/errata/RHSA-2017:1413",
"https://access.redhat.com/errata/RHSA-2017:1414",
"https://access.redhat.com/errata/RHSA-2017:1721",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03753en_us",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us",
"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-8743",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r09b8a39d1262adbab5528eea73df1b1f93e919bf004ed5a843d9cad1%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r4fe84db67fe9dc906c6185e58bbd9913f4356dd555a5c3db490694e5%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r94284b139540e5287ebdd3450682d3e3d187263dd6b75af8fa7d4890%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfcb6c7b9e7ca727a7eeeb5f13f89488a03981cfa0e7c3125f18fa239%40%3Ccvs.httpd.apache.org%3E",
"https://security.gentoo.org/glsa/201701-36",
"https://security.netapp.com/advisory/ntap-20180423-0001/",
"https://support.apple.com/HT208221",
"https://www.tenable.com/security/tns-2017-04"
],
"epss": 0.08406,
"cvss": 7.5
},
"CVE-2014-4670": {
"verified": false,
"ranking_epss": 0.56334,
"cvss_v2": 4.6,
"cvss_version": 2,
"summary": "Use-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact via crafted iterator usage within applications in certain web-hosting environments.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-07/msg00035.html",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html",
"http://rhn.redhat.com/errata/RHSA-2014-1326.html",
"http://rhn.redhat.com/errata/RHSA-2014-1327.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/54553",
"http://secunia.com/advisories/59831",
"http://secunia.com/advisories/60696",
"http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
"http://www.debian.org/security/2014/dsa-3008",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"https://bugs.php.net/bug.php?id=67538",
"https://support.apple.com/HT204659",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-07/msg00035.html",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html",
"http://rhn.redhat.com/errata/RHSA-2014-1326.html",
"http://rhn.redhat.com/errata/RHSA-2014-1327.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/54553",
"http://secunia.com/advisories/59831",
"http://secunia.com/advisories/60696",
"http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
"http://www.debian.org/security/2014/dsa-3008",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"https://bugs.php.net/bug.php?id=67538",
"https://support.apple.com/HT204659"
],
"epss": 0.00336,
"cvss": 4.6
},
"CVE-2025-65082": {
"verified": false,
"ranking_epss": 0.36219,
"cvss_v2": null,
"cvss_version": 3,
"summary": "Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs.\n\nThis issue affects Apache HTTP Server from 2.4.0 through 2.4.65.\n\nUsers are recommended to upgrade to version 2.4.66 which fixes the issue.",
"references": [
"https://httpd.apache.org/security/vulnerabilities_24.html",
"http://www.openwall.com/lists/oss-security/2025/12/04/7"
],
"epss": 0.00156,
"cvss": 6.5
},
"CVE-2014-3515": {
"verified": false,
"ranking_epss": 0.98281,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which allows remote attackers to execute arbitrary code via a crafted string that triggers use of a Hashtable destructor, related to \"type confusion\" issues in (1) ArrayObject and (2) SPLObjectStorage.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=88223c5245e9b470e1e6362bfd96829562ffe6ab",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html",
"http://marc.info/?l=bugtraq&m=141017844705317&w=2",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/59794",
"http://secunia.com/advisories/59831",
"http://secunia.com/advisories/60998",
"http://support.apple.com/kb/HT6443",
"http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
"http://www.debian.org/security/2014/dsa-2974",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/68237",
"https://bugs.php.net/bug.php?id=67492",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=88223c5245e9b470e1e6362bfd96829562ffe6ab",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html",
"http://marc.info/?l=bugtraq&m=141017844705317&w=2",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/59794",
"http://secunia.com/advisories/59831",
"http://secunia.com/advisories/60998",
"http://support.apple.com/kb/HT6443",
"http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
"http://www.debian.org/security/2014/dsa-2974",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/68237",
"https://bugs.php.net/bug.php?id=67492"
],
"epss": 0.60788,
"cvss": 7.5
},
"CVE-2024-38474": {
"verified": false,
"ranking_epss": 0.72951,
"cvss_v2": null,
"cvss_version": 3,
"summary": "Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute scripts in\ndirectories permitted by the configuration but not directly reachable by any URL or source disclosure of scripts meant to only to be executed as CGI.\n\nUsers are recommended to upgrade to version 2.4.60, which fixes this issue.\n\nSome RewriteRules that capture and substitute unsafely will now fail unless rewrite flag \"UnsafeAllow3F\" is specified.",
"references": [
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://security.netapp.com/advisory/ntap-20240712-0001/",
"http://www.openwall.com/lists/oss-security/2024/07/01/7",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://security.netapp.com/advisory/ntap-20240712-0001/"
],
"epss": 0.00744,
"cvss": 9.8
},
"CVE-2024-38472": {
"verified": false,
"ranking_epss": 0.99605,
"cvss_v2": null,
"cvss_version": 3,
"summary": "SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content \nUsers are recommended to upgrade to version 2.4.60 which fixes this issue. Note: Existing configurations that access UNC paths will have to configure new directive \"UNCList\" to allow access during request processing.",
"references": [
"https://httpd.apache.org/security/vulnerabilities_24.html",
"http://www.openwall.com/lists/oss-security/2024/07/01/5",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://security.netapp.com/advisory/ntap-20240712-0001/"
],
"epss": 0.90493,
"cvss": 7.5
},
"CVE-2022-29404": {
"verified": false,
"ranking_epss": 0.84717,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "In Apache HTTP Server 2.4.53 and earlier, a malicious request to a lua script that calls r:parsebody(0) may cause a denial of service due to no default limit on possible input size.",
"references": [
"http://www.openwall.com/lists/oss-security/2022/06/08/5",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7QUGG2QZWHTITMABFLVXA4DNYUOTPWYQ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20220624-0005/",
"http://www.openwall.com/lists/oss-security/2022/06/08/5",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7QUGG2QZWHTITMABFLVXA4DNYUOTPWYQ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20220624-0005/"
],
"epss": 0.0232,
"cvss": 7.5
},
"CVE-2016-3185": {
"verified": false,
"ranking_epss": 0.85083,
"cvss_v2": 6.4,
"cvss_version": 3,
"summary": "The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, 5.6.x before 5.6.12, and 7.x before 7.0.4 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (type confusion and application crash) via crafted serialized _cookies data, related to the SoapClient::__call method in ext/soap/soap.c.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/84307",
"http://www.ubuntu.com/usn/USN-2952-1",
"http://www.ubuntu.com/usn/USN-2952-2",
"https://bugs.php.net/bug.php?id=70081",
"https://bugs.php.net/bug.php?id=71610",
"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=eaf4e77190d402ea014207e9a7d5da1a4f3727ba",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/84307",
"http://www.ubuntu.com/usn/USN-2952-1",
"http://www.ubuntu.com/usn/USN-2952-2",
"https://bugs.php.net/bug.php?id=70081",
"https://bugs.php.net/bug.php?id=71610",
"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=eaf4e77190d402ea014207e9a7d5da1a4f3727ba"
],
"epss": 0.02434,
"cvss": 7.1
},
"CVE-2007-3205": {
"verified": false,
"ranking_epss": 0.76884,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin.",
"references": [
"http://osvdb.org/39834",
"http://securityreason.com/securityalert/2800",
"http://www.acid-root.new.fr/advisories/14070612.txt",
"http://www.securityfocus.com/archive/1/471178/100/0/threaded",
"http://www.securityfocus.com/archive/1/471204/100/0/threaded",
"http://www.securityfocus.com/archive/1/471275/100/0/threaded",
"https://exchange.xforce.ibmcloud.com/vulnerabilities/34836",
"http://osvdb.org/39834",
"http://securityreason.com/securityalert/2800",
"http://www.acid-root.new.fr/advisories/14070612.txt",
"http://www.securityfocus.com/archive/1/471178/100/0/threaded",
"http://www.securityfocus.com/archive/1/471204/100/0/threaded",
"http://www.securityfocus.com/archive/1/471275/100/0/threaded",
"https://exchange.xforce.ibmcloud.com/vulnerabilities/34836"
],
"epss": 0.00998,
"cvss": 5
},
"CVE-2014-0224": {
"verified": false,
"ranking_epss": 0.99783,
"cvss_v2": 5.8,
"cvss_version": 3,
"summary": "OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the \"CCS Injection\" vulnerability.",
"references": [
"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc",
"http://ccsinjection.lepidum.co.jp",
"http://dev.mysql.com/doc/relnotes/workbench/en/wb-news-6-1-7.html",
"http://esupport.trendmicro.com/solution/en-US/1103813.aspx",
"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629",
"http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195",
"http://kb.juniper.net/InfoCenter/index?page=content&id=KB29217",
"http://linux.oracle.com/errata/ELSA-2014-1053.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html",
"http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html",
"http://marc.info/?l=bugtraq&m=140266410314613&w=2",
"http://marc.info/?l=bugtraq&m=140317760000786&w=2",
"http://marc.info/?l=bugtraq&m=140369637402535&w=2",
"http://marc.info/?l=bugtraq&m=140386311427810&w=2",
"http://marc.info/?l=bugtraq&m=140389274407904&w=2",
"http://marc.info/?l=bugtraq&m=140389355508263&w=2",
"http://marc.info/?l=bugtraq&m=140431828824371&w=2",
"http://marc.info/?l=bugtraq&m=140448122410568&w=2",
"http://marc.info/?l=bugtraq&m=140482916501310&w=2",
"http://marc.info/?l=bugtraq&m=140491231331543&w=2",
"http://marc.info/?l=bugtraq&m=140499864129699&w=2",
"http://marc.info/?l=bugtraq&m=140544599631400&w=2",
"http://marc.info/?l=bugtraq&m=140604261522465&w=2",
"http://marc.info/?l=bugtraq&m=140621259019789&w=2",
"http://marc.info/?l=bugtraq&m=140672208601650&w=2",
"http://marc.info/?l=bugtraq&m=140752315422991&w=2",
"http://marc.info/?l=bugtraq&m=140784085708882&w=2",
"http://marc.info/?l=bugtraq&m=140794476212181&w=2",
"http://marc.info/?l=bugtraq&m=140852757108392&w=2",
"http://marc.info/?l=bugtraq&m=140852826008699&w=2",
"http://marc.info/?l=bugtraq&m=140870499402361&w=2",
"http://marc.info/?l=bugtraq&m=140904544427729&w=2",
"http://marc.info/?l=bugtraq&m=140983229106599&w=2",
"http://marc.info/?l=bugtraq&m=141025641601169&w=2",
"http://marc.info/?l=bugtraq&m=141147110427269&w=2",
"http://marc.info/?l=bugtraq&m=141164638606214&w=2",
"http://marc.info/?l=bugtraq&m=141383410222440&w=2",
"http://marc.info/?l=bugtraq&m=141383465822787&w=2",
"http://marc.info/?l=bugtraq&m=141658880509699&w=2",
"http://marc.info/?l=bugtraq&m=142350350616251&w=2",
"http://marc.info/?l=bugtraq&m=142546741516006&w=2",
"http://marc.info/?l=bugtraq&m=142805027510172&w=2",
"http://puppetlabs.com/security/cve/cve-2014-0224",
"http://rhn.redhat.com/errata/RHSA-2014-0624.html",
"http://rhn.redhat.com/errata/RHSA-2014-0626.html",
"http://rhn.redhat.com/errata/RHSA-2014-0627.html",
"http://rhn.redhat.com/errata/RHSA-2014-0630.html",
"http://rhn.redhat.com/errata/RHSA-2014-0631.html",
"http://rhn.redhat.com/errata/RHSA-2014-0632.html",
"http://rhn.redhat.com/errata/RHSA-2014-0633.html",
"http://rhn.redhat.com/errata/RHSA-2014-0680.html",
"http://seclists.org/fulldisclosure/2014/Dec/23",
"http://seclists.org/fulldisclosure/2014/Jun/38",
"http://secunia.com/advisories/58128",
"http://secunia.com/advisories/58337",
"http://secunia.com/advisories/58385",
"http://secunia.com/advisories/58433",
"http://secunia.com/advisories/58492",
"http://secunia.com/advisories/58579",
"http://secunia.com/advisories/58615",
"http://secunia.com/advisories/58639",
"http://secunia.com/advisories/58660",
"http://secunia.com/advisories/58667",
"http://secunia.com/advisories/58713",
"http://secunia.com/advisories/58714",
"http://secunia.com/advisories/58716",
"http://secunia.com/advisories/58719",
"http://secunia.com/advisories/58742",
"http://secunia.com/advisories/58743",
"http://secunia.com/advisories/58745",
"http://secunia.com/advisories/58759",
"http://secunia.com/advisories/58930",
"http://secunia.com/advisories/58939",
"http://secunia.com/advisories/58945",
"http://secunia.com/advisories/58977",
"http://secunia.com/advisories/59004",
"http://secunia.com/advisories/59012",
"http://secunia.com/advisories/59040",
"http://secunia.com/advisories/59043",
"http://secunia.com/advisories/59055",
"http://secunia.com/advisories/59063",
"http://secunia.com/advisories/59093",
"http://secunia.com/advisories/59101",
"http://secunia.com/advisories/59120",
"http://secunia.com/advisories/59126",
"http://secunia.com/advisories/59132",
"http://secunia.com/advisories/59135",
"http://secunia.com/advisories/59142",
"http://secunia.com/advisories/59162",
"http://secunia.com/advisories/59163",
"http://secunia.com/advisories/59167",
"http://secunia.com/advisories/59175",
"http://secunia.com/advisories/59186",
"http://secunia.com/advisories/59188",
"http://secunia.com/advisories/59189",
"http://secunia.com/advisories/59190",
"http://secunia.com/advisories/59191",
"http://secunia.com/advisories/59192",
"http://secunia.com/advisories/59202",
"http://secunia.com/advisories/59211",
"http://secunia.com/advisories/59214",
"http://secunia.com/advisories/59215",
"http://secunia.com/advisories/59223",
"http://secunia.com/advisories/59231",
"http://secunia.com/advisories/59264",
"http://secunia.com/advisories/59282",
"http://secunia.com/advisories/59284",
"http://secunia.com/advisories/59287",
"http://secunia.com/advisories/59300",
"http://secunia.com/advisories/59301",
"http://secunia.com/advisories/59305",
"http://secunia.com/advisories/59306",
"http://secunia.com/advisories/59310",
"http://secunia.com/advisories/59325",
"http://secunia.com/advisories/59338",
"http://secunia.com/advisories/59342",
"http://secunia.com/advisories/59347",
"http://secunia.com/advisories/59354",
"http://secunia.com/advisories/59362",
"http://secunia.com/advisories/59364",
"http://secunia.com/advisories/59365",
"http://secunia.com/advisories/59368",
"http://secunia.com/advisories/59370",
"http://secunia.com/advisories/59374",
"http://secunia.com/advisories/59375",
"http://secunia.com/advisories/59380",
"http://secunia.com/advisories/59383",
"http://secunia.com/advisories/59389",
"http://secunia.com/advisories/59413",
"http://secunia.com/advisories/59429",
"http://secunia.com/advisories/59435",
"http://secunia.com/advisories/59437",
"http://secunia.com/advisories/59438",
"http://secunia.com/advisories/59440",
"http://secunia.com/advisories/59441",
"http://secunia.com/advisories/59442",
"http://secunia.com/advisories/59444",
"http://secunia.com/advisories/59445",
"http://secunia.com/advisories/59446",
"http://secunia.com/advisories/59447",
"http://secunia.com/advisories/59448",
"http://secunia.com/advisories/59449",
"http://secunia.com/advisories/59450",
"http://secunia.com/advisories/59451",
"http://secunia.com/advisories/59454",
"http://secunia.com/advisories/59459",
"http://secunia.com/advisories/59460",
"http://secunia.com/advisories/59483",
"http://secunia.com/advisories/59490",
"http://secunia.com/advisories/59491",
"http://secunia.com/advisories/59495",
"http://secunia.com/advisories/59502",
"http://secunia.com/advisories/59506",
"http://secunia.com/advisories/59514",
"http://secunia.com/advisories/59518",
"http://secunia.com/advisories/59525",
"http://secunia.com/advisories/59528",
"http://secunia.com/advisories/59529",
"http://secunia.com/advisories/59530",
"http://secunia.com/advisories/59589",
"http://secunia.com/advisories/59602",
"http://secunia.com/advisories/59655",
"http://secunia.com/advisories/59659",
"http://secunia.com/advisories/59661",
"http://secunia.com/advisories/59666",
"http://secunia.com/advisories/59669",
"http://secunia.com/advisories/59677",
"http://secunia.com/advisories/59721",
"http://secunia.com/advisories/59784",
"http://secunia.com/advisories/59824",
"http://secunia.com/advisories/59827",
"http://secunia.com/advisories/59878",
"http://secunia.com/advisories/59885",
"http://secunia.com/advisories/59894",
"http://secunia.com/advisories/59916",
"http://secunia.com/advisories/59990",
"http://secunia.com/advisories/60049",
"http://secunia.com/advisories/60066",
"http://secunia.com/advisories/60176",
"http://secunia.com/advisories/60522",
"http://secunia.com/advisories/60567",
"http://secunia.com/advisories/60571",
"http://secunia.com/advisories/60577",
"http://secunia.com/advisories/60819",
"http://secunia.com/advisories/61254",
"http://secunia.com/advisories/61815",
"http://security.gentoo.org/glsa/glsa-201407-05.xml",
"http://support.apple.com/kb/HT6443",
"http://support.citrix.com/article/CTX140876",
"http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15325.html",
"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl",
"http://www-01.ibm.com/support/docview.wss?uid=isg400001841",
"http://www-01.ibm.com/support/docview.wss?uid=isg400001843",
"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020163",
"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020172",
"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004690",
"http://www-01.ibm.com/support/docview.wss?uid=swg1IV61506",
"http://www-01.ibm.com/support/docview.wss?uid=swg21673137",
"http://www-01.ibm.com/support/docview.wss?uid=swg21675626",
"http://www-01.ibm.com/support/docview.wss?uid=swg21675821",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676035",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676062",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676071",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676333",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676334",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676419",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676478",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676496",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676501",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676529",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676536",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676615",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676644",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676655",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676786",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676833",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676845",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676879",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676889",
"http://www-01.ibm.com/support/docview.wss?uid=swg21677080",
"http://www-01.ibm.com/support/docview.wss?uid=swg21677131",
"http://www-01.ibm.com/support/docview.wss?uid=swg21677390",
"http://www-01.ibm.com/support/docview.wss?uid=swg21677527",
"http://www-01.ibm.com/support/docview.wss?uid=swg21677567",
"http://www-01.ibm.com/support/docview.wss?uid=swg21677695",
"http://www-01.ibm.com/support/docview.wss?uid=swg21677828",
"http://www-01.ibm.com/support/docview.wss?uid=swg21677836",
"http://www-01.ibm.com/support/docview.wss?uid=swg21678167",
"http://www-01.ibm.com/support/docview.wss?uid=swg21678233",
"http://www-01.ibm.com/support/docview.wss?uid=swg21678289",
"http://www-01.ibm.com/support/docview.wss?uid=swg21683332",
"http://www-01.ibm.com/support/docview.wss?uid=swg24037727",
"http://www-01.ibm.com/support/docview.wss?uid=swg24037729",
"http://www-01.ibm.com/support/docview.wss?uid=swg24037730",
"http://www-01.ibm.com/support/docview.wss?uid=swg24037731",
"http://www-01.ibm.com/support/docview.wss?uid=swg24037732",
"http://www-01.ibm.com/support/docview.wss?uid=swg24037761",
"http://www-01.ibm.com/support/docview.wss?uid=swg24037870",
"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095740",
"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754",
"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755",
"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756",
"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757",
"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095737",
"http://www.blackberry.com/btsc/KB36051",
"http://www.f-secure.com/en/web/labs_global/fsc-2014-6",
"http://www.fortiguard.com/advisory/FG-IR-14-018/",
"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm",
"http://www.ibm.com/support/docview.wss?uid=isg3T1020948",
"http://www.ibm.com/support/docview.wss?uid=ssg1S1004678",
"http://www.ibm.com/support/docview.wss?uid=swg1IT02314",
"http://www.ibm.com/support/docview.wss?uid=swg21676356",
"http://www.ibm.com/support/docview.wss?uid=swg21676793",
"http://www.ibm.com/support/docview.wss?uid=swg21676877",
"http://www.ibm.com/support/docview.wss?uid=swg24037783",
"http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf",
"http://www.kb.cert.org/vuls/id/978508",
"http://www.kerio.com/support/kerio-control/release-history",
"http://www.mandriva.com/security/advisories?name=MDVSA-2014:105",
"http://www.mandriva.com/security/advisories?name=MDVSA-2014:106",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062",
"http://www.novell.com/support/kb/doc.php?id=7015264",
"http://www.novell.com/support/kb/doc.php?id=7015300",
"http://www.openssl.org/news/secadv_20140605.txt",
"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html",
"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html",
"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html",
"http://www.securityfocus.com/archive/1/534161/100/0/threaded",
"http://www.securitytracker.com/id/1031032",
"http://www.securitytracker.com/id/1031594",
"http://www.splunk.com/view/SP-CAAAM2D",
"http://www.tenable.com/blog/nessus-527-and-pvs-403-are-available-for-download",
"http://www.vmware.com/security/advisories/VMSA-2014-0006.html",
"http://www.vmware.com/security/advisories/VMSA-2014-0012.html",
"http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0",
"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6060&myns=phmc&mync=E",
"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6061&myns=phmc&mync=E",
"https://access.redhat.com/site/blogs/766093/posts/908133",
"https://blogs.oracle.com/sunsecurity/entry/cve_2014_0224_cryptographic_issues",
"https://blogs.oracle.com/sunsecurity/entry/cve_2014_0224_cryptographic_issues1",
"https://bugzilla.redhat.com/show_bug.cgi?id=1103586",
"https://cert-portal.siemens.com/productcert/pdf/ssa-234763.pdf",
"https://discussions.nessus.org/thread/7517",
"https://filezilla-project.org/versions.php?type=server",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=bc8923b1ec9c467755cd86f7848c50ee8812e441",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946",
"https://kb.bluecoat.com/index?page=content&id=SA80",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10075",
"https://www.arista.com/en/support/advisories-notices/security-advisories/941-security-advisory-0005",
"https://www.ibm.com/support/docview.wss?uid=ssg1S1004670",
"https://www.ibm.com/support/docview.wss?uid=ssg1S1004671",
"https://www.imperialviolet.org/2014/06/05/earlyccs.html",
"https://www.intersectalliance.com/wp-content/uploads/release_notes/ReleaseNotes_for_SNARE_for_MSSQL.pdf",
"https://www.intersectalliance.com/wp-content/uploads/release_notes/ReleaseNotes_for_Snare_for_Windows.pdf",
"https://www.novell.com/support/kb/doc.php?id=7015271",
"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc",
"http://ccsinjection.lepidum.co.jp",
"http://dev.mysql.com/doc/relnotes/workbench/en/wb-news-6-1-7.html",
"http://esupport.trendmicro.com/solution/en-US/1103813.aspx",
"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629",
"http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195",
"http://kb.juniper.net/InfoCenter/index?page=content&id=KB29217",
"http://linux.oracle.com/errata/ELSA-2014-1053.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html",
"http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html",
"http://marc.info/?l=bugtraq&m=140266410314613&w=2",
"http://marc.info/?l=bugtraq&m=140317760000786&w=2",
"http://marc.info/?l=bugtraq&m=140369637402535&w=2",
"http://marc.info/?l=bugtraq&m=140386311427810&w=2",
"http://marc.info/?l=bugtraq&m=140389274407904&w=2",
"http://marc.info/?l=bugtraq&m=140389355508263&w=2",
"http://marc.info/?l=bugtraq&m=140431828824371&w=2",
"http://marc.info/?l=bugtraq&m=140448122410568&w=2",
"http://marc.info/?l=bugtraq&m=140482916501310&w=2",
"http://marc.info/?l=bugtraq&m=140491231331543&w=2",
"http://marc.info/?l=bugtraq&m=140499864129699&w=2",
"http://marc.info/?l=bugtraq&m=140544599631400&w=2",
"http://marc.info/?l=bugtraq&m=140604261522465&w=2",
"http://marc.info/?l=bugtraq&m=140621259019789&w=2",
"http://marc.info/?l=bugtraq&m=140672208601650&w=2",
"http://marc.info/?l=bugtraq&m=140752315422991&w=2",
"http://marc.info/?l=bugtraq&m=140784085708882&w=2",
"http://marc.info/?l=bugtraq&m=140794476212181&w=2",
"http://marc.info/?l=bugtraq&m=140852757108392&w=2",
"http://marc.info/?l=bugtraq&m=140852826008699&w=2",
"http://marc.info/?l=bugtraq&m=140870499402361&w=2",
"http://marc.info/?l=bugtraq&m=140904544427729&w=2",
"http://marc.info/?l=bugtraq&m=140983229106599&w=2",
"http://marc.info/?l=bugtraq&m=141025641601169&w=2",
"http://marc.info/?l=bugtraq&m=141147110427269&w=2",
"http://marc.info/?l=bugtraq&m=141164638606214&w=2",
"http://marc.info/?l=bugtraq&m=141383410222440&w=2",
"http://marc.info/?l=bugtraq&m=141383465822787&w=2",
"http://marc.info/?l=bugtraq&m=141658880509699&w=2",
"http://marc.info/?l=bugtraq&m=142350350616251&w=2",
"http://marc.info/?l=bugtraq&m=142546741516006&w=2",
"http://marc.info/?l=bugtraq&m=142805027510172&w=2",
"http://puppetlabs.com/security/cve/cve-2014-0224",
"http://rhn.redhat.com/errata/RHSA-2014-0624.html",
"http://rhn.redhat.com/errata/RHSA-2014-0626.html",
"http://rhn.redhat.com/errata/RHSA-2014-0627.html",
"http://rhn.redhat.com/errata/RHSA-2014-0630.html",
"http://rhn.redhat.com/errata/RHSA-2014-0631.html",
"http://rhn.redhat.com/errata/RHSA-2014-0632.html",
"http://rhn.redhat.com/errata/RHSA-2014-0633.html",
"http://rhn.redhat.com/errata/RHSA-2014-0680.html",
"http://seclists.org/fulldisclosure/2014/Dec/23",
"http://seclists.org/fulldisclosure/2014/Jun/38",
"http://secunia.com/advisories/58128",
"http://secunia.com/advisories/58337",
"http://secunia.com/advisories/58385",
"http://secunia.com/advisories/58433",
"http://secunia.com/advisories/58492",
"http://secunia.com/advisories/58579",
"http://secunia.com/advisories/58615",
"http://secunia.com/advisories/58639",
"http://secunia.com/advisories/58660",
"http://secunia.com/advisories/58667",
"http://secunia.com/advisories/58713",
"http://secunia.com/advisories/58714",
"http://secunia.com/advisories/58716",
"http://secunia.com/advisories/58719",
"http://secunia.com/advisories/58742",
"http://secunia.com/advisories/58743",
"http://secunia.com/advisories/58745",
"http://secunia.com/advisories/58759",
"http://secunia.com/advisories/58930",
"http://secunia.com/advisories/58939",
"http://secunia.com/advisories/58945",
"http://secunia.com/advisories/58977",
"http://secunia.com/advisories/59004",
"http://secunia.com/advisories/59012",
"http://secunia.com/advisories/59040",
"http://secunia.com/advisories/59043",
"http://secunia.com/advisories/59055",
"http://secunia.com/advisories/59063",
"http://secunia.com/advisories/59093",
"http://secunia.com/advisories/59101",
"http://secunia.com/advisories/59120",
"http://secunia.com/advisories/59126",
"http://secunia.com/advisories/59132",
"http://secunia.com/advisories/59135",
"http://secunia.com/advisories/59142",
"http://secunia.com/advisories/59162",
"http://secunia.com/advisories/59163",
"http://secunia.com/advisories/59167",
"http://secunia.com/advisories/59175",
"http://secunia.com/advisories/59186",
"http://secunia.com/advisories/59188",
"http://secunia.com/advisories/59189",
"http://secunia.com/advisories/59190",
"http://secunia.com/advisories/59191",
"http://secunia.com/advisories/59192",
"http://secunia.com/advisories/59202",
"http://secunia.com/advisories/59211",
"http://secunia.com/advisories/59214",
"http://secunia.com/advisories/59215",
"http://secunia.com/advisories/59223",
"http://secunia.com/advisories/59231",
"http://secunia.com/advisories/59264",
"http://secunia.com/advisories/59282",
"http://secunia.com/advisories/59284",
"http://secunia.com/advisories/59287",
"http://secunia.com/advisories/59300",
"http://secunia.com/advisories/59301",
"http://secunia.com/advisories/59305",
"http://secunia.com/advisories/59306",
"http://secunia.com/advisories/59310",
"http://secunia.com/advisories/59325",
"http://secunia.com/advisories/59338",
"http://secunia.com/advisories/59342",
"http://secunia.com/advisories/59347",
"http://secunia.com/advisories/59354",
"http://secunia.com/advisories/59362",
"http://secunia.com/advisories/59364",
"http://secunia.com/advisories/59365",
"http://secunia.com/advisories/59368",
"http://secunia.com/advisories/59370",
"http://secunia.com/advisories/59374",
"http://secunia.com/advisories/59375",
"http://secunia.com/advisories/59380",
"http://secunia.com/advisories/59383",
"http://secunia.com/advisories/59389",
"http://secunia.com/advisories/59413",
"http://secunia.com/advisories/59429",
"http://secunia.com/advisories/59435",
"http://secunia.com/advisories/59437",
"http://secunia.com/advisories/59438",
"http://secunia.com/advisories/59440",
"http://secunia.com/advisories/59441",
"http://secunia.com/advisories/59442",
"http://secunia.com/advisories/59444",
"http://secunia.com/advisories/59445",
"http://secunia.com/advisories/59446",
"http://secunia.com/advisories/59447",
"http://secunia.com/advisories/59448",
"http://secunia.com/advisories/59449",
"http://secunia.com/advisories/59450",
"http://secunia.com/advisories/59451",
"http://secunia.com/advisories/59454",
"http://secunia.com/advisories/59459",
"http://secunia.com/advisories/59460",
"http://secunia.com/advisories/59483",
"http://secunia.com/advisories/59490",
"http://secunia.com/advisories/59491",
"http://secunia.com/advisories/59495",
"http://secunia.com/advisories/59502",
"http://secunia.com/advisories/59506",
"http://secunia.com/advisories/59514",
"http://secunia.com/advisories/59518",
"http://secunia.com/advisories/59525",
"http://secunia.com/advisories/59528",
"http://secunia.com/advisories/59529",
"http://secunia.com/advisories/59530",
"http://secunia.com/advisories/59589",
"http://secunia.com/advisories/59602",
"http://secunia.com/advisories/59655",
"http://secunia.com/advisories/59659",
"http://secunia.com/advisories/59661",
"http://secunia.com/advisories/59666",
"http://secunia.com/advisories/59669",
"http://secunia.com/advisories/59677",
"http://secunia.com/advisories/59721",
"http://secunia.com/advisories/59784",
"http://secunia.com/advisories/59824",
"http://secunia.com/advisories/59827",
"http://secunia.com/advisories/59878",
"http://secunia.com/advisories/59885",
"http://secunia.com/advisories/59894",
"http://secunia.com/advisories/59916",
"http://secunia.com/advisories/59990",
"http://secunia.com/advisories/60049",
"http://secunia.com/advisories/60066",
"http://secunia.com/advisories/60176",
"http://secunia.com/advisories/60522",
"http://secunia.com/advisories/60567",
"http://secunia.com/advisories/60571",
"http://secunia.com/advisories/60577",
"http://secunia.com/advisories/60819",
"http://secunia.com/advisories/61254",
"http://secunia.com/advisories/61815",
"http://security.gentoo.org/glsa/glsa-201407-05.xml",
"http://support.apple.com/kb/HT6443",
"http://support.citrix.com/article/CTX140876",
"http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15325.html",
"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl",
"http://www-01.ibm.com/support/docview.wss?uid=isg400001841",
"http://www-01.ibm.com/support/docview.wss?uid=isg400001843",
"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020163",
"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020172",
"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004690",
"http://www-01.ibm.com/support/docview.wss?uid=swg1IV61506",
"http://www-01.ibm.com/support/docview.wss?uid=swg21673137",
"http://www-01.ibm.com/support/docview.wss?uid=swg21675626",
"http://www-01.ibm.com/support/docview.wss?uid=swg21675821",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676035",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676062",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676071",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676333",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676334",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676419",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676478",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676496",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676501",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676529",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676536",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676615",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676644",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676655",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676786",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676833",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676845",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676879",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676889",
"http://www-01.ibm.com/support/docview.wss?uid=swg21677080",
"http://www-01.ibm.com/support/docview.wss?uid=swg21677131",
"http://www-01.ibm.com/support/docview.wss?uid=swg21677390",
"http://www-01.ibm.com/support/docview.wss?uid=swg21677527",
"http://www-01.ibm.com/support/docview.wss?uid=swg21677567",
"http://www-01.ibm.com/support/docview.wss?uid=swg21677695",
"http://www-01.ibm.com/support/docview.wss?uid=swg21677828",
"http://www-01.ibm.com/support/docview.wss?uid=swg21677836",
"http://www-01.ibm.com/support/docview.wss?uid=swg21678167",
"http://www-01.ibm.com/support/docview.wss?uid=swg21678233",
"http://www-01.ibm.com/support/docview.wss?uid=swg21678289",
"http://www-01.ibm.com/support/docview.wss?uid=swg21683332",
"http://www-01.ibm.com/support/docview.wss?uid=swg24037727",
"http://www-01.ibm.com/support/docview.wss?uid=swg24037729",
"http://www-01.ibm.com/support/docview.wss?uid=swg24037730",
"http://www-01.ibm.com/support/docview.wss?uid=swg24037731",
"http://www-01.ibm.com/support/docview.wss?uid=swg24037732",
"http://www-01.ibm.com/support/docview.wss?uid=swg24037761",
"http://www-01.ibm.com/support/docview.wss?uid=swg24037870",
"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095740",
"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754",
"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755",
"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756",
"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757",
"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095737",
"http://www.blackberry.com/btsc/KB36051",
"http://www.f-secure.com/en/web/labs_global/fsc-2014-6",
"http://www.fortiguard.com/advisory/FG-IR-14-018/",
"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm",
"http://www.ibm.com/support/docview.wss?uid=isg3T1020948",
"http://www.ibm.com/support/docview.wss?uid=ssg1S1004678",
"http://www.ibm.com/support/docview.wss?uid=swg1IT02314",
"http://www.ibm.com/support/docview.wss?uid=swg21676356",
"http://www.ibm.com/support/docview.wss?uid=swg21676793",
"http://www.ibm.com/support/docview.wss?uid=swg21676877",
"http://www.ibm.com/support/docview.wss?uid=swg24037783",
"http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf",
"http://www.kb.cert.org/vuls/id/978508",
"http://www.kerio.com/support/kerio-control/release-history",
"http://www.mandriva.com/security/advisories?name=MDVSA-2014:105",
"http://www.mandriva.com/security/advisories?name=MDVSA-2014:106",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062",
"http://www.novell.com/support/kb/doc.php?id=7015264",
"http://www.novell.com/support/kb/doc.php?id=7015300",
"http://www.openssl.org/news/secadv_20140605.txt",
"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html",
"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html",
"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html",
"http://www.securityfocus.com/archive/1/534161/100/0/threaded",
"http://www.securitytracker.com/id/1031032",
"http://www.securitytracker.com/id/1031594",
"http://www.splunk.com/view/SP-CAAAM2D",
"http://www.tenable.com/blog/nessus-527-and-pvs-403-are-available-for-download",
"http://www.vmware.com/security/advisories/VMSA-2014-0006.html",
"http://www.vmware.com/security/advisories/VMSA-2014-0012.html",
"http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0",
"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6060&myns=phmc&mync=E",
"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6061&myns=phmc&mync=E",
"https://access.redhat.com/site/blogs/766093/posts/908133",
"https://blogs.oracle.com/sunsecurity/entry/cve_2014_0224_cryptographic_issues",
"https://blogs.oracle.com/sunsecurity/entry/cve_2014_0224_cryptographic_issues1",
"https://bugzilla.redhat.com/show_bug.cgi?id=1103586",
"https://cert-portal.siemens.com/productcert/pdf/ssa-234763.pdf",
"https://discussions.nessus.org/thread/7517",
"https://filezilla-project.org/versions.php?type=server",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=bc8923b1ec9c467755cd86f7848c50ee8812e441",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946",
"https://kb.bluecoat.com/index?page=content&id=SA80",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10075",
"https://www.arista.com/en/support/advisories-notices/security-advisories/941-security-advisory-0005",
"https://www.ibm.com/support/docview.wss?uid=ssg1S1004670",
"https://www.ibm.com/support/docview.wss?uid=ssg1S1004671",
"https://www.imperialviolet.org/2014/06/05/earlyccs.html",
"https://www.intersectalliance.com/wp-content/uploads/release_notes/ReleaseNotes_for_SNARE_for_MSSQL.pdf",
"https://www.intersectalliance.com/wp-content/uploads/release_notes/ReleaseNotes_for_Snare_for_Windows.pdf",
"https://www.novell.com/support/kb/doc.php?id=7015271"
],
"epss": 0.9303,
"cvss": 7.4
},
"CVE-2014-0226": {
"verified": false,
"ranking_epss": 0.9888,
"cvss_v2": 6.8,
"cvss_version": 2,
"summary": "Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules/generators/mod_status.c and the lua_ap_scoreboard_worker function in modules/lua/lua_request.c.",
"references": [
"http://advisories.mageia.org/MGASA-2014-0304.html",
"http://advisories.mageia.org/MGASA-2014-0305.html",
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://marc.info/?l=bugtraq&m=144493176821532&w=2",
"http://rhn.redhat.com/errata/RHSA-2014-1019.html",
"http://rhn.redhat.com/errata/RHSA-2014-1020.html",
"http://rhn.redhat.com/errata/RHSA-2014-1021.html",
"http://seclists.org/fulldisclosure/2014/Jul/114",
"http://secunia.com/advisories/60536",
"http://security.gentoo.org/glsa/glsa-201408-12.xml",
"http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_status.c",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_status.c?r1=1450998&r2=1610491&diff_format=h",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/lua/lua_request.c",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/lua/lua_request.c?r1=1588989&r2=1610491&diff_format=h",
"http://www.debian.org/security/2014/dsa-2989",
"http://www.exploit-db.com/exploits/34133",
"http://www.mandriva.com/security/advisories?name=MDVSA-2014:142",
"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
"http://www.osvdb.org/109216",
"http://www.securityfocus.com/bid/68678",
"http://zerodayinitiative.com/advisories/ZDI-14-236/",
"https://bugzilla.redhat.com/show_bug.cgi?id=1120603",
"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://puppet.com/security/cve/cve-2014-0226",
"https://security.gentoo.org/glsa/201504-03",
"https://support.apple.com/HT204659",
"https://www.povonsec.com/apache-2-4-7-exploit/",
"http://advisories.mageia.org/MGASA-2014-0304.html",
"http://advisories.mageia.org/MGASA-2014-0305.html",
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://marc.info/?l=bugtraq&m=144493176821532&w=2",
"http://rhn.redhat.com/errata/RHSA-2014-1019.html",
"http://rhn.redhat.com/errata/RHSA-2014-1020.html",
"http://rhn.redhat.com/errata/RHSA-2014-1021.html",
"http://seclists.org/fulldisclosure/2014/Jul/114",
"http://secunia.com/advisories/60536",
"http://security.gentoo.org/glsa/glsa-201408-12.xml",
"http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_status.c",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_status.c?r1=1450998&r2=1610491&diff_format=h",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/lua/lua_request.c",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/lua/lua_request.c?r1=1588989&r2=1610491&diff_format=h",
"http://www.debian.org/security/2014/dsa-2989",
"http://www.exploit-db.com/exploits/34133",
"http://www.mandriva.com/security/advisories?name=MDVSA-2014:142",
"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
"http://www.osvdb.org/109216",
"http://www.securityfocus.com/bid/68678",
"http://zerodayinitiative.com/advisories/ZDI-14-236/",
"https://bugzilla.redhat.com/show_bug.cgi?id=1120603",
"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://puppet.com/security/cve/cve-2014-0226",
"https://security.gentoo.org/glsa/201504-03",
"https://support.apple.com/HT204659",
"https://www.povonsec.com/apache-2-4-7-exploit/"
],
"epss": 0.75444,
"cvss": 6.8
},
"CVE-2006-20001": {
"verified": false,
"ranking_epss": 0.63032,
"cvss_v2": null,
"cvss_version": 3,
"summary": "A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash.\n\nThis issue affects Apache HTTP Server 2.4.54 and earlier.",
"references": [
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://security.gentoo.org/glsa/202309-01",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://security.gentoo.org/glsa/202309-01",
"https://security.netapp.com/advisory/ntap-20230316-0005/"
],
"epss": 0.00439,
"cvss": 7.5
},
"CVE-2017-15710": {
"verified": false,
"ranking_epss": 0.92061,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if configured with AuthLDAPCharsetConfig, uses the Accept-Language header value to lookup the right charset encoding when verifying the user's credentials. If the header value is not present in the charset conversion table, a fallback mechanism is used to truncate it to a two characters value to allow a quick retry (for example, 'en-US' is truncated to 'en'). A header value of less than two characters forces an out of bound write of one NUL byte to a memory location that is not part of the string. In the worst case, quite unlikely, the process would crash which could be used as a Denial of Service attack. In the more likely case, this memory is already reserved for future use and the issue has no effect at all.",
"references": [
"http://www.openwall.com/lists/oss-security/2018/03/24/8",
"http://www.securityfocus.com/bid/103512",
"http://www.securitytracker.com/id/1040569",
"https://access.redhat.com/errata/RHSA-2018:3558",
"https://access.redhat.com/errata/RHSA-2019:0366",
"https://access.redhat.com/errata/RHSA-2019:0367",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2018/05/msg00020.html",
"https://security.netapp.com/advisory/ntap-20180601-0004/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",
"https://usn.ubuntu.com/3627-1/",
"https://usn.ubuntu.com/3627-2/",
"https://usn.ubuntu.com/3937-2/",
"https://www.debian.org/security/2018/dsa-4164",
"https://www.tenable.com/security/tns-2019-09",
"http://www.openwall.com/lists/oss-security/2018/03/24/8",
"http://www.securityfocus.com/bid/103512",
"http://www.securitytracker.com/id/1040569",
"https://access.redhat.com/errata/RHSA-2018:3558",
"https://access.redhat.com/errata/RHSA-2019:0366",
"https://access.redhat.com/errata/RHSA-2019:0367",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2018/05/msg00020.html",
"https://security.netapp.com/advisory/ntap-20180601-0004/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",
"https://usn.ubuntu.com/3627-1/",
"https://usn.ubuntu.com/3627-2/",
"https://usn.ubuntu.com/3937-2/",
"https://www.debian.org/security/2018/dsa-4164",
"https://www.tenable.com/security/tns-2019-09"
],
"epss": 0.08002,
"cvss": 7.5
},
"CVE-2017-15715": {
"verified": false,
"ranking_epss": 0.99907,
"cvss_v2": 6.8,
"cvss_version": 3,
"summary": "In Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a newline character in a malicious filename, rather than matching only the end of the filename. This could be exploited in environments where uploads of some files are are externally blocked, but only by matching the trailing portion of the filename.",
"references": [
"http://www.openwall.com/lists/oss-security/2018/03/24/6",
"http://www.securityfocus.com/bid/103525",
"http://www.securitytracker.com/id/1040570",
"https://access.redhat.com/errata/RHSA-2018:3558",
"https://access.redhat.com/errata/RHSA-2019:0366",
"https://access.redhat.com/errata/RHSA-2019:0367",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://security.elarlang.eu/cve-2017-15715-apache-http-server-filesmatch-bypass-with-a-trailing-newline-at-the-end-of-the-file-name.html",
"https://security.netapp.com/advisory/ntap-20180601-0004/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",
"https://usn.ubuntu.com/3627-1/",
"https://usn.ubuntu.com/3627-2/",
"https://www.debian.org/security/2018/dsa-4164",
"https://www.tenable.com/security/tns-2019-09",
"http://www.openwall.com/lists/oss-security/2018/03/24/6",
"http://www.securityfocus.com/bid/103525",
"http://www.securitytracker.com/id/1040570",
"https://access.redhat.com/errata/RHSA-2018:3558",
"https://access.redhat.com/errata/RHSA-2019:0366",
"https://access.redhat.com/errata/RHSA-2019:0367",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://security.elarlang.eu/cve-2017-15715-apache-http-server-filesmatch-bypass-with-a-trailing-newline-at-the-end-of-the-file-name.html",
"https://security.netapp.com/advisory/ntap-20180601-0004/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",
"https://usn.ubuntu.com/3627-1/",
"https://usn.ubuntu.com/3627-2/",
"https://www.debian.org/security/2018/dsa-4164",
"https://www.tenable.com/security/tns-2019-09"
],
"epss": 0.94103,
"cvss": 8.1
},
"CVE-2015-9253": {
"verified": false,
"ranking_epss": 0.86492,
"cvss_v2": 6.8,
"cvss_version": 3,
"summary": "An issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20. The php-fpm master process restarts a child process in an endless loop when using program execution functions (e.g., passthru, exec, shell_exec, or system) with a non-blocking STDIN stream, causing this master process to consume 100% of the CPU, and consume disk space with a large volume of error logs, as demonstrated by an attack by a customer of a shared-hosting facility.",
"references": [
"https://bugs.php.net/bug.php?id=70185",
"https://bugs.php.net/bug.php?id=73342https://github.com/php/php-src/pull/3287",
"https://bugs.php.net/bug.php?id=75968",
"https://github.com/php/php-src/blob/PHP-7.1.20/NEWS#L20-L22",
"https://github.com/php/php-src/commit/69dee5c732fe982c82edb17d0dbc3e79a47748d8",
"https://usn.ubuntu.com/3766-1/",
"https://usn.ubuntu.com/4279-1/",
"https://www.futureweb.at/security/CVE-2015-9253/",
"https://bugs.php.net/bug.php?id=70185",
"https://bugs.php.net/bug.php?id=73342https://github.com/php/php-src/pull/3287",
"https://bugs.php.net/bug.php?id=75968",
"https://github.com/php/php-src/blob/PHP-7.1.20/NEWS#L20-L22",
"https://github.com/php/php-src/commit/69dee5c732fe982c82edb17d0dbc3e79a47748d8",
"https://usn.ubuntu.com/3766-1/",
"https://usn.ubuntu.com/4279-1/",
"https://www.futureweb.at/security/CVE-2015-9253/"
],
"epss": 0.02996,
"cvss": 6.5
},
"CVE-2016-5387": {
"verified": false,
"ranking_epss": 0.97403,
"cvss_v2": 6.8,
"cvss_version": 3,
"summary": "The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an \"httpoxy\" issue. NOTE: the vendor states \"This mitigation has been assigned the identifier CVE-2016-5387\"; in other words, this is not a CVE ID for a vulnerability.",
"references": [
"http://lists.opensuse.org/opensuse-updates/2016-07/msg00059.html",
"http://rhn.redhat.com/errata/RHSA-2016-1624.html",
"http://rhn.redhat.com/errata/RHSA-2016-1625.html",
"http://rhn.redhat.com/errata/RHSA-2016-1648.html",
"http://rhn.redhat.com/errata/RHSA-2016-1649.html",
"http://rhn.redhat.com/errata/RHSA-2016-1650.html",
"http://www.debian.org/security/2016/dsa-3623",
"http://www.kb.cert.org/vuls/id/797896",
"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
"http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
"http://www.securityfocus.com/bid/91816",
"http://www.securitytracker.com/id/1036330",
"http://www.ubuntu.com/usn/USN-3038-1",
"https://access.redhat.com/errata/RHSA-2016:1420",
"https://access.redhat.com/errata/RHSA-2016:1421",
"https://access.redhat.com/errata/RHSA-2016:1422",
"https://access.redhat.com/errata/RHSA-2016:1635",
"https://access.redhat.com/errata/RHSA-2016:1636",
"https://access.redhat.com/errata/RHSA-2016:1851",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03770en_us",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
"https://httpoxy.org/",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WCTE7443AYZ4EGELWLVNANA2WJCJIYI/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEKZAB7MTWVSMORHTEMCQNFFMIHCYF76/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QPQAPWQA774JPDRV4UIB2SZAX6D3UZCV/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TGNHXJJSWDXAOEYH5TMXDPQVJMQQJOAZ/",
"https://security.gentoo.org/glsa/201701-36",
"https://support.apple.com/HT208221",
"https://www.apache.org/security/asf-httpoxy-response.txt",
"https://www.tenable.com/security/tns-2017-04",
"http://lists.opensuse.org/opensuse-updates/2016-07/msg00059.html",
"http://rhn.redhat.com/errata/RHSA-2016-1624.html",
"http://rhn.redhat.com/errata/RHSA-2016-1625.html",
"http://rhn.redhat.com/errata/RHSA-2016-1648.html",
"http://rhn.redhat.com/errata/RHSA-2016-1649.html",
"http://rhn.redhat.com/errata/RHSA-2016-1650.html",
"http://www.debian.org/security/2016/dsa-3623",
"http://www.kb.cert.org/vuls/id/797896",
"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
"http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
"http://www.securityfocus.com/bid/91816",
"http://www.securitytracker.com/id/1036330",
"http://www.ubuntu.com/usn/USN-3038-1",
"https://access.redhat.com/errata/RHSA-2016:1420",
"https://access.redhat.com/errata/RHSA-2016:1421",
"https://access.redhat.com/errata/RHSA-2016:1422",
"https://access.redhat.com/errata/RHSA-2016:1635",
"https://access.redhat.com/errata/RHSA-2016:1636",
"https://access.redhat.com/errata/RHSA-2016:1851",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03770en_us",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
"https://httpoxy.org/",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WCTE7443AYZ4EGELWLVNANA2WJCJIYI/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEKZAB7MTWVSMORHTEMCQNFFMIHCYF76/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QPQAPWQA774JPDRV4UIB2SZAX6D3UZCV/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TGNHXJJSWDXAOEYH5TMXDPQVJMQQJOAZ/",
"https://security.gentoo.org/glsa/201701-36",
"https://support.apple.com/HT208221",
"https://www.apache.org/security/asf-httpoxy-response.txt",
"https://www.tenable.com/security/tns-2017-04"
],
"epss": 0.41959,
"cvss": 8.1
},
"CVE-2019-6977": {
"verified": false,
"ranking_epss": 0.99398,
"cvss_v2": 6.8,
"cvss_version": 3,
"summary": "gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigger imagecolormatch calls with crafted image data.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00025.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00031.html",
"http://packetstormsecurity.com/files/152459/PHP-7.2-imagecolormatch-Out-Of-Band-Heap-Write.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/106731",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://access.redhat.com/errata/RHSA-2019:3299",
"https://bugs.php.net/bug.php?id=77270",
"https://lists.debian.org/debian-lts-announce/2019/01/msg00028.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3WRUPZVT2MWFUEMVGTRAGDOBHLNMGK5R/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEYUUOW75YD3DENIPYMO263E6NL2NFHI/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TTXSLRZI5BCQT3H5KALG3DHUWUMNPDX2/",
"https://security.gentoo.org/glsa/201903-18",
"https://security.netapp.com/advisory/ntap-20190315-0003/",
"https://usn.ubuntu.com/3900-1/",
"https://www.debian.org/security/2019/dsa-4384",
"https://www.exploit-db.com/exploits/46677/",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00025.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00031.html",
"http://packetstormsecurity.com/files/152459/PHP-7.2-imagecolormatch-Out-Of-Band-Heap-Write.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/106731",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://access.redhat.com/errata/RHSA-2019:3299",
"https://bugs.php.net/bug.php?id=77270",
"https://lists.debian.org/debian-lts-announce/2019/01/msg00028.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3WRUPZVT2MWFUEMVGTRAGDOBHLNMGK5R/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEYUUOW75YD3DENIPYMO263E6NL2NFHI/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TTXSLRZI5BCQT3H5KALG3DHUWUMNPDX2/",
"https://security.gentoo.org/glsa/201903-18",
"https://security.netapp.com/advisory/ntap-20190315-0003/",
"https://usn.ubuntu.com/3900-1/",
"https://www.debian.org/security/2019/dsa-4384",
"https://www.exploit-db.com/exploits/46677/"
],
"epss": 0.863,
"cvss": 8.8
},
"CVE-2015-8873": {
"verified": false,
"ranking_epss": 0.86018,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "Stack consumption vulnerability in Zend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to cause a denial of service (segmentation fault) via recursive method calls.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=4d2278143a08b7522de9471d0f014d7357c28fea",
"http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"https://bugs.php.net/bug.php?id=69793",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=4d2278143a08b7522de9471d0f014d7357c28fea",
"http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"https://bugs.php.net/bug.php?id=69793"
],
"epss": 0.02792,
"cvss": 7.5
},
"CVE-2015-8876": {
"verified": false,
"ranking_epss": 0.93662,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "Zend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not validate certain Exception objects, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or trigger unintended method execution via crafted serialized data.",
"references": [
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.php.net/ChangeLog-5.php",
"https://bugs.php.net/bug.php?id=70121",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.php.net/ChangeLog-5.php",
"https://bugs.php.net/bug.php?id=70121"
],
"epss": 0.1176,
"cvss": 9.8
},
"CVE-2015-8877": {
"verified": false,
"ranking_epss": 0.84708,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service (memory consumption) via a crafted call, as demonstrated by a call to the PHP imagescale function.",
"references": [
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3587",
"http://www.php.net/ChangeLog-5.php",
"http://www.ubuntu.com/usn/USN-2987-1",
"https://bugs.php.net/bug.php?id=70064",
"https://github.com/libgd/libgd/commit/4751b606fa38edc456d627140898a7ec679fcc24",
"https://github.com/libgd/libgd/issues/173",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3587",
"http://www.php.net/ChangeLog-5.php",
"http://www.ubuntu.com/usn/USN-2987-1",
"https://bugs.php.net/bug.php?id=70064",
"https://github.com/libgd/libgd/commit/4751b606fa38edc456d627140898a7ec679fcc24",
"https://github.com/libgd/libgd/issues/173"
],
"epss": 0.02317,
"cvss": 7.5
},
"CVE-2015-5590": {
"verified": false,
"ranking_epss": 0.90993,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "Stack-based buffer overflow in the phar_fix_filepath function in ext/phar/phar.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value, as demonstrated by mishandling of an e-mail attachment by the imap PHP extension.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=6dedeb40db13971af45276f80b5375030aa7e76f",
"http://openwall.com/lists/oss-security/2015/07/18/1",
"http://www.debian.org/security/2015/dsa-3344",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/75970",
"https://bugs.php.net/bug.php?id=69923",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=6dedeb40db13971af45276f80b5375030aa7e76f",
"http://openwall.com/lists/oss-security/2015/07/18/1",
"http://www.debian.org/security/2015/dsa-3344",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/75970",
"https://bugs.php.net/bug.php?id=69923"
],
"epss": 0.06413,
"cvss": 7.3
},
"CVE-2015-8879": {
"verified": false,
"ranking_epss": 0.81731,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "The odbc_bindcols function in ext/odbc/php_odbc.c in PHP before 5.6.12 mishandles driver behavior for SQL_WVARCHAR columns, which allows remote attackers to cause a denial of service (application crash) in opportunistic circumstances by leveraging use of the odbc_fetch_array function to access a certain type of Microsoft SQL Server table.",
"references": [
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.php.net/ChangeLog-5.php",
"https://bugs.php.net/bug.php?id=69975",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.php.net/ChangeLog-5.php",
"https://bugs.php.net/bug.php?id=69975"
],
"epss": 0.01617,
"cvss": 7.5
},
"CVE-2016-5636": {
"verified": false,
"ranking_epss": 0.97574,
"cvss_v2": 10,
"cvss_version": 3,
"summary": "Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"http://rhn.redhat.com/errata/RHSA-2016-2586.html",
"http://www.openwall.com/lists/oss-security/2016/06/15/15",
"http://www.openwall.com/lists/oss-security/2016/06/16/1",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html",
"http://www.securityfocus.com/bid/91247",
"http://www.securitytracker.com/id/1038138",
"http://www.splunk.com/view/SP-CAAAPSV",
"http://www.splunk.com/view/SP-CAAAPUE",
"https://bugs.python.org/issue26171",
"https://docs.python.org/3.4/whatsnew/changelog.html#python-3-4-5",
"https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-2",
"https://hg.python.org/cpython/raw-file/v2.7.12/Misc/NEWS",
"https://lists.debian.org/debian-lts-announce/2019/02/msg00011.html",
"https://security.gentoo.org/glsa/201701-18",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"http://rhn.redhat.com/errata/RHSA-2016-2586.html",
"http://www.openwall.com/lists/oss-security/2016/06/15/15",
"http://www.openwall.com/lists/oss-security/2016/06/16/1",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html",
"http://www.securityfocus.com/bid/91247",
"http://www.securitytracker.com/id/1038138",
"http://www.splunk.com/view/SP-CAAAPSV",
"http://www.splunk.com/view/SP-CAAAPUE",
"https://bugs.python.org/issue26171",
"https://docs.python.org/3.4/whatsnew/changelog.html#python-3-4-5",
"https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-2",
"https://hg.python.org/cpython/raw-file/v2.7.12/Misc/NEWS",
"https://lists.debian.org/debian-lts-announce/2019/02/msg00011.html",
"https://security.gentoo.org/glsa/201701-18"
],
"epss": 0.45123,
"cvss": 9.8
},
"CVE-2014-9425": {
"verified": false,
"ranking_epss": 0.94625,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "Double free vulnerability in the zend_ts_hash_graceful_destroy function in zend_ts_hash.c in the Zend Engine in PHP through 5.5.20 and 5.6.x through 5.6.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"references": [
"http://advisories.mageia.org/MGASA-2015-0040.html",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=24125f0f26f3787c006e4a51611ba33ee3b841cb",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2bcf69d073190e4f032d883f3416dea1b027a39e",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=fbf3a6bc1abcc8a5b5226b0ad9464c37f11ddbd6",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://openwall.com/lists/oss-security/2014/12/29/6",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.securityfocus.com/bid/71800",
"https://bugs.php.net/bug.php?id=68676",
"https://security.gentoo.org/glsa/201503-03",
"https://support.apple.com/HT205267",
"http://advisories.mageia.org/MGASA-2015-0040.html",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=24125f0f26f3787c006e4a51611ba33ee3b841cb",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2bcf69d073190e4f032d883f3416dea1b027a39e",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=fbf3a6bc1abcc8a5b5226b0ad9464c37f11ddbd6",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://openwall.com/lists/oss-security/2014/12/29/6",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.securityfocus.com/bid/71800",
"https://bugs.php.net/bug.php?id=68676",
"https://security.gentoo.org/glsa/201503-03",
"https://support.apple.com/HT205267"
],
"epss": 0.15502,
"cvss": 7.5
},
"CVE-2014-9427": {
"verified": false,
"ranking_epss": 0.89658,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider the mapping's length during processing of an invalid file that begins with a # character and lacks a newline character, which causes an out-of-bounds read and might (1) allow remote attackers to obtain sensitive information from php-cgi process memory by leveraging the ability to upload a .php file or (2) trigger unexpected code execution if a valid PHP script is present in memory locations adjacent to the mapping.",
"references": [
"http://advisories.mageia.org/MGASA-2015-0040.html",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f9ad3086693fce680fbe246e4a45aa92edd2ac35",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html",
"http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://openwall.com/lists/oss-security/2014/12/31/6",
"http://openwall.com/lists/oss-security/2015/01/01/1",
"http://openwall.com/lists/oss-security/2015/01/03/4",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:032",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/71833",
"https://bugs.php.net/bug.php?id=68618",
"https://security.gentoo.org/glsa/201503-03",
"https://support.apple.com/HT205267",
"http://advisories.mageia.org/MGASA-2015-0040.html",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f9ad3086693fce680fbe246e4a45aa92edd2ac35",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html",
"http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://openwall.com/lists/oss-security/2014/12/31/6",
"http://openwall.com/lists/oss-security/2015/01/01/1",
"http://openwall.com/lists/oss-security/2015/01/03/4",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:032",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/71833",
"https://bugs.php.net/bug.php?id=68618",
"https://security.gentoo.org/glsa/201503-03",
"https://support.apple.com/HT205267"
],
"epss": 0.04998,
"cvss": 7.5
},
"CVE-2014-9426": {
"verified": false,
"ranking_epss": 0.73695,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The apprentice_load function in libmagic/apprentice.c in the Fileinfo component in PHP through 5.6.4 attempts to perform a free operation on a stack-based character array, which allows remote attackers to cause a denial of service (memory corruption or application crash) or possibly have unspecified other impact via unknown vectors. NOTE: this is disputed by the vendor because the standard erealloc behavior makes the free operation unreachable",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=a72cd07f2983dc43a6bb35209dc4687852e53c09",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=ef89ab2f99fbd9b7b714556d4f1f50644eb54191",
"http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html",
"https://bugs.php.net/bug.php?id=68665",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=a72cd07f2983dc43a6bb35209dc4687852e53c09",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=ef89ab2f99fbd9b7b714556d4f1f50644eb54191",
"http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html",
"https://bugs.php.net/bug.php?id=68665"
],
"epss": 0.00785,
"cvss": 7.3
},
"CVE-2013-4113": {
"verified": false,
"ranking_epss": 0.95284,
"cvss_v2": 6.8,
"cvss_version": 2,
"summary": "ext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted document that is processed by the xml_parse_into_struct function.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=7d163e8a0880ae8af2dd869071393e5dc07ef271",
"http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00034.html",
"http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00006.html",
"http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00007.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/archive/2013.php#id2013-07-11-1",
"http://rhn.redhat.com/errata/RHSA-2013-1049.html",
"http://rhn.redhat.com/errata/RHSA-2013-1050.html",
"http://rhn.redhat.com/errata/RHSA-2013-1061.html",
"http://rhn.redhat.com/errata/RHSA-2013-1062.html",
"http://rhn.redhat.com/errata/RHSA-2013-1063.html",
"http://secunia.com/advisories/54071",
"http://secunia.com/advisories/54104",
"http://secunia.com/advisories/54163",
"http://secunia.com/advisories/54165",
"http://support.apple.com/kb/HT6150",
"http://www.debian.org/security/2013/dsa-2723",
"http://www.ubuntu.com/usn/USN-1905-1",
"https://bugs.php.net/bug.php?id=65236",
"https://bugzilla.redhat.com/show_bug.cgi?id=983689",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=7d163e8a0880ae8af2dd869071393e5dc07ef271",
"http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00034.html",
"http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00006.html",
"http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00007.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/archive/2013.php#id2013-07-11-1",
"http://rhn.redhat.com/errata/RHSA-2013-1049.html",
"http://rhn.redhat.com/errata/RHSA-2013-1050.html",
"http://rhn.redhat.com/errata/RHSA-2013-1061.html",
"http://rhn.redhat.com/errata/RHSA-2013-1062.html",
"http://rhn.redhat.com/errata/RHSA-2013-1063.html",
"http://secunia.com/advisories/54071",
"http://secunia.com/advisories/54104",
"http://secunia.com/advisories/54163",
"http://secunia.com/advisories/54165",
"http://support.apple.com/kb/HT6150",
"http://www.debian.org/security/2013/dsa-2723",
"http://www.ubuntu.com/usn/USN-1905-1",
"https://bugs.php.net/bug.php?id=65236",
"https://bugzilla.redhat.com/show_bug.cgi?id=983689"
],
"epss": 0.19022,
"cvss": 6.8
},
"CVE-2022-26488": {
"verified": false,
"ranking_epss": 0.82035,
"cvss_v2": 4.4,
"cvss_version": 3,
"summary": "In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker to add user-writable directories to the system search path. To exploit, an administrator must have installed Python for all users and enabled PATH entries. A non-administrative user can trigger a repair that incorrectly adds user-writable paths into PATH, enabling search-path hijacking of other users and system services. This affects Python (CPython) through 3.7.12, 3.8.x through 3.8.12, 3.9.x through 3.9.10, and 3.10.x through 3.10.2.",
"references": [
"https://mail.python.org/archives/list/security-announce%40python.org/thread/657Z4XULWZNIY5FRP3OWXHYKUSIH6DMN/",
"https://security.netapp.com/advisory/ntap-20220419-0005/",
"https://mail.python.org/archives/list/security-announce%40python.org/thread/657Z4XULWZNIY5FRP3OWXHYKUSIH6DMN/",
"https://security.netapp.com/advisory/ntap-20220419-0005/"
],
"epss": 0.01669,
"cvss": 7
},
"CVE-2014-0098": {
"verified": false,
"ranking_epss": 0.97357,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service (segmentation fault and daemon crash) via a crafted cookie that is not properly handled during truncation.",
"references": [
"http://advisories.mageia.org/MGASA-2014-0135.html",
"http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html",
"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://marc.info/?l=bugtraq&m=141017844705317&w=2",
"http://marc.info/?l=bugtraq&m=141390017113542&w=2",
"http://seclists.org/fulldisclosure/2014/Dec/23",
"http://secunia.com/advisories/58230",
"http://secunia.com/advisories/58915",
"http://secunia.com/advisories/59219",
"http://secunia.com/advisories/59315",
"http://secunia.com/advisories/59345",
"http://secunia.com/advisories/60536",
"http://security.gentoo.org/glsa/glsa-201408-12.xml",
"http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15320.html",
"http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/loggers/mod_log_config.c",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/loggers/mod_log_config.c?r1=1575394&r2=1575400&diff_format=h",
"http://www-01.ibm.com/support/docview.wss?uid=swg21668973",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676091",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676092",
"http://www.apache.org/dist/httpd/CHANGES_2.4.9",
"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html",
"http://www.securityfocus.com/archive/1/534161/100/0/threaded",
"http://www.securityfocus.com/bid/66303",
"http://www.ubuntu.com/usn/USN-2152-1",
"http://www.vmware.com/security/advisories/VMSA-2014-0012.html",
"https://blogs.oracle.com/sunsecurity/entry/multiple_input_validation_vulnerabilities_in1",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://puppet.com/security/cve/cve-2014-0098",
"https://support.apple.com/HT204659",
"https://support.apple.com/kb/HT6535",
"http://advisories.mageia.org/MGASA-2014-0135.html",
"http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html",
"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://marc.info/?l=bugtraq&m=141017844705317&w=2",
"http://marc.info/?l=bugtraq&m=141390017113542&w=2",
"http://seclists.org/fulldisclosure/2014/Dec/23",
"http://secunia.com/advisories/58230",
"http://secunia.com/advisories/58915",
"http://secunia.com/advisories/59219",
"http://secunia.com/advisories/59315",
"http://secunia.com/advisories/59345",
"http://secunia.com/advisories/60536",
"http://security.gentoo.org/glsa/glsa-201408-12.xml",
"http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15320.html",
"http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/loggers/mod_log_config.c",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/loggers/mod_log_config.c?r1=1575394&r2=1575400&diff_format=h",
"http://www-01.ibm.com/support/docview.wss?uid=swg21668973",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676091",
"http://www-01.ibm.com/support/docview.wss?uid=swg21676092",
"http://www.apache.org/dist/httpd/CHANGES_2.4.9",
"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html",
"http://www.securityfocus.com/archive/1/534161/100/0/threaded",
"http://www.securityfocus.com/bid/66303",
"http://www.ubuntu.com/usn/USN-2152-1",
"http://www.vmware.com/security/advisories/VMSA-2014-0012.html",
"https://blogs.oracle.com/sunsecurity/entry/multiple_input_validation_vulnerabilities_in1",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://puppet.com/security/cve/cve-2014-0098",
"https://support.apple.com/HT204659",
"https://support.apple.com/kb/HT6535"
],
"epss": 0.4102,
"cvss": 5
},
"CVE-2024-40898": {
"verified": false,
"ranking_epss": 0.67854,
"cvss_v2": null,
"cvss_version": 3,
"summary": "SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests.\n\nUsers are recommended to upgrade to version 2.4.62 which fixes this issue. ",
"references": [
"https://httpd.apache.org/security/vulnerabilities_24.html",
"http://www.openwall.com/lists/oss-security/2024/07/17/7",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://security.netapp.com/advisory/ntap-20240808-0006/"
],
"epss": 0.00549,
"cvss": 7.5
},
"CVE-2024-43204": {
"verified": false,
"ranking_epss": 0.45484,
"cvss_v2": null,
"cvss_version": 3,
"summary": "SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker. Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response header with a value provided in the HTTP request.\n\nUsers are recommended to upgrade to version 2.4.64 which fixes this issue.",
"references": [
"https://httpd.apache.org/security/vulnerabilities_24.html",
"http://www.openwall.com/lists/oss-security/2025/07/10/2",
"http://www.openwall.com/lists/oss-security/2025/07/10/4",
"https://lists.debian.org/debian-lts-announce/2025/08/msg00009.html"
],
"epss": 0.00228,
"cvss": 7.5
},
"CVE-2024-6232": {
"verified": false,
"ranking_epss": 0.86208,
"cvss_v2": null,
"cvss_version": 3,
"summary": "There is a MEDIUM severity vulnerability affecting CPython.\n\n\n\n\n\nRegular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.",
"references": [
"https://github.com/python/cpython/commit/34ddb64d088dd7ccc321f6103d23153256caa5d4",
"https://github.com/python/cpython/commit/4eaf4891c12589e3c7bdad5f5b076e4c8392dd06",
"https://github.com/python/cpython/commit/743acbe872485dc18df4d8ab2dc7895187f062c4",
"https://github.com/python/cpython/commit/7d1f50cd92ff7e10a1c15a8f591dde8a6843a64d",
"https://github.com/python/cpython/commit/b4225ca91547aa97ed3aca391614afbb255bc877",
"https://github.com/python/cpython/commit/d449caf8a179e3b954268b3a88eb9170be3c8fbf",
"https://github.com/python/cpython/commit/ed3a49ea734ada357ff4442996fd4ae71d253373",
"https://github.com/python/cpython/issues/121285",
"https://github.com/python/cpython/pull/121286",
"https://mail.python.org/archives/list/security-announce@python.org/thread/JRYFTPRHZRTLMZLWQEUHZSJXNHM4ACTY/",
"http://www.openwall.com/lists/oss-security/2024/09/03/5",
"https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html",
"https://security.netapp.com/advisory/ntap-20241018-0007/"
],
"epss": 0.02874,
"cvss": 7.5
},
"CVE-2018-15132": {
"verified": false,
"ranking_epss": 0.89555,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "An issue was discovered in ext/standard/link_win32.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. The linkinfo function on Windows doesn't implement the open_basedir check. This could be abused to find files on paths outside of the allowed directories.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"https://bugs.php.net/bug.php?id=76459",
"https://github.com/php/php-src/commit/f151e048ed27f6f4eef729f3310d053ab5da71d4",
"https://security.netapp.com/advisory/ntap-20181107-0003/",
"https://www.tenable.com/security/tns-2018-12",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"https://bugs.php.net/bug.php?id=76459",
"https://github.com/php/php-src/commit/f151e048ed27f6f4eef729f3310d053ab5da71d4",
"https://security.netapp.com/advisory/ntap-20181107-0003/",
"https://www.tenable.com/security/tns-2018-12"
],
"epss": 0.04902,
"cvss": 7.5
},
"CVE-2014-3480": {
"verified": false,
"ranking_epss": 0.90861,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate sector-count data, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF file.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html",
"http://marc.info/?l=bugtraq&m=141017844705317&w=2",
"http://mx.gw.com/pipermail/file/2014/001553.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/59794",
"http://secunia.com/advisories/59831",
"http://support.apple.com/kb/HT6443",
"http://www.debian.org/security/2014/dsa-2974",
"http://www.debian.org/security/2014/dsa-3021",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/68238",
"https://bugs.php.net/bug.php?id=67412",
"https://github.com/file/file/commit/40bade80cbe2af1d0b2cd0420cebd5d5905a2382",
"https://support.apple.com/HT204659",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html",
"http://marc.info/?l=bugtraq&m=141017844705317&w=2",
"http://mx.gw.com/pipermail/file/2014/001553.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/59794",
"http://secunia.com/advisories/59831",
"http://support.apple.com/kb/HT6443",
"http://www.debian.org/security/2014/dsa-2974",
"http://www.debian.org/security/2014/dsa-3021",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/68238",
"https://bugs.php.net/bug.php?id=67412",
"https://github.com/file/file/commit/40bade80cbe2af1d0b2cd0420cebd5d5905a2382",
"https://support.apple.com/HT204659"
],
"epss": 0.06258,
"cvss": 6.5
},
"CVE-2016-7124": {
"verified": false,
"ranking_epss": 0.98845,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "ext/standard/var_unserializer.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles certain invalid objects, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data that leads to a (1) __destruct call or (2) magic method call.",
"references": [
"http://openwall.com/lists/oss-security/2016/09/02/9",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/92756",
"http://www.securitytracker.com/id/1036680",
"https://bugs.php.net/bug.php?id=72663",
"https://github.com/php/php-src/commit/20ce2fe8e3c211a42fee05a461a5881be9a8790e?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19",
"http://openwall.com/lists/oss-security/2016/09/02/9",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/92756",
"http://www.securitytracker.com/id/1036680",
"https://bugs.php.net/bug.php?id=72663",
"https://github.com/php/php-src/commit/20ce2fe8e3c211a42fee05a461a5881be9a8790e?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19"
],
"epss": 0.74663,
"cvss": 9.8
},
"CVE-2016-7125": {
"verified": false,
"ranking_epss": 0.67742,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "ext/session/session.c in PHP before 5.6.25 and 7.x before 7.0.10 skips invalid session names in a way that triggers incorrect parsing, which allows remote attackers to inject arbitrary-type session data by leveraging control of a session name, as demonstrated by object injection.",
"references": [
"http://openwall.com/lists/oss-security/2016/09/02/9",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/92552",
"http://www.securitytracker.com/id/1036680",
"https://bugs.php.net/bug.php?id=72681",
"https://github.com/php/php-src/commit/8763c6090d627d8bb0ee1d030c30e58f406be9ce?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19",
"http://openwall.com/lists/oss-security/2016/09/02/9",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/92552",
"http://www.securitytracker.com/id/1036680",
"https://bugs.php.net/bug.php?id=72681",
"https://github.com/php/php-src/commit/8763c6090d627d8bb0ee1d030c30e58f406be9ce?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19"
],
"epss": 0.00546,
"cvss": 7.5
},
"CVE-2016-7126": {
"verified": false,
"ranking_epss": 0.8923,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The imagetruecolortopalette function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate the number of colors, which allows remote attackers to cause a denial of service (select_colors allocation error and out-of-bounds write) or possibly have unspecified other impact via a large value in the third argument.",
"references": [
"http://openwall.com/lists/oss-security/2016/09/02/9",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/92755",
"http://www.securitytracker.com/id/1036680",
"https://bugs.php.net/bug.php?id=72697",
"https://github.com/php/php-src/commit/28022c9b1fd937436ab67bb3d61f652c108baf96",
"https://github.com/php/php-src/commit/b6f13a5ef9d6280cf984826a5de012a32c396cd4?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19",
"http://openwall.com/lists/oss-security/2016/09/02/9",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/92755",
"http://www.securitytracker.com/id/1036680",
"https://bugs.php.net/bug.php?id=72697",
"https://github.com/php/php-src/commit/28022c9b1fd937436ab67bb3d61f652c108baf96",
"https://github.com/php/php-src/commit/b6f13a5ef9d6280cf984826a5de012a32c396cd4?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19"
],
"epss": 0.04632,
"cvss": 9.8
},
"CVE-2016-7127": {
"verified": false,
"ranking_epss": 0.85869,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The imagegammacorrect function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate gamma values, which allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by providing different signs for the second and third arguments.",
"references": [
"http://openwall.com/lists/oss-security/2016/09/02/9",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/92757",
"http://www.securitytracker.com/id/1036680",
"https://bugs.php.net/bug.php?id=72730",
"https://github.com/php/php-src/commit/1bd103df00f49cf4d4ade2cfe3f456ac058a4eae?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19",
"http://openwall.com/lists/oss-security/2016/09/02/9",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/92757",
"http://www.securitytracker.com/id/1036680",
"https://bugs.php.net/bug.php?id=72730",
"https://github.com/php/php-src/commit/1bd103df00f49cf4d4ade2cfe3f456ac058a4eae?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19"
],
"epss": 0.02726,
"cvss": 9.8
},
"CVE-2016-7128": {
"verified": false,
"ranking_epss": 0.84292,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "The exif_process_IFD_in_TIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles the case of a thumbnail offset that exceeds the file size, which allows remote attackers to obtain sensitive information from process memory via a crafted TIFF image.",
"references": [
"http://openwall.com/lists/oss-security/2016/09/02/9",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/92564",
"http://www.securitytracker.com/id/1036680",
"https://bugs.php.net/bug.php?id=72627",
"https://github.com/php/php-src/commit/6dbb1ee46b5f4725cc6519abf91e512a2a10dfed?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19",
"http://openwall.com/lists/oss-security/2016/09/02/9",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/92564",
"http://www.securitytracker.com/id/1036680",
"https://bugs.php.net/bug.php?id=72627",
"https://github.com/php/php-src/commit/6dbb1ee46b5f4725cc6519abf91e512a2a10dfed?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19"
],
"epss": 0.02186,
"cvss": 5.3
},
"CVE-2016-7129": {
"verified": false,
"ranking_epss": 0.82963,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The php_wddx_process_data function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via an invalid ISO 8601 time value, as demonstrated by a wddx_deserialize call that mishandles a dateTime element in a wddxPacket XML document.",
"references": [
"http://openwall.com/lists/oss-security/2016/09/02/9",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/92758",
"http://www.securitytracker.com/id/1036680",
"https://bugs.php.net/bug.php?id=72749",
"https://github.com/php/php-src/commit/426aeb2808955ee3d3f52e0cfb102834cdb836a5?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19",
"http://openwall.com/lists/oss-security/2016/09/02/9",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/92758",
"http://www.securitytracker.com/id/1036680",
"https://bugs.php.net/bug.php?id=72749",
"https://github.com/php/php-src/commit/426aeb2808955ee3d3f52e0cfb102834cdb836a5?w=1",
"https://security.gentoo.org/glsa/201611-22",
"https://www.tenable.com/security/tns-2016-19"
],
"epss": 0.01858,
"cvss": 9.8
},
"CVE-2019-5010": {
"verified": false,
"ranking_epss": 0.90654,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"https://access.redhat.com/errata/RHSA-2019:3520",
"https://access.redhat.com/errata/RHSA-2019:3725",
"https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html",
"https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html",
"https://security.gentoo.org/glsa/202003-26",
"https://talosintelligence.com/vulnerability_reports/TALOS-2019-0758",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"https://access.redhat.com/errata/RHSA-2019:3520",
"https://access.redhat.com/errata/RHSA-2019:3725",
"https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html",
"https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html",
"https://security.gentoo.org/glsa/202003-26",
"https://talosintelligence.com/vulnerability_reports/TALOS-2019-0758"
],
"epss": 0.0601,
"cvss": 5.9
},
"CVE-2017-11628": {
"verified": false,
"ranking_epss": 0.30257,
"cvss_v2": 6.8,
"cvss_version": 3,
"summary": "In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, a stack-based buffer overflow in the zend_ini_do_op() function in Zend/zend_ini_parser.c could cause a denial of service or potentially allow executing code. NOTE: this is only relevant for PHP applications that accept untrusted input (instead of the system's php.ini file) for the parse_ini_string or parse_ini_file function, e.g., a web application for syntax validation of php.ini directives.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=05255749139b3686c8a6a58ee01131ac0047465e",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=5f8380d33e648964d2d5140f329cf2d4c443033c",
"http://www.securityfocus.com/bid/99489",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=74603",
"https://security.gentoo.org/glsa/201709-21",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.debian.org/security/2018/dsa-4080",
"https://www.debian.org/security/2018/dsa-4081",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=05255749139b3686c8a6a58ee01131ac0047465e",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=5f8380d33e648964d2d5140f329cf2d4c443033c",
"http://www.securityfocus.com/bid/99489",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=74603",
"https://security.gentoo.org/glsa/201709-21",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"https://www.debian.org/security/2018/dsa-4080",
"https://www.debian.org/security/2018/dsa-4081"
],
"epss": 0.00115,
"cvss": 7.8
},
"CVE-2017-12933": {
"verified": false,
"ranking_epss": 0.94902,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The finish_nested_data function in ext/standard/var_unserializer.re in PHP before 5.6.31, 7.0.x before 7.0.21, and 7.1.x before 7.1.7 is prone to a buffer over-read while unserializing untrusted data. Exploitation of this issue can have an unspecified impact on the integrity of PHP.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/99490",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=74111",
"https://usn.ubuntu.com/3566-1/",
"https://usn.ubuntu.com/3566-2/",
"https://www.debian.org/security/2018/dsa-4080",
"https://www.debian.org/security/2018/dsa-4081",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/99490",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=74111",
"https://usn.ubuntu.com/3566-1/",
"https://usn.ubuntu.com/3566-2/",
"https://www.debian.org/security/2018/dsa-4080",
"https://www.debian.org/security/2018/dsa-4081"
],
"epss": 0.16709,
"cvss": 9.8
},
"CVE-2025-12781": {
"verified": false,
"ranking_epss": 0.04579,
"cvss_v2": null,
"cvss_version": 3,
"summary": "When passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode() functions in the \"base64\" module the characters \"+/\" will always be accepted, regardless of the value of \"altchars\" parameter, typically used to establish an \"alternative base64 alphabet\" such as the URL safe alphabet. This behavior matches what is recommended in earlier base64 RFCs, but newer RFCs now recommend either dropping characters outside the specified base64 alphabet or raising an error. The old behavior has the possibility of causing data integrity issues.\n\n\n\n\nThis behavior can only be insecure if your application uses an alternate base64 alphabet (without \"+/\"). If your application does not use the \"altchars\" parameter or the urlsafe_b64decode() function, then your application does not use an alternative base64 alphabet.\n\n\n\n\nThe attached patches DOES NOT make the base64-decode behavior raise an error, as this would be a change in behavior and break existing programs. Instead, the patch deprecates the behavior which will be replaced with the newly recommended behavior in a future version of Python. Users are recommended to mitigate by verifying user-controlled inputs match the base64 \nalphabet they are expecting or verify that their application would not be \naffected if the b64decode() functions accepted \"+\" or \"/\" outside of altchars.",
"references": [
"https://github.com/python/cpython/commit/13360efd385d1a7d0659beba03787ea3d063ef9b",
"https://github.com/python/cpython/commit/1be80bec7960f5ccd059e75f3dfbd45fca302947",
"https://github.com/python/cpython/commit/9060b4abbe475591b6230b23c2afefeff26fcca5",
"https://github.com/python/cpython/commit/e95e783dff443b68e8179fdb57737025bf02ba76",
"https://github.com/python/cpython/commit/fd17ee026fa9b67f6288cbafe374a3e479fe03a5",
"https://github.com/python/cpython/issues/125346",
"https://github.com/python/cpython/pull/141128",
"https://mail.python.org/archives/list/security-announce@python.org/thread/KRI7GC6S27YV5NJ4FPDALS2WI5ENAFJ6/"
],
"epss": 0.00018,
"cvss": 5.3
},
"CVE-2012-3526": {
"verified": false,
"ranking_epss": 0.83301,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "The reverse proxy add forward module (mod_rpaf) 0.5 and 0.6 for the Apache HTTP Server allows remote attackers to cause a denial of service (server or application crash) via multiple X-Forwarded-For headers in a request.",
"references": [
"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683984",
"http://secunia.com/advisories/50400",
"http://www.debian.org/security/2012/dsa-2532",
"http://www.openwall.com/lists/oss-security/2012/08/22/2",
"http://www.openwall.com/lists/oss-security/2012/08/22/7",
"http://www.securityfocus.com/bid/55154",
"http://zecrazytux.net/troubleshooting/apache2-segfault-debugging-tutorial",
"https://exchange.xforce.ibmcloud.com/vulnerabilities/77987",
"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683984",
"http://secunia.com/advisories/50400",
"http://www.debian.org/security/2012/dsa-2532",
"http://www.openwall.com/lists/oss-security/2012/08/22/2",
"http://www.openwall.com/lists/oss-security/2012/08/22/7",
"http://www.securityfocus.com/bid/55154",
"http://zecrazytux.net/troubleshooting/apache2-segfault-debugging-tutorial",
"https://exchange.xforce.ibmcloud.com/vulnerabilities/77987"
],
"epss": 0.01928,
"cvss": 5
},
"CVE-2014-9767": {
"verified": false,
"ranking_epss": 0.65535,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/ext_zip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a crafted ZIP archive.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.openwall.com/lists/oss-security/2016/03/16/20",
"http://www.securityfocus.com/bid/76652",
"http://www.securitytracker.com/id/1035311",
"http://www.ubuntu.com/usn/USN-2952-1",
"http://www.ubuntu.com/usn/USN-2952-2",
"https://bugs.php.net/bug.php?id=67996",
"https://bugs.php.net/bug.php?id=70350",
"https://github.com/facebook/hhvm/commit/65c95a01541dd2fbc9c978ac53bed235b5376686",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.openwall.com/lists/oss-security/2016/03/16/20",
"http://www.securityfocus.com/bid/76652",
"http://www.securitytracker.com/id/1035311",
"http://www.ubuntu.com/usn/USN-2952-1",
"http://www.ubuntu.com/usn/USN-2952-2",
"https://bugs.php.net/bug.php?id=67996",
"https://bugs.php.net/bug.php?id=70350",
"https://github.com/facebook/hhvm/commit/65c95a01541dd2fbc9c978ac53bed235b5376686"
],
"epss": 0.00492,
"cvss": 4.3
},
"CVE-2015-2331": {
"verified": false,
"ranking_epss": 0.97449,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a ZIP archive that contains many entries, leading to a heap-based buffer overflow.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=ef8fc4b53d92fbfcd8ef1abbd6f2f5fe2c4a11e5",
"http://hg.nih.at/libzip/rev/9f11d54f692e",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154266.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154276.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154666.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155299.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155622.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153983.html",
"http://lists.opensuse.org/opensuse-updates/2015-03/msg00083.html",
"http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://php.net/ChangeLog-5.php",
"http://www.debian.org/security/2015/dsa-3198",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:079",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.securitytracker.com/id/1031985",
"https://bugs.php.net/bug.php?id=69253",
"https://support.apple.com/HT205267",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=ef8fc4b53d92fbfcd8ef1abbd6f2f5fe2c4a11e5",
"http://hg.nih.at/libzip/rev/9f11d54f692e",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154266.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154276.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154666.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155299.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155622.html",
"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153983.html",
"http://lists.opensuse.org/opensuse-updates/2015-03/msg00083.html",
"http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://php.net/ChangeLog-5.php",
"http://www.debian.org/security/2015/dsa-3198",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:079",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.securitytracker.com/id/1031985",
"https://bugs.php.net/bug.php?id=69253",
"https://support.apple.com/HT205267"
],
"epss": 0.4271,
"cvss": 7.5
},
"CVE-2017-3736": {
"verified": false,
"ranking_epss": 0.92504,
"cvss_v2": 4,
"cvss_version": 3,
"summary": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.",
"references": [
"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
"http://www.securityfocus.com/bid/101666",
"http://www.securitytracker.com/id/1039727",
"https://access.redhat.com/errata/RHSA-2018:0998",
"https://access.redhat.com/errata/RHSA-2018:2185",
"https://access.redhat.com/errata/RHSA-2018:2186",
"https://access.redhat.com/errata/RHSA-2018:2187",
"https://access.redhat.com/errata/RHSA-2018:2568",
"https://access.redhat.com/errata/RHSA-2018:2575",
"https://access.redhat.com/errata/RHSA-2018:2713",
"https://github.com/openssl/openssl/commit/4443cf7aa0099e5ce615c18cee249fff77fb0871",
"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc",
"https://security.gentoo.org/glsa/201712-03",
"https://security.netapp.com/advisory/ntap-20171107-0002/",
"https://security.netapp.com/advisory/ntap-20180117-0002/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03881en_us",
"https://www.debian.org/security/2017/dsa-4017",
"https://www.debian.org/security/2017/dsa-4018",
"https://www.openssl.org/news/secadv/20171102.txt",
"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.tenable.com/security/tns-2017-14",
"https://www.tenable.com/security/tns-2017-15",
"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
"http://www.securityfocus.com/bid/101666",
"http://www.securitytracker.com/id/1039727",
"https://access.redhat.com/errata/RHSA-2018:0998",
"https://access.redhat.com/errata/RHSA-2018:2185",
"https://access.redhat.com/errata/RHSA-2018:2186",
"https://access.redhat.com/errata/RHSA-2018:2187",
"https://access.redhat.com/errata/RHSA-2018:2568",
"https://access.redhat.com/errata/RHSA-2018:2575",
"https://access.redhat.com/errata/RHSA-2018:2713",
"https://github.com/openssl/openssl/commit/4443cf7aa0099e5ce615c18cee249fff77fb0871",
"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc",
"https://security.gentoo.org/glsa/201712-03",
"https://security.netapp.com/advisory/ntap-20171107-0002/",
"https://security.netapp.com/advisory/ntap-20180117-0002/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03881en_us",
"https://www.debian.org/security/2017/dsa-4017",
"https://www.debian.org/security/2017/dsa-4018",
"https://www.openssl.org/news/secadv/20171102.txt",
"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.tenable.com/security/tns-2017-14",
"https://www.tenable.com/security/tns-2017-15"
],
"epss": 0.08849,
"cvss": 6.5
},
"CVE-2017-3737": {
"verified": false,
"ranking_epss": 0.97459,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an \"error state\" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the explicit handshake functions (SSL_do_handshake(), SSL_accept() and SSL_connect()), however due to a bug it does not work correctly if SSL_read() or SSL_write() is called directly. In that scenario, if the handshake fails then a fatal error will be returned in the initial function call. If SSL_read()/SSL_write() is subsequently called by the application for the same SSL object then it will succeed and the data is passed without being decrypted/encrypted directly from the SSL/TLS record layer. In order to exploit this issue an application bug would have to be present that resulted in a call to SSL_read()/SSL_write() being issued after having already received a fatal error. OpenSSL version 1.0.2b-1.0.2m are affected. Fixed in OpenSSL 1.0.2n. OpenSSL 1.1.0 is not affected.",
"references": [
"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"http://www.securityfocus.com/bid/102103",
"http://www.securitytracker.com/id/1039978",
"https://access.redhat.com/errata/RHSA-2018:0998",
"https://access.redhat.com/errata/RHSA-2018:2185",
"https://access.redhat.com/errata/RHSA-2018:2186",
"https://access.redhat.com/errata/RHSA-2018:2187",
"https://cert-portal.siemens.com/productcert/pdf/ssa-179516.pdf",
"https://github.com/openssl/openssl/commit/898fb884b706aaeb283de4812340bb0bde8476dc",
"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:12.openssl.asc",
"https://security.gentoo.org/glsa/201712-03",
"https://security.netapp.com/advisory/ntap-20171208-0001/",
"https://security.netapp.com/advisory/ntap-20180117-0002/",
"https://security.netapp.com/advisory/ntap-20180419-0002/",
"https://www.debian.org/security/2017/dsa-4065",
"https://www.digitalmunition.me/2017/12/cve-2017-3737-openssl-security-bypass-vulnerability/",
"https://www.openssl.org/news/secadv/20171207.txt",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.tenable.com/security/tns-2017-16",
"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"http://www.securityfocus.com/bid/102103",
"http://www.securitytracker.com/id/1039978",
"https://access.redhat.com/errata/RHSA-2018:0998",
"https://access.redhat.com/errata/RHSA-2018:2185",
"https://access.redhat.com/errata/RHSA-2018:2186",
"https://access.redhat.com/errata/RHSA-2018:2187",
"https://cert-portal.siemens.com/productcert/pdf/ssa-179516.pdf",
"https://github.com/openssl/openssl/commit/898fb884b706aaeb283de4812340bb0bde8476dc",
"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:12.openssl.asc",
"https://security.gentoo.org/glsa/201712-03",
"https://security.netapp.com/advisory/ntap-20171208-0001/",
"https://security.netapp.com/advisory/ntap-20180117-0002/",
"https://security.netapp.com/advisory/ntap-20180419-0002/",
"https://www.debian.org/security/2017/dsa-4065",
"https://www.digitalmunition.me/2017/12/cve-2017-3737-openssl-security-bypass-vulnerability/",
"https://www.openssl.org/news/secadv/20171207.txt",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.tenable.com/security/tns-2017-16"
],
"epss": 0.42931,
"cvss": 5.9
},
"CVE-2017-3735": {
"verified": false,
"ranking_epss": 0.9712,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.",
"references": [
"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
"http://www.securityfocus.com/bid/100515",
"http://www.securitytracker.com/id/1039726",
"https://access.redhat.com/errata/RHSA-2018:3221",
"https://access.redhat.com/errata/RHSA-2018:3505",
"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf",
"https://github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822",
"https://lists.debian.org/debian-lts-announce/2017/11/msg00011.html",
"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc",
"https://security.gentoo.org/glsa/201712-03",
"https://security.netapp.com/advisory/ntap-20170927-0001/",
"https://security.netapp.com/advisory/ntap-20171107-0002/",
"https://support.apple.com/HT208331",
"https://usn.ubuntu.com/3611-2/",
"https://www.debian.org/security/2017/dsa-4017",
"https://www.debian.org/security/2017/dsa-4018",
"https://www.openssl.org/news/secadv/20170828.txt",
"https://www.openssl.org/news/secadv/20171102.txt",
"https://www.oracle.com//security-alerts/cpujul2021.html",
"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.tenable.com/security/tns-2017-14",
"https://www.tenable.com/security/tns-2017-15",
"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
"http://www.securityfocus.com/bid/100515",
"http://www.securitytracker.com/id/1039726",
"https://access.redhat.com/errata/RHSA-2018:3221",
"https://access.redhat.com/errata/RHSA-2018:3505",
"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf",
"https://github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822",
"https://lists.debian.org/debian-lts-announce/2017/11/msg00011.html",
"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc",
"https://security.gentoo.org/glsa/201712-03",
"https://security.netapp.com/advisory/ntap-20170927-0001/",
"https://security.netapp.com/advisory/ntap-20171107-0002/",
"https://support.apple.com/HT208331",
"https://usn.ubuntu.com/3611-2/",
"https://www.debian.org/security/2017/dsa-4017",
"https://www.debian.org/security/2017/dsa-4018",
"https://www.openssl.org/news/secadv/20170828.txt",
"https://www.openssl.org/news/secadv/20171102.txt",
"https://www.oracle.com//security-alerts/cpujul2021.html",
"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.tenable.com/security/tns-2017-14",
"https://www.tenable.com/security/tns-2017-15"
],
"epss": 0.36888,
"cvss": 5.3
},
"CVE-2022-1292": {
"verified": false,
"ranking_epss": 0.97245,
"cvss_v2": 10,
"cvss_version": 3,
"summary": "The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).",
"references": [
"https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=548d3f280a6e737673f5b61fce24bb100108dfeb",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23",
"https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNU5M7BXMML26G3GPYKFGQYPQDRSNKDD/",
"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0011",
"https://security.gentoo.org/glsa/202210-02",
"https://security.netapp.com/advisory/ntap-20220602-0009/",
"https://security.netapp.com/advisory/ntap-20220729-0004/",
"https://www.debian.org/security/2022/dsa-5139",
"https://www.openssl.org/news/secadv/20220503.txt",
"https://www.oracle.com/security-alerts/cpujul2022.html",
"https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=548d3f280a6e737673f5b61fce24bb100108dfeb",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23",
"https://gitlab.com/fraf0/cve-2022-1292-re_score-analysis",
"https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNU5M7BXMML26G3GPYKFGQYPQDRSNKDD/",
"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0011",
"https://security.gentoo.org/glsa/202210-02",
"https://security.netapp.com/advisory/ntap-20220602-0009/",
"https://security.netapp.com/advisory/ntap-20220729-0004/",
"https://www.debian.org/security/2022/dsa-5139",
"https://www.openssl.org/news/secadv/20220503.txt",
"https://www.oracle.com/security-alerts/cpujul2022.html"
],
"epss": 0.38986,
"cvss": 7.3
},
"CVE-2017-3738": {
"verified": false,
"ranking_epss": 0.95002,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH1024 are considered just feasible, because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be significant. However, for an attack on TLS to be meaningful, the server would have to share the DH1024 private key among multiple clients, which is no longer an option since CVE-2016-0701. This only affects processors that support the AVX2 but not ADX extensions like Intel Haswell (4th generation). Note: The impact from this issue is similar to CVE-2017-3736, CVE-2017-3732 and CVE-2015-3193. OpenSSL version 1.0.2-1.0.2m and 1.1.0-1.1.0g are affected. Fixed in OpenSSL 1.0.2n. Due to the low severity of this issue we are not issuing a new release of OpenSSL 1.1.0 at this time. The fix will be included in OpenSSL 1.1.0h when it becomes available. The fix is also available in commit e502cc86d in the OpenSSL git repository.",
"references": [
"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
"http://www.securityfocus.com/bid/102118",
"http://www.securitytracker.com/id/1039978",
"https://access.redhat.com/errata/RHSA-2018:0998",
"https://access.redhat.com/errata/RHSA-2018:2185",
"https://access.redhat.com/errata/RHSA-2018:2186",
"https://access.redhat.com/errata/RHSA-2018:2187",
"https://github.com/openssl/openssl/commit/e502cc86df9dafded1694fceb3228ee34d11c11a",
"https://nodejs.org/en/blog/vulnerability/december-2017-security-releases/",
"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:12.openssl.asc",
"https://security.gentoo.org/glsa/201712-03",
"https://security.netapp.com/advisory/ntap-20171208-0001/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03881en_us",
"https://www.debian.org/security/2017/dsa-4065",
"https://www.debian.org/security/2018/dsa-4157",
"https://www.openssl.org/news/secadv/20171207.txt",
"https://www.openssl.org/news/secadv/20180327.txt",
"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.tenable.com/security/tns-2017-16",
"https://www.tenable.com/security/tns-2018-04",
"https://www.tenable.com/security/tns-2018-06",
"https://www.tenable.com/security/tns-2018-07",
"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
"http://www.securityfocus.com/bid/102118",
"http://www.securitytracker.com/id/1039978",
"https://access.redhat.com/errata/RHSA-2018:0998",
"https://access.redhat.com/errata/RHSA-2018:2185",
"https://access.redhat.com/errata/RHSA-2018:2186",
"https://access.redhat.com/errata/RHSA-2018:2187",
"https://github.com/openssl/openssl/commit/e502cc86df9dafded1694fceb3228ee34d11c11a",
"https://nodejs.org/en/blog/vulnerability/december-2017-security-releases/",
"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:12.openssl.asc",
"https://security.gentoo.org/glsa/201712-03",
"https://security.netapp.com/advisory/ntap-20171208-0001/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03881en_us",
"https://www.debian.org/security/2017/dsa-4065",
"https://www.debian.org/security/2018/dsa-4157",
"https://www.openssl.org/news/secadv/20171207.txt",
"https://www.openssl.org/news/secadv/20180327.txt",
"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.tenable.com/security/tns-2017-16",
"https://www.tenable.com/security/tns-2018-04",
"https://www.tenable.com/security/tns-2018-06",
"https://www.tenable.com/security/tns-2018-07"
],
"epss": 0.17287,
"cvss": 5.9
},
"CVE-2012-4001": {
"verified": false,
"ranking_epss": 0.4535,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "The mod_pagespeed module before 0.10.22.6 for the Apache HTTP Server does not properly verify its host name, which allows remote attackers to trigger HTTP requests to arbitrary hosts via unspecified vectors, as demonstrated by requests to intranet servers.",
"references": [
"https://developers.google.com/speed/docs/mod_pagespeed/CVE-2012-4001",
"https://developers.google.com/speed/docs/mod_pagespeed/announce-0.10.22.6",
"https://developers.google.com/speed/docs/mod_pagespeed/CVE-2012-4001",
"https://developers.google.com/speed/docs/mod_pagespeed/announce-0.10.22.6"
],
"epss": 0.00227,
"cvss": 5
},
"CVE-2018-0737": {
"verified": false,
"ranking_epss": 0.9719,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).",
"references": [
"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
"http://www.securityfocus.com/bid/103766",
"http://www.securitytracker.com/id/1040685",
"https://access.redhat.com/errata/RHSA-2018:3221",
"https://access.redhat.com/errata/RHSA-2018:3505",
"https://access.redhat.com/errata/RHSA-2019:3932",
"https://access.redhat.com/errata/RHSA-2019:3933",
"https://access.redhat.com/errata/RHSA-2019:3935",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=349a41da1ad88ad87825414752a8ff5fdd6a6c3f",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6939eab03a6e23d2bd2c3f5e34fe1d48e542e787",
"https://lists.debian.org/debian-lts-announce/2018/07/msg00043.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/",
"https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/",
"https://security.gentoo.org/glsa/201811-21",
"https://security.netapp.com/advisory/ntap-20180726-0003/",
"https://securityadvisories.paloaltonetworks.com/Home/Detail/133",
"https://usn.ubuntu.com/3628-1/",
"https://usn.ubuntu.com/3628-2/",
"https://usn.ubuntu.com/3692-1/",
"https://usn.ubuntu.com/3692-2/",
"https://www.debian.org/security/2018/dsa-4348",
"https://www.debian.org/security/2018/dsa-4355",
"https://www.openssl.org/news/secadv/20180416.txt",
"https://www.oracle.com//security-alerts/cpujul2021.html",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.tenable.com/security/tns-2018-12",
"https://www.tenable.com/security/tns-2018-13",
"https://www.tenable.com/security/tns-2018-14",
"https://www.tenable.com/security/tns-2018-17",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
"http://www.securityfocus.com/bid/103766",
"http://www.securitytracker.com/id/1040685",
"https://access.redhat.com/errata/RHSA-2018:3221",
"https://access.redhat.com/errata/RHSA-2018:3505",
"https://access.redhat.com/errata/RHSA-2019:3932",
"https://access.redhat.com/errata/RHSA-2019:3933",
"https://access.redhat.com/errata/RHSA-2019:3935",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=349a41da1ad88ad87825414752a8ff5fdd6a6c3f",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6939eab03a6e23d2bd2c3f5e34fe1d48e542e787",
"https://lists.debian.org/debian-lts-announce/2018/07/msg00043.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/",
"https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/",
"https://security.gentoo.org/glsa/201811-21",
"https://security.netapp.com/advisory/ntap-20180726-0003/",
"https://securityadvisories.paloaltonetworks.com/Home/Detail/133",
"https://usn.ubuntu.com/3628-1/",
"https://usn.ubuntu.com/3628-2/",
"https://usn.ubuntu.com/3692-1/",
"https://usn.ubuntu.com/3692-2/",
"https://www.debian.org/security/2018/dsa-4348",
"https://www.debian.org/security/2018/dsa-4355",
"https://www.openssl.org/news/secadv/20180416.txt",
"https://www.oracle.com//security-alerts/cpujul2021.html",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.tenable.com/security/tns-2018-12",
"https://www.tenable.com/security/tns-2018-13",
"https://www.tenable.com/security/tns-2018-14",
"https://www.tenable.com/security/tns-2018-17"
],
"epss": 0.38121,
"cvss": 5.9
},
"CVE-2018-0734": {
"verified": false,
"ranking_epss": 0.90687,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html",
"http://www.securityfocus.com/bid/105758",
"https://access.redhat.com/errata/RHSA-2019:2304",
"https://access.redhat.com/errata/RHSA-2019:3700",
"https://access.redhat.com/errata/RHSA-2019:3932",
"https://access.redhat.com/errata/RHSA-2019:3933",
"https://access.redhat.com/errata/RHSA-2019:3935",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=43e6a58d4991a451daf4891ff05a48735df871ac",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8abfe72e8c1de1b95f50aa0d9134803b4d00070f",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ef11e19d1365eea2b1851e6f540a0bf365d303e7",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/",
"https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/",
"https://security.netapp.com/advisory/ntap-20181105-0002/",
"https://security.netapp.com/advisory/ntap-20190118-0002/",
"https://security.netapp.com/advisory/ntap-20190423-0002/",
"https://usn.ubuntu.com/3840-1/",
"https://www.debian.org/security/2018/dsa-4348",
"https://www.debian.org/security/2018/dsa-4355",
"https://www.openssl.org/news/secadv/20181030.txt",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/security-alerts/cpujan2020.html",
"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.tenable.com/security/tns-2018-16",
"https://www.tenable.com/security/tns-2018-17",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html",
"http://www.securityfocus.com/bid/105758",
"https://access.redhat.com/errata/RHSA-2019:2304",
"https://access.redhat.com/errata/RHSA-2019:3700",
"https://access.redhat.com/errata/RHSA-2019:3932",
"https://access.redhat.com/errata/RHSA-2019:3933",
"https://access.redhat.com/errata/RHSA-2019:3935",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=43e6a58d4991a451daf4891ff05a48735df871ac",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8abfe72e8c1de1b95f50aa0d9134803b4d00070f",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ef11e19d1365eea2b1851e6f540a0bf365d303e7",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/",
"https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/",
"https://security.netapp.com/advisory/ntap-20181105-0002/",
"https://security.netapp.com/advisory/ntap-20190118-0002/",
"https://security.netapp.com/advisory/ntap-20190423-0002/",
"https://usn.ubuntu.com/3840-1/",
"https://www.debian.org/security/2018/dsa-4348",
"https://www.debian.org/security/2018/dsa-4355",
"https://www.openssl.org/news/secadv/20181030.txt",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/security-alerts/cpujan2020.html",
"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.tenable.com/security/tns-2018-16",
"https://www.tenable.com/security/tns-2018-17"
],
"epss": 0.06051,
"cvss": 5.9
},
"CVE-2016-5114": {
"verified": false,
"ranking_epss": 0.77095,
"cvss_v2": 6.4,
"cvss_version": 3,
"summary": "sapi/fpm/fpm/fpm_log.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 misinterprets the semantics of the snprintf return value, which allows attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and buffer overflow) via a long string, as demonstrated by a long URI in a configuration with custom REQUEST_URI logging.",
"references": [
"http://github.com/php/php-src/commit/2721a0148649e07ed74468f097a28899741eb58f?w=1",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.openwall.com/lists/oss-security/2016/05/29/1",
"http://www.search-lab.hu/about-us/news/111-some-unusual-vulnerabilities-in-the-php-engine",
"https://bugs.php.net/bug.php?id=70755",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"http://github.com/php/php-src/commit/2721a0148649e07ed74468f097a28899741eb58f?w=1",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.openwall.com/lists/oss-security/2016/05/29/1",
"http://www.search-lab.hu/about-us/news/111-some-unusual-vulnerabilities-in-the-php-engine",
"https://bugs.php.net/bug.php?id=70755",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"
],
"epss": 0.01016,
"cvss": 9.1
},
"CVE-2018-0732": {
"verified": false,
"ranking_epss": 0.9902,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o).",
"references": [
"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
"http://www.securityfocus.com/bid/104442",
"http://www.securitytracker.com/id/1041090",
"https://access.redhat.com/errata/RHSA-2018:2552",
"https://access.redhat.com/errata/RHSA-2018:2553",
"https://access.redhat.com/errata/RHSA-2018:3221",
"https://access.redhat.com/errata/RHSA-2018:3505",
"https://access.redhat.com/errata/RHSA-2019:1296",
"https://access.redhat.com/errata/RHSA-2019:1297",
"https://access.redhat.com/errata/RHSA-2019:1543",
"https://cert-portal.siemens.com/productcert/pdf/ssa-419820.pdf",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3984ef0b72831da8b3ece4745cac4f8575b19098",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ea7abeeabf92b7aca160bdd0208636d4da69f4f4",
"https://lists.debian.org/debian-lts-announce/2018/07/msg00043.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/",
"https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/",
"https://security.gentoo.org/glsa/201811-03",
"https://security.netapp.com/advisory/ntap-20181105-0001/",
"https://security.netapp.com/advisory/ntap-20190118-0002/",
"https://securityadvisories.paloaltonetworks.com/Home/Detail/133",
"https://usn.ubuntu.com/3692-1/",
"https://usn.ubuntu.com/3692-2/",
"https://www.debian.org/security/2018/dsa-4348",
"https://www.debian.org/security/2018/dsa-4355",
"https://www.openssl.org/news/secadv/20180612.txt",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/security-alerts/cpujan2021.html",
"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
"https://www.tenable.com/security/tns-2018-12",
"https://www.tenable.com/security/tns-2018-13",
"https://www.tenable.com/security/tns-2018-14",
"https://www.tenable.com/security/tns-2018-17",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
"http://www.securityfocus.com/bid/104442",
"http://www.securitytracker.com/id/1041090",
"https://access.redhat.com/errata/RHSA-2018:2552",
"https://access.redhat.com/errata/RHSA-2018:2553",
"https://access.redhat.com/errata/RHSA-2018:3221",
"https://access.redhat.com/errata/RHSA-2018:3505",
"https://access.redhat.com/errata/RHSA-2019:1296",
"https://access.redhat.com/errata/RHSA-2019:1297",
"https://access.redhat.com/errata/RHSA-2019:1543",
"https://cert-portal.siemens.com/productcert/pdf/ssa-419820.pdf",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3984ef0b72831da8b3ece4745cac4f8575b19098",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ea7abeeabf92b7aca160bdd0208636d4da69f4f4",
"https://lists.debian.org/debian-lts-announce/2018/07/msg00043.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/",
"https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/",
"https://security.gentoo.org/glsa/201811-03",
"https://security.netapp.com/advisory/ntap-20181105-0001/",
"https://security.netapp.com/advisory/ntap-20190118-0002/",
"https://securityadvisories.paloaltonetworks.com/Home/Detail/133",
"https://usn.ubuntu.com/3692-1/",
"https://usn.ubuntu.com/3692-2/",
"https://www.debian.org/security/2018/dsa-4348",
"https://www.debian.org/security/2018/dsa-4355",
"https://www.openssl.org/news/secadv/20180612.txt",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/security-alerts/cpujan2021.html",
"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
"https://www.tenable.com/security/tns-2018-12",
"https://www.tenable.com/security/tns-2018-13",
"https://www.tenable.com/security/tns-2018-14",
"https://www.tenable.com/security/tns-2018-17"
],
"epss": 0.78382,
"cvss": 7.5
},
"CVE-2020-8492": {
"verified": false,
"ranking_epss": 0.87767,
"cvss_v2": 7.1,
"cvss_version": 3,
"summary": "Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00003.html",
"https://bugs.python.org/issue39503",
"https://github.com/python/cpython/pull/18284",
"https://lists.apache.org/thread.html/rdb31a608dd6758c6093fd645aea3fbf022dd25b37109b6aaea5bc0b5%40%3Ccommits.cassandra.apache.org%3E",
"https://lists.apache.org/thread.html/rfec113c733162b39633fd86a2d0f34bf42ac35f711b3ec1835c774da%40%3Ccommits.cassandra.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html",
"https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WOKDEXLYW5UQ4S7PA7E37IITOC7C56J/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A5NSAX4SC3V64PGZUPH7PRDLSON34Q5A/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APGWEMYZIY5VHLCSZ3HD67PA5Z2UQFGH/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UESGYI5XDAHJBATEZN3MHNDUBDH47AS6/",
"https://python-security.readthedocs.io/vuln/urllib-basic-auth-regex.html",
"https://security.gentoo.org/glsa/202005-09",
"https://security.netapp.com/advisory/ntap-20200221-0001/",
"https://usn.ubuntu.com/4333-1/",
"https://usn.ubuntu.com/4333-2/",
"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00003.html",
"https://bugs.python.org/issue39503",
"https://github.com/python/cpython/pull/18284",
"https://lists.apache.org/thread.html/rdb31a608dd6758c6093fd645aea3fbf022dd25b37109b6aaea5bc0b5%40%3Ccommits.cassandra.apache.org%3E",
"https://lists.apache.org/thread.html/rfec113c733162b39633fd86a2d0f34bf42ac35f711b3ec1835c774da%40%3Ccommits.cassandra.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html",
"https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WOKDEXLYW5UQ4S7PA7E37IITOC7C56J/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A5NSAX4SC3V64PGZUPH7PRDLSON34Q5A/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APGWEMYZIY5VHLCSZ3HD67PA5Z2UQFGH/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UESGYI5XDAHJBATEZN3MHNDUBDH47AS6/",
"https://python-security.readthedocs.io/vuln/urllib-basic-auth-regex.html",
"https://security.gentoo.org/glsa/202005-09",
"https://security.netapp.com/advisory/ntap-20200221-0001/",
"https://usn.ubuntu.com/4333-1/",
"https://usn.ubuntu.com/4333-2/"
],
"epss": 0.0363,
"cvss": 6.5
},
"CVE-2018-0739": {
"verified": false,
"ranking_epss": 0.94388,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so this is considered safe. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g). Fixed in OpenSSL 1.0.2o (Affected 1.0.2b-1.0.2n).",
"references": [
"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
"http://www.securityfocus.com/bid/103518",
"http://www.securityfocus.com/bid/105609",
"http://www.securitytracker.com/id/1040576",
"https://access.redhat.com/errata/RHSA-2018:3090",
"https://access.redhat.com/errata/RHSA-2018:3221",
"https://access.redhat.com/errata/RHSA-2018:3505",
"https://access.redhat.com/errata/RHSA-2019:0366",
"https://access.redhat.com/errata/RHSA-2019:0367",
"https://access.redhat.com/errata/RHSA-2019:1711",
"https://access.redhat.com/errata/RHSA-2019:1712",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2ac4c6f7b2b2af20c0e2b0ba05367e454cd11b33",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9310d45087ae546e27e61ddf8f6367f29848220d",
"https://lists.debian.org/debian-lts-announce/2018/03/msg00033.html",
"https://nodejs.org/en/blog/vulnerability/march-2018-security-releases/",
"https://security.gentoo.org/glsa/201811-21",
"https://security.gentoo.org/glsa/202007-53",
"https://security.netapp.com/advisory/ntap-20180330-0002/",
"https://security.netapp.com/advisory/ntap-20180726-0002/",
"https://securityadvisories.paloaltonetworks.com/Home/Detail/133",
"https://usn.ubuntu.com/3611-1/",
"https://usn.ubuntu.com/3611-2/",
"https://www.debian.org/security/2018/dsa-4157",
"https://www.debian.org/security/2018/dsa-4158",
"https://www.openssl.org/news/secadv/20180327.txt",
"https://www.oracle.com//security-alerts/cpujul2021.html",
"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.tenable.com/security/tns-2018-04",
"https://www.tenable.com/security/tns-2018-06",
"https://www.tenable.com/security/tns-2018-07",
"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
"http://www.securityfocus.com/bid/103518",
"http://www.securityfocus.com/bid/105609",
"http://www.securitytracker.com/id/1040576",
"https://access.redhat.com/errata/RHSA-2018:3090",
"https://access.redhat.com/errata/RHSA-2018:3221",
"https://access.redhat.com/errata/RHSA-2018:3505",
"https://access.redhat.com/errata/RHSA-2019:0366",
"https://access.redhat.com/errata/RHSA-2019:0367",
"https://access.redhat.com/errata/RHSA-2019:1711",
"https://access.redhat.com/errata/RHSA-2019:1712",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2ac4c6f7b2b2af20c0e2b0ba05367e454cd11b33",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9310d45087ae546e27e61ddf8f6367f29848220d",
"https://lists.debian.org/debian-lts-announce/2018/03/msg00033.html",
"https://nodejs.org/en/blog/vulnerability/march-2018-security-releases/",
"https://security.gentoo.org/glsa/201811-21",
"https://security.gentoo.org/glsa/202007-53",
"https://security.netapp.com/advisory/ntap-20180330-0002/",
"https://security.netapp.com/advisory/ntap-20180726-0002/",
"https://securityadvisories.paloaltonetworks.com/Home/Detail/133",
"https://usn.ubuntu.com/3611-1/",
"https://usn.ubuntu.com/3611-2/",
"https://www.debian.org/security/2018/dsa-4157",
"https://www.debian.org/security/2018/dsa-4158",
"https://www.openssl.org/news/secadv/20180327.txt",
"https://www.oracle.com//security-alerts/cpujul2021.html",
"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.tenable.com/security/tns-2018-04",
"https://www.tenable.com/security/tns-2018-06",
"https://www.tenable.com/security/tns-2018-07"
],
"epss": 0.14445,
"cvss": 6.5
},
"CVE-2016-4343": {
"verified": false,
"ranking_epss": 0.91796,
"cvss_v2": 6.8,
"cvss_version": 3,
"summary": "The phar_make_dirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0.3 mishandles zero-size ././@LongLink files, which allows remote attackers to cause a denial of service (uninitialized pointer dereference) or possibly have unspecified other impact via a crafted TAR archive.",
"references": [
"http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.openwall.com/lists/oss-security/2016/04/28/2",
"http://www.securityfocus.com/bid/89179",
"https://bugs.php.net/bug.php?id=71331",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
"http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.openwall.com/lists/oss-security/2016/04/28/2",
"http://www.securityfocus.com/bid/89179",
"https://bugs.php.net/bug.php?id=71331",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722"
],
"epss": 0.07576,
"cvss": 8.8
},
"CVE-2016-4342": {
"verified": false,
"ranking_epss": 0.90226,
"cvss_v2": 8.3,
"cvss_version": 3,
"summary": "ext/phar/phar_object.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 mishandles zero-length uncompressed data, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted (1) TAR, (2) ZIP, or (3) PHAR archive.",
"references": [
"http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html",
"http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.openwall.com/lists/oss-security/2016/04/28/2",
"http://www.securityfocus.com/bid/89154",
"https://bugs.php.net/bug.php?id=71354",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
"http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html",
"http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.openwall.com/lists/oss-security/2016/04/28/2",
"http://www.securityfocus.com/bid/89154",
"https://bugs.php.net/bug.php?id=71354",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722"
],
"epss": 0.05555,
"cvss": 8.8
},
"CVE-2016-2161": {
"verified": false,
"ranking_epss": 0.9687,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and each instance continues to crash even for subsequently valid requests.",
"references": [
"http://rhn.redhat.com/errata/RHSA-2017-1415.html",
"http://www.debian.org/security/2017/dsa-3796",
"http://www.securityfocus.com/bid/95076",
"http://www.securitytracker.com/id/1037508",
"https://access.redhat.com/errata/RHSA-2017:0906",
"https://access.redhat.com/errata/RHSA-2017:1161",
"https://access.redhat.com/errata/RHSA-2017:1413",
"https://access.redhat.com/errata/RHSA-2017:1414",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us",
"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-2161",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://security.gentoo.org/glsa/201701-36",
"https://security.netapp.com/advisory/ntap-20180423-0001/",
"https://support.apple.com/HT208221",
"https://www.tenable.com/security/tns-2017-04",
"http://rhn.redhat.com/errata/RHSA-2017-1415.html",
"http://www.debian.org/security/2017/dsa-3796",
"http://www.securityfocus.com/bid/95076",
"http://www.securitytracker.com/id/1037508",
"https://access.redhat.com/errata/RHSA-2017:0906",
"https://access.redhat.com/errata/RHSA-2017:1161",
"https://access.redhat.com/errata/RHSA-2017:1413",
"https://access.redhat.com/errata/RHSA-2017:1414",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us",
"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-2161",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://security.gentoo.org/glsa/201701-36",
"https://security.netapp.com/advisory/ntap-20180423-0001/",
"https://support.apple.com/HT208221",
"https://www.tenable.com/security/tns-2017-04"
],
"epss": 0.33186,
"cvss": 7.5
},
"CVE-2015-0228": {
"verified": false,
"ranking_epss": 0.95242,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service (child-process crash) by sending a crafted WebSocket Ping frame after a Lua script has called the wsupgrade function.",
"references": [
"http://advisories.mageia.org/MGASA-2015-0099.html",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html",
"http://lists.opensuse.org/opensuse-updates/2015-03/msg00006.html",
"http://rhn.redhat.com/errata/RHSA-2015-1666.html",
"http://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x/CHANGES",
"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/73041",
"http://www.securityfocus.com/bid/91787",
"http://www.securitytracker.com/id/1032967",
"http://www.ubuntu.com/usn/USN-2523-1",
"https://github.com/apache/httpd/commit/643f0fcf3b8ab09a68f0ecd2aa37aafeda3e63ef",
"https://github.com/apache/httpd/commit/78eb3b9235515652ed141353d98c239237030410",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://support.apple.com/HT205219",
"https://support.apple.com/kb/HT205031",
"http://advisories.mageia.org/MGASA-2015-0099.html",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html",
"http://lists.opensuse.org/opensuse-updates/2015-03/msg00006.html",
"http://rhn.redhat.com/errata/RHSA-2015-1666.html",
"http://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x/CHANGES",
"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/73041",
"http://www.securityfocus.com/bid/91787",
"http://www.securitytracker.com/id/1032967",
"http://www.ubuntu.com/usn/USN-2523-1",
"https://github.com/apache/httpd/commit/643f0fcf3b8ab09a68f0ecd2aa37aafeda3e63ef",
"https://github.com/apache/httpd/commit/78eb3b9235515652ed141353d98c239237030410",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://support.apple.com/HT205219",
"https://support.apple.com/kb/HT205031"
],
"epss": 0.18715,
"cvss": 5
},
"CVE-2014-8583": {
"verified": false,
"ranking_epss": 0.28929,
"cvss_v2": 6.9,
"cvss_version": 2,
"summary": "mod_wsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle when group privileges cannot be dropped, which might allow attackers to gain privileges via unspecified vectors.",
"references": [
"http://advisories.mageia.org/MGASA-2014-0513.html",
"http://lists.opensuse.org/opensuse-updates/2014-12/msg00036.html",
"http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.2.4.html",
"http://www.mandriva.com/security/advisories?name=MDVSA-2014:253",
"http://www.openwall.com/lists/oss-security/2014/06/19/7",
"http://www.openwall.com/lists/oss-security/2014/11/04/8",
"http://www.securityfocus.com/bid/68111",
"http://www.ubuntu.com/usn/USN-2431-1",
"https://bugzilla.redhat.com/show_bug.cgi?id=1111034",
"https://security.gentoo.org/glsa/201612-49",
"http://advisories.mageia.org/MGASA-2014-0513.html",
"http://lists.opensuse.org/opensuse-updates/2014-12/msg00036.html",
"http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.2.4.html",
"http://www.mandriva.com/security/advisories?name=MDVSA-2014:253",
"http://www.openwall.com/lists/oss-security/2014/06/19/7",
"http://www.openwall.com/lists/oss-security/2014/11/04/8",
"http://www.securityfocus.com/bid/68111",
"http://www.ubuntu.com/usn/USN-2431-1",
"https://bugzilla.redhat.com/show_bug.cgi?id=1111034",
"https://security.gentoo.org/glsa/201612-49"
],
"epss": 0.00107,
"cvss": 6.9
},
"CVE-2015-3330": {
"verified": false,
"ranking_epss": 0.97243,
"cvss_v2": 6.8,
"cvss_version": 2,
"summary": "The php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, when the Apache HTTP Server 2.4.x is used, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via pipelined HTTP requests that result in a \"deconfigured interpreter.\"",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=809610f5ea38a83b284e1125d1fff129bdd615e7",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html",
"http://openwall.com/lists/oss-security/2015/04/17/7",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/74204",
"http://www.securitytracker.com/id/1033703",
"http://www.ubuntu.com/usn/USN-2572-1",
"https://bugs.php.net/bug.php?id=68486",
"https://bugs.php.net/bug.php?id=69218",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205267",
"https://support.apple.com/kb/HT205031",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=809610f5ea38a83b284e1125d1fff129bdd615e7",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html",
"http://openwall.com/lists/oss-security/2015/04/17/7",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/74204",
"http://www.securitytracker.com/id/1033703",
"http://www.ubuntu.com/usn/USN-2572-1",
"https://bugs.php.net/bug.php?id=68486",
"https://bugs.php.net/bug.php?id=69218",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205267",
"https://support.apple.com/kb/HT205031"
],
"epss": 0.38958,
"cvss": 6.8
},
"CVE-2025-6075": {
"verified": false,
"ranking_epss": 0.05617,
"cvss_v2": null,
"cvss_version": 3,
"summary": "If the value passed to os.path.expandvars() is user-controlled a \nperformance degradation is possible when expanding environment \nvariables.",
"references": [
"https://github.com/python/cpython/commit/2e6150adccaaf5bd95d4c19dfd04a36e0b325d8c",
"https://github.com/python/cpython/commit/5dceb93486176e6b4a6d9754491005113eb23427",
"https://github.com/python/cpython/commit/631ba3407e3348ccd56ce5160c4fb2c5dc5f4d84",
"https://github.com/python/cpython/commit/892747b4cf0f95ba8beb51c0d0658bfaa381ebca",
"https://github.com/python/cpython/commit/9ab89c026aa9611c4b0b67c288b8303a480fe742",
"https://github.com/python/cpython/commit/c8a5f3435c342964e0a432cc9fb448b7dbecd1ba",
"https://github.com/python/cpython/commit/f029e8db626ddc6e3a3beea4eff511a71aaceb5c",
"https://github.com/python/cpython/issues/136065",
"https://mail.python.org/archives/list/security-announce@python.org/thread/IUP5QJ6D4KK6ULHOMPC7DPNKRYQTQNLA/"
],
"epss": 0.00021,
"cvss": 5.5
},
"CVE-2016-3142": {
"verified": false,
"ranking_epss": 0.8882,
"cvss_v2": 6.4,
"cvss_version": 3,
"summary": "The phar_parse_zipfile function in zip.c in the PHAR extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and application crash) by placing a PK\\x05\\x06 signature at an invalid location.",
"references": [
"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.securitytracker.com/id/1035255",
"http://www.ubuntu.com/usn/USN-2952-1",
"http://www.ubuntu.com/usn/USN-2952-2",
"https://bugs.php.net/bug.php?id=71498",
"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=a6fdc5bb27b20d889de0cd29318b3968aabb57bd",
"https://php.net/ChangeLog-5.php",
"https://support.apple.com/HT206567",
"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.securitytracker.com/id/1035255",
"http://www.ubuntu.com/usn/USN-2952-1",
"http://www.ubuntu.com/usn/USN-2952-2",
"https://bugs.php.net/bug.php?id=71498",
"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=a6fdc5bb27b20d889de0cd29318b3968aabb57bd",
"https://php.net/ChangeLog-5.php",
"https://support.apple.com/HT206567"
],
"epss": 0.04302,
"cvss": 8.2
},
"CVE-2016-3141": {
"verified": false,
"ranking_epss": 0.98742,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact by triggering a wddx_deserialize call on XML data containing a crafted var element.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=b1bd4119bcafab6f9a8f84d92cd65eec3afeface",
"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html",
"http://www.securityfocus.com/bid/84271",
"http://www.securitytracker.com/id/1035255",
"http://www.ubuntu.com/usn/USN-2952-1",
"http://www.ubuntu.com/usn/USN-2952-2",
"https://bugs.php.net/bug.php?id=71587",
"https://php.net/ChangeLog-5.php",
"https://support.apple.com/HT206567",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=b1bd4119bcafab6f9a8f84d92cd65eec3afeface",
"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html",
"http://www.securityfocus.com/bid/84271",
"http://www.securitytracker.com/id/1035255",
"http://www.ubuntu.com/usn/USN-2952-1",
"http://www.ubuntu.com/usn/USN-2952-2",
"https://bugs.php.net/bug.php?id=71587",
"https://php.net/ChangeLog-5.php",
"https://support.apple.com/HT206567"
],
"epss": 0.72278,
"cvss": 9.8
},
"CVE-2017-9798": {
"verified": false,
"ranking_epss": 0.99862,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed. This affects the Apache HTTP Server through 2.2.34 and 2.4.x through 2.4.27. The attacker sends an unauthenticated OPTIONS HTTP request when attempting to read secret data. This is a use-after-free issue and thus secret data is not always sent, and the specific data depends on many factors including configuration. Exploitation with .htaccess can be blocked with a patch to the ap_limit_section function in server/core.c.",
"references": [
"http://openwall.com/lists/oss-security/2017/09/18/2",
"http://www.debian.org/security/2017/dsa-3980",
"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
"http://www.securityfocus.com/bid/100872",
"http://www.securityfocus.com/bid/105598",
"http://www.securitytracker.com/id/1039387",
"https://access.redhat.com/errata/RHSA-2017:2882",
"https://access.redhat.com/errata/RHSA-2017:2972",
"https://access.redhat.com/errata/RHSA-2017:3018",
"https://access.redhat.com/errata/RHSA-2017:3113",
"https://access.redhat.com/errata/RHSA-2017:3114",
"https://access.redhat.com/errata/RHSA-2017:3193",
"https://access.redhat.com/errata/RHSA-2017:3194",
"https://access.redhat.com/errata/RHSA-2017:3195",
"https://access.redhat.com/errata/RHSA-2017:3239",
"https://access.redhat.com/errata/RHSA-2017:3240",
"https://access.redhat.com/errata/RHSA-2017:3475",
"https://access.redhat.com/errata/RHSA-2017:3476",
"https://access.redhat.com/errata/RHSA-2017:3477",
"https://blog.fuzzing-project.org/60-Optionsbleed-HTTP-OPTIONS-method-can-leak-Apaches-server-memory.html",
"https://blog.fuzzing-project.org/uploads/apache-2.2-optionsbleed-backport.patch",
"https://github.com/apache/httpd/commit/4cc27823899e070268b906ca677ee838d07cf67a",
"https://github.com/hannob/optionsbleed",
"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2017-9798",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
"https://security-tracker.debian.org/tracker/CVE-2017-9798",
"https://security.gentoo.org/glsa/201710-32",
"https://security.netapp.com/advisory/ntap-20180601-0003/",
"https://support.apple.com/HT208331",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",
"https://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/server/core.c?r1=1805223&r2=1807754&pathrev=1807754&view=patch",
"https://www.exploit-db.com/exploits/42745/",
"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
"https://www.tenable.com/security/tns-2019-09",
"http://openwall.com/lists/oss-security/2017/09/18/2",
"http://seclists.org/fulldisclosure/2024/Sep/22",
"http://www.debian.org/security/2017/dsa-3980",
"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
"http://www.securityfocus.com/bid/100872",
"http://www.securityfocus.com/bid/105598",
"http://www.securitytracker.com/id/1039387",
"https://access.redhat.com/errata/RHSA-2017:2882",
"https://access.redhat.com/errata/RHSA-2017:2972",
"https://access.redhat.com/errata/RHSA-2017:3018",
"https://access.redhat.com/errata/RHSA-2017:3113",
"https://access.redhat.com/errata/RHSA-2017:3114",
"https://access.redhat.com/errata/RHSA-2017:3193",
"https://access.redhat.com/errata/RHSA-2017:3194",
"https://access.redhat.com/errata/RHSA-2017:3195",
"https://access.redhat.com/errata/RHSA-2017:3239",
"https://access.redhat.com/errata/RHSA-2017:3240",
"https://access.redhat.com/errata/RHSA-2017:3475",
"https://access.redhat.com/errata/RHSA-2017:3476",
"https://access.redhat.com/errata/RHSA-2017:3477",
"https://blog.fuzzing-project.org/60-Optionsbleed-HTTP-OPTIONS-method-can-leak-Apaches-server-memory.html",
"https://blog.fuzzing-project.org/uploads/apache-2.2-optionsbleed-backport.patch",
"https://github.com/apache/httpd/commit/4cc27823899e070268b906ca677ee838d07cf67a",
"https://github.com/hannob/optionsbleed",
"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2017-9798",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
"https://security-tracker.debian.org/tracker/CVE-2017-9798",
"https://security.gentoo.org/glsa/201710-32",
"https://security.netapp.com/advisory/ntap-20180601-0003/",
"https://support.apple.com/HT208331",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",
"https://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/server/core.c?r1=1805223&r2=1807754&pathrev=1807754&view=patch",
"https://www.exploit-db.com/exploits/42745/",
"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
"https://www.tenable.com/security/tns-2019-09"
],
"epss": 0.9384,
"cvss": 7.5
},
"CVE-2025-58098": {
"verified": false,
"ranking_epss": 0.07277,
"cvss_v2": null,
"cvss_version": 3,
"summary": "Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd=\"...\" directives.\n\nThis issue affects Apache HTTP Server before 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.66, which fixes the issue.",
"references": [
"https://httpd.apache.org/security/vulnerabilities_24.html",
"http://www.openwall.com/lists/oss-security/2025/12/04/5"
],
"epss": 0.00027,
"cvss": 8.3
},
"CVE-2013-4365": {
"verified": false,
"ranking_epss": 0.91159,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "Heap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module before 2.3.9 for the Apache HTTP Server allows remote attackers to have an unspecified impact via unknown vectors.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00011.html",
"http://lists.opensuse.org/opensuse-updates/2013-10/msg00055.html",
"http://lists.opensuse.org/opensuse-updates/2013-10/msg00059.html",
"http://lists.opensuse.org/opensuse-updates/2013-11/msg00024.html",
"http://secunia.com/advisories/55197",
"http://svn.apache.org/viewvc?view=revision&revision=1527362",
"http://www.debian.org/security/2013/dsa-2778",
"http://www.mail-archive.com/dev%40httpd.apache.org/msg58077.html",
"http://www.securityfocus.com/bid/62939",
"http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00011.html",
"http://lists.opensuse.org/opensuse-updates/2013-10/msg00055.html",
"http://lists.opensuse.org/opensuse-updates/2013-10/msg00059.html",
"http://lists.opensuse.org/opensuse-updates/2013-11/msg00024.html",
"http://secunia.com/advisories/55197",
"http://svn.apache.org/viewvc?view=revision&revision=1527362",
"http://www.debian.org/security/2013/dsa-2778",
"http://www.mail-archive.com/dev%40httpd.apache.org/msg58077.html",
"http://www.securityfocus.com/bid/62939"
],
"epss": 0.06656,
"cvss": 7.5
},
"CVE-2013-4248": {
"verified": false,
"ranking_epss": 0.92969,
"cvss_v2": 4.3,
"cvss_version": 2,
"summary": "The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '\\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2874696a5a8d46639d261571f915c493cd875897",
"http://lists.opensuse.org/opensuse-updates/2013-12/msg00125.html",
"http://lists.opensuse.org/opensuse-updates/2013-12/msg00126.html",
"http://marc.info/?l=bugtraq&m=141390017113542&w=2",
"http://rhn.redhat.com/errata/RHSA-2013-1307.html",
"http://rhn.redhat.com/errata/RHSA-2013-1615.html",
"http://secunia.com/advisories/54478",
"http://secunia.com/advisories/54657",
"http://secunia.com/advisories/55078",
"http://secunia.com/advisories/59652",
"http://support.apple.com/kb/HT6150",
"http://www.debian.org/security/2013/dsa-2742",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/61776",
"http://www.securitytracker.com/id/1028924",
"http://www.ubuntu.com/usn/USN-1937-1",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2874696a5a8d46639d261571f915c493cd875897",
"http://lists.opensuse.org/opensuse-updates/2013-12/msg00125.html",
"http://lists.opensuse.org/opensuse-updates/2013-12/msg00126.html",
"http://marc.info/?l=bugtraq&m=141390017113542&w=2",
"http://rhn.redhat.com/errata/RHSA-2013-1307.html",
"http://rhn.redhat.com/errata/RHSA-2013-1615.html",
"http://secunia.com/advisories/54478",
"http://secunia.com/advisories/54657",
"http://secunia.com/advisories/55078",
"http://secunia.com/advisories/59652",
"http://support.apple.com/kb/HT6150",
"http://www.debian.org/security/2013/dsa-2742",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/61776",
"http://www.securitytracker.com/id/1028924",
"http://www.ubuntu.com/usn/USN-1937-1"
],
"epss": 0.09892,
"cvss": 4.3
},
"CVE-2021-32791": {
"verified": false,
"ranking_epss": 0.56878,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In mod_auth_openidc before version 2.4.9, the AES GCM encryption in mod_auth_openidc uses a static IV and AAD. It is important to fix because this creates a static nonce and since aes-gcm is a stream cipher, this can lead to known cryptographic issues, since the same key is being reused. From 2.4.9 onwards this has been patched to use dynamic values through usage of cjose AES encryption routines.",
"references": [
"https://github.com/zmartzone/mod_auth_openidc/commit/375407c16c61a70b56fdbe13b0d2c8f11398e92c",
"https://github.com/zmartzone/mod_auth_openidc/releases/tag/v2.4.9",
"https://github.com/zmartzone/mod_auth_openidc/security/advisories/GHSA-px3c-6x7j-3r9r",
"https://lists.debian.org/debian-lts-announce/2023/04/msg00034.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZVF6BSJLRQZ7PFFR4X5JSU6KUJYNOCU/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QXAWKPT5LXZSUTFSJ6IWSZC7RMYYQXQD/",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://github.com/zmartzone/mod_auth_openidc/commit/375407c16c61a70b56fdbe13b0d2c8f11398e92c",
"https://github.com/zmartzone/mod_auth_openidc/releases/tag/v2.4.9",
"https://github.com/zmartzone/mod_auth_openidc/security/advisories/GHSA-px3c-6x7j-3r9r",
"https://lists.debian.org/debian-lts-announce/2023/04/msg00034.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZVF6BSJLRQZ7PFFR4X5JSU6KUJYNOCU/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QXAWKPT5LXZSUTFSJ6IWSZC7RMYYQXQD/",
"https://www.oracle.com/security-alerts/cpuapr2022.html"
],
"epss": 0.00344,
"cvss": 5.9
},
"CVE-2021-32792": {
"verified": false,
"ranking_epss": 0.3814,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In mod_auth_openidc before version 2.4.9, there is an XSS vulnerability in when using `OIDCPreservePost On`.",
"references": [
"https://github.com/zmartzone/mod_auth_openidc/commit/00c315cb0c8ab77c67be4a2ac08a71a83ac58751",
"https://github.com/zmartzone/mod_auth_openidc/commit/55ea0a085290cd2c8cdfdd960a230cbc38ba8b56",
"https://github.com/zmartzone/mod_auth_openidc/releases/tag/v2.4.9",
"https://github.com/zmartzone/mod_auth_openidc/security/advisories/GHSA-458c-7pwg-3j7j",
"https://lists.debian.org/debian-lts-announce/2023/04/msg00034.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZVF6BSJLRQZ7PFFR4X5JSU6KUJYNOCU/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QXAWKPT5LXZSUTFSJ6IWSZC7RMYYQXQD/",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://github.com/zmartzone/mod_auth_openidc/commit/00c315cb0c8ab77c67be4a2ac08a71a83ac58751",
"https://github.com/zmartzone/mod_auth_openidc/commit/55ea0a085290cd2c8cdfdd960a230cbc38ba8b56",
"https://github.com/zmartzone/mod_auth_openidc/releases/tag/v2.4.9",
"https://github.com/zmartzone/mod_auth_openidc/security/advisories/GHSA-458c-7pwg-3j7j",
"https://lists.debian.org/debian-lts-announce/2023/04/msg00034.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZVF6BSJLRQZ7PFFR4X5JSU6KUJYNOCU/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QXAWKPT5LXZSUTFSJ6IWSZC7RMYYQXQD/",
"https://www.oracle.com/security-alerts/cpuapr2022.html"
],
"epss": 0.0017,
"cvss": 3.1
},
"CVE-2013-7345": {
"verified": false,
"ranking_epss": 0.86899,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted ASCII file that triggers a large amount of backtracking, as demonstrated via a file with many newline characters.",
"references": [
"http://bugs.gw.com/view.php?id=164",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://support.apple.com/kb/HT6443",
"http://www.debian.org/security/2014/dsa-2873",
"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=703993",
"https://github.com/file/file/commit/ef2329cf71acb59204dd981e2c6cce6c81fe467c",
"http://bugs.gw.com/view.php?id=164",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://support.apple.com/kb/HT6443",
"http://www.debian.org/security/2014/dsa-2873",
"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=703993",
"https://github.com/file/file/commit/ef2329cf71acb59204dd981e2c6cce6c81fe467c"
],
"epss": 0.03176,
"cvss": 5
},
"CVE-2009-0796": {
"verified": false,
"ranking_epss": 0.98277,
"cvss_v2": 2.6,
"cvss_version": 2,
"summary": "Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web script or HTML via the URI.",
"references": [
"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html",
"http://secunia.com/advisories/34597",
"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021508.1-1",
"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021709.1-1",
"http://support.apple.com/kb/HT4435",
"http://svn.apache.org/viewvc/perl/modperl/branches/1.x/lib/Apache/Status.pm?r1=177851&r2=761081&pathrev=761081&diff_format=h",
"http://svn.apache.org/viewvc?view=rev&revision=761081",
"http://www.gossamer-threads.com/lists/modperl/modperl-cvs/99477#99477",
"http://www.gossamer-threads.com/lists/modperl/modperl/99475#99475",
"http://www.mandriva.com/security/advisories?name=MDVSA-2009:091",
"http://www.securityfocus.com/archive/1/502709/100/0/threaded",
"http://www.securityfocus.com/bid/34383",
"http://www.securitytracker.com/id?1021988",
"http://www.vupen.com/english/advisories/2009/0943",
"https://bugzilla.redhat.com/show_bug.cgi?id=494402",
"https://launchpad.net/bugs/cve/2009-0796",
"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8488",
"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html",
"http://secunia.com/advisories/34597",
"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021508.1-1",
"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021709.1-1",
"http://support.apple.com/kb/HT4435",
"http://svn.apache.org/viewvc/perl/modperl/branches/1.x/lib/Apache/Status.pm?r1=177851&r2=761081&pathrev=761081&diff_format=h",
"http://svn.apache.org/viewvc?view=rev&revision=761081",
"http://www.gossamer-threads.com/lists/modperl/modperl-cvs/99477#99477",
"http://www.gossamer-threads.com/lists/modperl/modperl/99475#99475",
"http://www.mandriva.com/security/advisories?name=MDVSA-2009:091",
"http://www.securityfocus.com/archive/1/502709/100/0/threaded",
"http://www.securityfocus.com/bid/34383",
"http://www.securitytracker.com/id?1021988",
"http://www.vupen.com/english/advisories/2009/0943",
"https://bugzilla.redhat.com/show_bug.cgi?id=494402",
"https://launchpad.net/bugs/cve/2009-0796",
"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8488"
],
"epss": 0.60732,
"cvss": 2.6
},
"CVE-2022-2068": {
"verified": false,
"ranking_epss": 0.95218,
"cvss_v2": 10,
"cvss_version": 3,
"summary": "In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).",
"references": [
"https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2c9c35870601b4a44d86ddbf512b38df38285cfa",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9639817dac8bbbaa64d09efad7464ccc405527c7",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WZZBKUHQFGSKGNXXKICSRPL7AMVW5M5/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/",
"https://security.netapp.com/advisory/ntap-20220707-0008/",
"https://www.debian.org/security/2022/dsa-5169",
"https://www.openssl.org/news/secadv/20220621.txt",
"http://seclists.org/fulldisclosure/2024/Nov/0",
"https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2c9c35870601b4a44d86ddbf512b38df38285cfa",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9639817dac8bbbaa64d09efad7464ccc405527c7",
"https://gitlab.com/fraf0/cve-2022-1292-re_score-analysis",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WZZBKUHQFGSKGNXXKICSRPL7AMVW5M5/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/",
"https://security.netapp.com/advisory/ntap-20220707-0008/",
"https://www.debian.org/security/2022/dsa-5169",
"https://www.openssl.org/news/secadv/20220621.txt"
],
"epss": 0.1858,
"cvss": 7.3
},
"CVE-2015-4148": {
"verified": false,
"ranking_epss": 0.94934,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "The do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that the uri property is a string, which allows remote attackers to obtain sensitive information by providing crafted serialized data with an int data type, related to a \"type confusion\" issue.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2015-06/msg00028.html",
"http://openwall.com/lists/oss-security/2015/06/01/4",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75103",
"http://www.securitytracker.com/id/1032459",
"https://bugs.php.net/bug.php?id=69085",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/kb/HT205031",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2015-06/msg00028.html",
"http://openwall.com/lists/oss-security/2015/06/01/4",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/75103",
"http://www.securitytracker.com/id/1032459",
"https://bugs.php.net/bug.php?id=69085",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/kb/HT205031"
],
"epss": 0.16938,
"cvss": 5
},
"CVE-2015-8935": {
"verified": false,
"ranking_epss": 0.7812,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line folding without considering browser compatibility, which allows remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer by leveraging (1) %0A%20 or (2) %0D%0A%20 mishandling in the header function.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html",
"http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.openwall.com/lists/oss-security/2016/06/20/3",
"https://bugs.php.net/bug.php?id=68978",
"https://github.com/php/php-src/commit/996faf964bba1aec06b153b370a7f20d3dd2bb8b?w=1",
"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html",
"http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.openwall.com/lists/oss-security/2016/06/20/3",
"https://bugs.php.net/bug.php?id=68978",
"https://github.com/php/php-src/commit/996faf964bba1aec06b153b370a7f20d3dd2bb8b?w=1"
],
"epss": 0.01115,
"cvss": 6.1
},
"CVE-2015-4147": {
"verified": false,
"ranking_epss": 0.97834,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "The SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that __default_headers is an array, which allows remote attackers to execute arbitrary code by providing crafted serialized data with an unexpected data type, related to a \"type confusion\" issue.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html",
"http://openwall.com/lists/oss-security/2015/06/01/4",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/73357",
"http://www.securitytracker.com/id/1032459",
"https://bugs.php.net/bug.php?id=69085",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/kb/HT205031",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html",
"http://openwall.com/lists/oss-security/2015/06/01/4",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/73357",
"http://www.securitytracker.com/id/1032459",
"https://bugs.php.net/bug.php?id=69085",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/kb/HT205031"
],
"epss": 0.50785,
"cvss": 7.5
},
"CVE-2019-9948": {
"verified": false,
"ranking_epss": 0.75868,
"cvss_v2": 6.4,
"cvss_version": 3,
"summary": "urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen('local_file:///etc/passwd') call.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00092.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00050.html",
"http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html",
"http://www.securityfocus.com/bid/107549",
"https://access.redhat.com/errata/RHSA-2019:1700",
"https://access.redhat.com/errata/RHSA-2019:2030",
"https://access.redhat.com/errata/RHSA-2019:3335",
"https://access.redhat.com/errata/RHSA-2019:3520",
"https://bugs.python.org/issue35907",
"https://github.com/python/cpython/pull/11842",
"https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2019/07/msg00011.html",
"https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html",
"https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQEQLXLOCR3SNM3AA5RRYJFQ5AZBYJ4L/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KRYFIMISZ47NTAU3XWZUOFB7CYL62KES/",
"https://seclists.org/bugtraq/2019/Oct/29",
"https://security.gentoo.org/glsa/202003-26",
"https://security.netapp.com/advisory/ntap-20190404-0004/",
"https://usn.ubuntu.com/4127-1/",
"https://usn.ubuntu.com/4127-2/",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00092.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00050.html",
"http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html",
"http://www.securityfocus.com/bid/107549",
"https://access.redhat.com/errata/RHSA-2019:1700",
"https://access.redhat.com/errata/RHSA-2019:2030",
"https://access.redhat.com/errata/RHSA-2019:3335",
"https://access.redhat.com/errata/RHSA-2019:3520",
"https://bugs.python.org/issue35907",
"https://github.com/python/cpython/pull/11842",
"https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2019/07/msg00011.html",
"https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html",
"https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQEQLXLOCR3SNM3AA5RRYJFQ5AZBYJ4L/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KRYFIMISZ47NTAU3XWZUOFB7CYL62KES/",
"https://seclists.org/bugtraq/2019/Oct/29",
"https://security.gentoo.org/glsa/202003-26",
"https://security.netapp.com/advisory/ntap-20190404-0004/",
"https://usn.ubuntu.com/4127-1/",
"https://usn.ubuntu.com/4127-2/"
],
"epss": 0.00918,
"cvss": 9.1
},
"CVE-2017-3167": {
"verified": false,
"ranking_epss": 0.9316,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may lead to authentication requirements being bypassed.",
"references": [
"http://www.debian.org/security/2017/dsa-3896",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
"http://www.securityfocus.com/bid/99135",
"http://www.securitytracker.com/id/1038711",
"https://access.redhat.com/errata/RHSA-2017:2478",
"https://access.redhat.com/errata/RHSA-2017:2479",
"https://access.redhat.com/errata/RHSA-2017:2483",
"https://access.redhat.com/errata/RHSA-2017:3193",
"https://access.redhat.com/errata/RHSA-2017:3194",
"https://access.redhat.com/errata/RHSA-2017:3195",
"https://access.redhat.com/errata/RHSA-2017:3475",
"https://access.redhat.com/errata/RHSA-2017:3476",
"https://access.redhat.com/errata/RHSA-2017:3477",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8409e41a8f7dd9ded37141c38df001be930115428c3d64f70bbdb8b4%40%3Cdev.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://security.gentoo.org/glsa/201710-32",
"https://security.netapp.com/advisory/ntap-20180601-0002/",
"https://support.apple.com/HT208221",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",
"https://www.nomachine.com/SU08O00185",
"https://www.tenable.com/security/tns-2019-09",
"http://seclists.org/fulldisclosure/2024/Sep/22",
"http://www.debian.org/security/2017/dsa-3896",
"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
"http://www.securityfocus.com/bid/99135",
"http://www.securitytracker.com/id/1038711",
"https://access.redhat.com/errata/RHSA-2017:2478",
"https://access.redhat.com/errata/RHSA-2017:2479",
"https://access.redhat.com/errata/RHSA-2017:2483",
"https://access.redhat.com/errata/RHSA-2017:3193",
"https://access.redhat.com/errata/RHSA-2017:3194",
"https://access.redhat.com/errata/RHSA-2017:3195",
"https://access.redhat.com/errata/RHSA-2017:3475",
"https://access.redhat.com/errata/RHSA-2017:3476",
"https://access.redhat.com/errata/RHSA-2017:3477",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8409e41a8f7dd9ded37141c38df001be930115428c3d64f70bbdb8b4%40%3Cdev.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
"https://security.gentoo.org/glsa/201710-32",
"https://security.netapp.com/advisory/ntap-20180601-0002/",
"https://support.apple.com/HT208221",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",
"https://www.nomachine.com/SU08O00185",
"https://www.tenable.com/security/tns-2019-09"
],
"epss": 0.10349,
"cvss": 9.8
},
"CVE-2023-38709": {
"verified": false,
"ranking_epss": 0.87244,
"cvss_v2": null,
"cvss_version": 3,
"summary": "Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses.\n\nThis issue affects Apache HTTP Server: through 2.4.58.",
"references": [
"http://seclists.org/fulldisclosure/2024/Jul/18",
"http://www.openwall.com/lists/oss-security/2024/04/04/3",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I2N2NZEX3MR64IWSGL3QGN7KSRUGAEMF/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LX5U34KYGDYPRH3AJ6MDDCBJDWDPXNVJ/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WNV4SZAPVS43DZWNFU7XBYYOZEZMI4ZC/",
"https://security.netapp.com/advisory/ntap-20240415-0013/",
"https://support.apple.com/kb/HT214119",
"http://seclists.org/fulldisclosure/2024/Jul/18",
"http://www.openwall.com/lists/oss-security/2024/04/04/3",
"http://www.openwall.com/lists/oss-security/2025/07/10/2",
"http://www.openwall.com/lists/oss-security/2025/07/10/3",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I2N2NZEX3MR64IWSGL3QGN7KSRUGAEMF/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LX5U34KYGDYPRH3AJ6MDDCBJDWDPXNVJ/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WNV4SZAPVS43DZWNFU7XBYYOZEZMI4ZC/",
"https://security.netapp.com/advisory/ntap-20240415-0013/",
"https://support.apple.com/kb/HT214119"
],
"epss": 0.03342,
"cvss": 7.3
},
"CVE-2024-39573": {
"verified": false,
"ranking_epss": 0.86858,
"cvss_v2": null,
"cvss_version": 3,
"summary": "Potential SSRF in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules to unexpectedly setup URL's to be handled by mod_proxy.\nUsers are recommended to upgrade to version 2.4.60, which fixes this issue.",
"references": [
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://security.netapp.com/advisory/ntap-20240712-0001/",
"http://seclists.org/fulldisclosure/2024/Oct/11",
"http://www.openwall.com/lists/oss-security/2024/07/01/11",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://security.netapp.com/advisory/ntap-20240712-0001/"
],
"epss": 0.0316,
"cvss": 7.5
},
"CVE-2021-44790": {
"verified": false,
"ranking_epss": 0.99436,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.",
"references": [
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://packetstormsecurity.com/files/171631/Apache-2.4.x-Buffer-Overflow.html",
"http://seclists.org/fulldisclosure/2022/May/33",
"http://seclists.org/fulldisclosure/2022/May/35",
"http://seclists.org/fulldisclosure/2022/May/38",
"http://www.openwall.com/lists/oss-security/2021/12/20/4",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFSWOH4X77CV7AH7C4RMHUBDWKQDL4YH/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTD/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20211224-0001/",
"https://support.apple.com/kb/HT213255",
"https://support.apple.com/kb/HT213256",
"https://support.apple.com/kb/HT213257",
"https://www.debian.org/security/2022/dsa-5035",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujan2022.html",
"https://www.tenable.com/security/tns-2022-01",
"https://www.tenable.com/security/tns-2022-03",
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://packetstormsecurity.com/files/171631/Apache-2.4.x-Buffer-Overflow.html",
"http://seclists.org/fulldisclosure/2022/May/33",
"http://seclists.org/fulldisclosure/2022/May/35",
"http://seclists.org/fulldisclosure/2022/May/38",
"http://www.openwall.com/lists/oss-security/2021/12/20/4",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFSWOH4X77CV7AH7C4RMHUBDWKQDL4YH/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTD/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20211224-0001/",
"https://support.apple.com/kb/HT213255",
"https://support.apple.com/kb/HT213256",
"https://support.apple.com/kb/HT213257",
"https://www.debian.org/security/2022/dsa-5035",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujan2022.html",
"https://www.tenable.com/security/tns-2022-01",
"https://www.tenable.com/security/tns-2022-03"
],
"epss": 0.87092,
"cvss": 9.8
},
"CVE-2018-14851": {
"verified": false,
"ranking_epss": 0.61008,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "exif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG file.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/104871",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://bugs.php.net/bug.php?id=76557",
"https://lists.debian.org/debian-lts-announce/2018/09/msg00000.html",
"https://security.netapp.com/advisory/ntap-20181107-0003/",
"https://usn.ubuntu.com/3766-1/",
"https://usn.ubuntu.com/3766-2/",
"https://www.debian.org/security/2018/dsa-4353",
"https://www.tenable.com/security/tns-2018-12",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/104871",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://bugs.php.net/bug.php?id=76557",
"https://lists.debian.org/debian-lts-announce/2018/09/msg00000.html",
"https://security.netapp.com/advisory/ntap-20181107-0003/",
"https://usn.ubuntu.com/3766-1/",
"https://usn.ubuntu.com/3766-2/",
"https://www.debian.org/security/2018/dsa-4353",
"https://www.tenable.com/security/tns-2018-12"
],
"epss": 0.00407,
"cvss": 5.5
},
"CVE-2019-18348": {
"verified": false,
"ranking_epss": 0.85739,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \\r\\n (specifically in the host component of a URL) followed by an HTTP header. This is similar to the CVE-2019-9740 query string issue and the CVE-2019-9947 path string issue. (This is not exploitable when glibc has CVE-2016-10739 fixed.). This is fixed in: v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1; v3.6.11, v3.6.11rc1, v3.6.12; v3.7.8, v3.7.8rc1, v3.7.9; v3.8.3, v3.8.3rc1, v3.8.4, v3.8.4rc1, v3.8.5, v3.8.6, v3.8.6rc1.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00041.html",
"https://bugs.python.org/issue30458#msg347282",
"https://bugzilla.redhat.com/show_bug.cgi?id=1727276",
"https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A5NSAX4SC3V64PGZUPH7PRDLSON34Q5A/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UESGYI5XDAHJBATEZN3MHNDUBDH47AS6/",
"https://security.netapp.com/advisory/ntap-20191107-0004/",
"https://usn.ubuntu.com/4333-1/",
"https://usn.ubuntu.com/4333-2/",
"https://www.oracle.com/security-alerts/cpuoct2020.html",
"http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00041.html",
"https://bugs.python.org/issue30458#msg347282",
"https://bugzilla.redhat.com/show_bug.cgi?id=1727276",
"https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A5NSAX4SC3V64PGZUPH7PRDLSON34Q5A/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UESGYI5XDAHJBATEZN3MHNDUBDH47AS6/",
"https://security.netapp.com/advisory/ntap-20191107-0004/",
"https://usn.ubuntu.com/4333-1/",
"https://usn.ubuntu.com/4333-2/",
"https://www.oracle.com/security-alerts/cpuoct2020.html"
],
"epss": 0.02672,
"cvss": 6.1
},
"CVE-2013-6501": {
"verified": false,
"ranking_epss": 0.16229,
"cvss_v2": 4.6,
"cvss_version": 2,
"summary": "The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the get_sdl function in ext/soap/php_sdl.c.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.securityfocus.com/bid/72530",
"https://bugzilla.redhat.com/show_bug.cgi?id=1009103",
"https://security.gentoo.org/glsa/201606-10",
"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.securityfocus.com/bid/72530",
"https://bugzilla.redhat.com/show_bug.cgi?id=1009103",
"https://security.gentoo.org/glsa/201606-10"
],
"epss": 0.00052,
"cvss": 4.6
},
"CVE-2021-34798": {
"verified": false,
"ranking_epss": 0.93139,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.",
"references": [
"http://httpd.apache.org/security/vulnerabilities_24.html",
"https://cert-portal.siemens.com/productcert/pdf/ssa-685781.pdf",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10379",
"https://lists.apache.org/thread.html/r3925e167d5eb1c75def3750c155d753064e1d34a143028bb32910432%40%3Cusers.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r61fdbfc26ab170f4e6492ef3bd5197c20b862ce156e9d5a54d4b899c%40%3Cusers.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r82838efc5fa6fc4c73986399c9b71573589f78b31846aff5bd9b1697%40%3Cusers.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r82c077663f9759c7df5a6656f925b3ee4f55fcd33c889ba7cd687029%40%3Cusers.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2021/10/msg00001.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20211008-0004/",
"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQ",
"https://www.debian.org/security/2021/dsa-4982",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujan2022.html",
"https://www.tenable.com/security/tns-2021-17",
"http://httpd.apache.org/security/vulnerabilities_24.html",
"https://cert-portal.siemens.com/productcert/pdf/ssa-685781.pdf",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10379",
"https://lists.apache.org/thread.html/r3925e167d5eb1c75def3750c155d753064e1d34a143028bb32910432%40%3Cusers.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r61fdbfc26ab170f4e6492ef3bd5197c20b862ce156e9d5a54d4b899c%40%3Cusers.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r82838efc5fa6fc4c73986399c9b71573589f78b31846aff5bd9b1697%40%3Cusers.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r82c077663f9759c7df5a6656f925b3ee4f55fcd33c889ba7cd687029%40%3Cusers.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2021/10/msg00001.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20211008-0004/",
"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQ",
"https://www.debian.org/security/2021/dsa-4982",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujan2022.html",
"https://www.tenable.com/security/tns-2021-17"
],
"epss": 0.1029,
"cvss": 7.5
},
"CVE-2018-19396": {
"verified": false,
"ranking_epss": 0.83231,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "ext/standard/var_unserializer.c in PHP 5.x through 7.1.24 allows attackers to cause a denial of service (application crash) via an unserialize call for the com, dotnet, or variant class.",
"references": [
"http://www.securityfocus.com/bid/105989",
"https://bugs.php.net/bug.php?id=77177",
"https://security.netapp.com/advisory/ntap-20181221-0005/",
"http://www.securityfocus.com/bid/105989",
"https://bugs.php.net/bug.php?id=77177",
"https://security.netapp.com/advisory/ntap-20181221-0005/"
],
"epss": 0.01915,
"cvss": 7.5
},
"CVE-2018-19395": {
"verified": false,
"ranking_epss": 0.83472,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "ext/standard/var.c in PHP 5.x through 7.1.24 on Windows allows attackers to cause a denial of service (NULL pointer dereference and application crash) because com and com_safearray_proxy return NULL in com_properties_get in ext/com_dotnet/com_handlers.c, as demonstrated by a serialize call on COM(\"WScript.Shell\").",
"references": [
"http://www.securityfocus.com/bid/105989",
"https://bugs.php.net/bug.php?id=77177",
"https://security.netapp.com/advisory/ntap-20181221-0005/",
"http://www.securityfocus.com/bid/105989",
"https://bugs.php.net/bug.php?id=77177",
"https://security.netapp.com/advisory/ntap-20181221-0005/"
],
"epss": 0.01973,
"cvss": 7.5
},
"CVE-2013-3735": {
"verified": false,
"ranking_epss": 0.72065,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "The Zend Engine in PHP before 5.4.16 RC1, and 5.5.0 before RC2, does not properly determine whether a parser error occurred, which allows context-dependent attackers to cause a denial of service (memory consumption and application crash) via a crafted function definition, as demonstrated by an attack within a shared web-hosting environment. NOTE: the vendor's http://php.net/security-note.php page says \"for critical security situations you should be using OS-level security by running multiple web servers each as their own user id.",
"references": [
"https://bugs.php.net/bug.php?id=64660",
"https://github.com/php/php-src/blob/php-5.4.16RC1/NEWS",
"https://github.com/php/php-src/blob/php-5.5.0RC2/NEWS",
"https://github.com/php/php-src/commit/fb58e69a84f4fde603a630d2c9df2fa3be16d846",
"https://bugs.php.net/bug.php?id=64660",
"https://github.com/php/php-src/blob/php-5.4.16RC1/NEWS",
"https://github.com/php/php-src/blob/php-5.5.0RC2/NEWS",
"https://github.com/php/php-src/commit/fb58e69a84f4fde603a630d2c9df2fa3be16d846"
],
"epss": 0.00706,
"cvss": 7.5
},
"CVE-2024-24795": {
"verified": false,
"ranking_epss": 0.78197,
"cvss_v2": null,
"cvss_version": 3,
"summary": "HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack.\n\nUsers are recommended to upgrade to version 2.4.59, which fixes this issue.",
"references": [
"https://httpd.apache.org/security/vulnerabilities_24.html",
"http://seclists.org/fulldisclosure/2024/Jul/18",
"http://www.openwall.com/lists/oss-security/2024/04/04/5",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html",
"https://lists.debian.org/debian-lts-announce/2024/05/msg00014.html",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I2N2NZEX3MR64IWSGL3QGN7KSRUGAEMF/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LX5U34KYGDYPRH3AJ6MDDCBJDWDPXNVJ/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WNV4SZAPVS43DZWNFU7XBYYOZEZMI4ZC/",
"https://security.netapp.com/advisory/ntap-20240415-0013/",
"https://support.apple.com/kb/HT214119"
],
"epss": 0.01123,
"cvss": 6.3
},
"CVE-2022-31813": {
"verified": false,
"ranking_epss": 0.14669,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded-* headers to the origin server based on client side Connection header hop-by-hop mechanism. This may be used to bypass IP based authentication on the origin server/application.",
"references": [
"http://www.openwall.com/lists/oss-security/2022/06/08/8",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7QUGG2QZWHTITMABFLVXA4DNYUOTPWYQ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20220624-0005/",
"http://www.openwall.com/lists/oss-security/2022/06/08/8",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7QUGG2QZWHTITMABFLVXA4DNYUOTPWYQ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20220624-0005/"
],
"epss": 0.00047,
"cvss": 9.8
},
"CVE-2025-59775": {
"verified": false,
"ranking_epss": 0.17519,
"cvss_v2": null,
"cvss_version": 3,
"summary": "Server-Side Request Forgery (SSRF) vulnerability \n\n in Apache HTTP Server on Windows \n\nwith AllowEncodedSlashes On and MergeSlashes Off allows to potentially leak NTLM \nhashes to a malicious server via SSRF and malicious requests or content\n\nUsers are recommended to upgrade to version 2.4.66, which fixes the issue.",
"references": [
"https://httpd.apache.org/security/vulnerabilities_24.html",
"http://www.openwall.com/lists/oss-security/2025/12/04/6"
],
"epss": 0.00056,
"cvss": 7.5
},
"CVE-2014-3597": {
"verified": false,
"ranking_epss": 0.9024,
"cvss_v2": 6.8,
"cvss_version": 2,
"summary": "Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow remote DNS servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted DNS record, related to the dns_get_record function and the dn_expand function. NOTE: this issue exists because of an incomplete fix for CVE-2014-4049.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00024.html",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00055.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2014-1326.html",
"http://rhn.redhat.com/errata/RHSA-2014-1327.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/60609",
"http://secunia.com/advisories/60696",
"http://www.debian.org/security/2014/dsa-3008",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.securityfocus.com/bid/69322",
"http://www.ubuntu.com/usn/USN-2344-1",
"https://bugs.php.net/bug.php?id=67717",
"https://github.com/php/php-src/commit/2fefae47716d501aec41c1102f3fd4531f070b05",
"https://security-tracker.debian.org/tracker/CVE-2014-3597",
"https://support.apple.com/HT204659",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00024.html",
"http://lists.opensuse.org/opensuse-updates/2014-09/msg00055.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2014-1326.html",
"http://rhn.redhat.com/errata/RHSA-2014-1327.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://secunia.com/advisories/60609",
"http://secunia.com/advisories/60696",
"http://www.debian.org/security/2014/dsa-3008",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.securityfocus.com/bid/69322",
"http://www.ubuntu.com/usn/USN-2344-1",
"https://bugs.php.net/bug.php?id=67717",
"https://github.com/php/php-src/commit/2fefae47716d501aec41c1102f3fd4531f070b05",
"https://security-tracker.debian.org/tracker/CVE-2014-3597",
"https://support.apple.com/HT204659"
],
"epss": 0.05571,
"cvss": 6.8
},
"CVE-2014-9652": {
"verified": false,
"ranking_epss": 0.9046,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not properly handle a certain string-length field during a copy of a truncated version of a Pascal string, which might allow remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted file.",
"references": [
"http://bugs.gw.com/view.php?id=398",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00002.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00004.html",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://openwall.com/lists/oss-security/2015/02/05/12",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.securityfocus.com/bid/72505",
"https://bugs.php.net/bug.php?id=68735",
"https://bugs.php.net/patch-display.php?bug=68735&patch=bug68735.patch&revision=1420309079",
"https://github.com/file/file/commit/59e63838913eee47f5c120a6c53d4565af638158",
"https://security.gentoo.org/glsa/201701-42",
"https://support.apple.com/HT205267",
"http://bugs.gw.com/view.php?id=398",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00002.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00004.html",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://openwall.com/lists/oss-security/2015/02/05/12",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.securityfocus.com/bid/72505",
"https://bugs.php.net/bug.php?id=68735",
"https://bugs.php.net/patch-display.php?bug=68735&patch=bug68735.patch&revision=1420309079",
"https://github.com/file/file/commit/59e63838913eee47f5c120a6c53d4565af638158",
"https://security.gentoo.org/glsa/201701-42",
"https://support.apple.com/HT205267"
],
"epss": 0.05795,
"cvss": 5
},
"CVE-2014-9653": {
"verified": false,
"ranking_epss": 0.91289,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file.",
"references": [
"http://bugs.gw.com/view.php?id=409",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://mx.gw.com/pipermail/file/2014/001649.html",
"http://openwall.com/lists/oss-security/2015/02/05/13",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2016-0760.html",
"http://www.debian.org/security/2015/dsa-3196",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.securityfocus.com/bid/72516",
"https://github.com/file/file/commit/445c8fb0ebff85195be94cd9f7e1df89cade5c7f",
"https://security.gentoo.org/glsa/201701-42",
"https://usn.ubuntu.com/3686-1/",
"http://bugs.gw.com/view.php?id=409",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://mx.gw.com/pipermail/file/2014/001649.html",
"http://openwall.com/lists/oss-security/2015/02/05/13",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2016-0760.html",
"http://www.debian.org/security/2015/dsa-3196",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.securityfocus.com/bid/72516",
"https://github.com/file/file/commit/445c8fb0ebff85195be94cd9f7e1df89cade5c7f",
"https://security.gentoo.org/glsa/201701-42",
"https://usn.ubuntu.com/3686-1/"
],
"epss": 0.06827,
"cvss": 7.5
},
"CVE-2019-0220": {
"verified": false,
"ranking_epss": 0.95476,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes ('/'), directives such as LocationMatch and RewriteRule must account for duplicates in regular expressions while other aspects of the servers processing will implicitly collapse them.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html",
"http://www.openwall.com/lists/oss-security/2019/04/02/6",
"http://www.securityfocus.com/bid/107670",
"https://access.redhat.com/errata/RHSA-2019:2343",
"https://access.redhat.com/errata/RHSA-2019:3436",
"https://access.redhat.com/errata/RHSA-2019:4126",
"https://access.redhat.com/errata/RHSA-2020:0250",
"https://access.redhat.com/errata/RHSA-2020:0251",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r31f46d1f16ffcafa68058596b21f6eaf6d352290e522690a1cdccdd7%40%3Cbugs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re473305a65b4db888e3556e4dae10c2a04ee89dcff2e26ecdbd860a9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2019/04/msg00008.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ALIR5S3O7NRHEGFMIDMUSYQIZOE4TJJN/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZRMTEIGZKYFNGIDOTXN3GNEJTLVCYU7/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/",
"https://seclists.org/bugtraq/2019/Apr/5",
"https://security.netapp.com/advisory/ntap-20190625-0007/",
"https://support.f5.com/csp/article/K44591505",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03950en_us",
"https://usn.ubuntu.com/3937-1/",
"https://www.debian.org/security/2019/dsa-4422",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/security-alerts/cpujul2020.html",
"https://www.oracle.com/security-alerts/cpujul2022.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html",
"http://www.openwall.com/lists/oss-security/2019/04/02/6",
"http://www.securityfocus.com/bid/107670",
"https://access.redhat.com/errata/RHSA-2019:2343",
"https://access.redhat.com/errata/RHSA-2019:3436",
"https://access.redhat.com/errata/RHSA-2019:4126",
"https://access.redhat.com/errata/RHSA-2020:0250",
"https://access.redhat.com/errata/RHSA-2020:0251",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r31f46d1f16ffcafa68058596b21f6eaf6d352290e522690a1cdccdd7%40%3Cbugs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re473305a65b4db888e3556e4dae10c2a04ee89dcff2e26ecdbd860a9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2019/04/msg00008.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ALIR5S3O7NRHEGFMIDMUSYQIZOE4TJJN/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZRMTEIGZKYFNGIDOTXN3GNEJTLVCYU7/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/",
"https://seclists.org/bugtraq/2019/Apr/5",
"https://security.netapp.com/advisory/ntap-20190625-0007/",
"https://support.f5.com/csp/article/K44591505",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03950en_us",
"https://usn.ubuntu.com/3937-1/",
"https://www.debian.org/security/2019/dsa-4422",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/security-alerts/cpujul2020.html",
"https://www.oracle.com/security-alerts/cpujul2022.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
],
"epss": 0.20275,
"cvss": 5.3
},
"CVE-2013-7040": {
"verified": false,
"ranking_epss": 0.72485,
"cvss_v2": 4.3,
"cvss_version": 2,
"summary": "Python 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which causes it to compute hash values without restricting the ability to trigger hash collisions predictably and makes it easier for context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1150.",
"references": [
"http://bugs.python.org/issue14621",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://www.openwall.com/lists/oss-security/2013/12/09/13",
"http://www.openwall.com/lists/oss-security/2013/12/09/3",
"http://www.securityfocus.com/bid/64194",
"https://support.apple.com/kb/HT205031",
"http://bugs.python.org/issue14621",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://www.openwall.com/lists/oss-security/2013/12/09/13",
"http://www.openwall.com/lists/oss-security/2013/12/09/3",
"http://www.securityfocus.com/bid/64194",
"https://support.apple.com/kb/HT205031"
],
"epss": 0.00724,
"cvss": 4.3
},
"CVE-2019-9023": {
"verified": false,
"ranking_epss": 0.92124,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read instances are present in mbstring regular expression functions when supplied with invalid multibyte data. These occur in ext/mbstring/oniguruma/regcomp.c, ext/mbstring/oniguruma/regexec.c, ext/mbstring/oniguruma/regparse.c, ext/mbstring/oniguruma/enc/unicode.c, and ext/mbstring/oniguruma/src/utf32_be.c when a multibyte regular expression pattern contains invalid multibyte sequences.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html",
"http://www.securityfocus.com/bid/107156",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://access.redhat.com/errata/RHSA-2019:3299",
"https://bugs.php.net/bug.php?id=77370",
"https://bugs.php.net/bug.php?id=77371",
"https://bugs.php.net/bug.php?id=77381",
"https://bugs.php.net/bug.php?id=77382",
"https://bugs.php.net/bug.php?id=77385",
"https://bugs.php.net/bug.php?id=77394",
"https://bugs.php.net/bug.php?id=77418",
"https://security.netapp.com/advisory/ntap-20190321-0001/",
"https://support.f5.com/csp/article/K06372014",
"https://usn.ubuntu.com/3902-1/",
"https://usn.ubuntu.com/3902-2/",
"https://www.debian.org/security/2019/dsa-4398",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html",
"http://www.securityfocus.com/bid/107156",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://access.redhat.com/errata/RHSA-2019:3299",
"https://bugs.php.net/bug.php?id=77370",
"https://bugs.php.net/bug.php?id=77371",
"https://bugs.php.net/bug.php?id=77381",
"https://bugs.php.net/bug.php?id=77382",
"https://bugs.php.net/bug.php?id=77385",
"https://bugs.php.net/bug.php?id=77394",
"https://bugs.php.net/bug.php?id=77418",
"https://security.netapp.com/advisory/ntap-20190321-0001/",
"https://support.f5.com/csp/article/K06372014",
"https://usn.ubuntu.com/3902-1/",
"https://usn.ubuntu.com/3902-2/",
"https://www.debian.org/security/2019/dsa-4398"
],
"epss": 0.08114,
"cvss": 9.8
},
"CVE-2019-9020": {
"verified": false,
"ranking_epss": 0.84958,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html",
"http://www.securityfocus.com/bid/107156",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://access.redhat.com/errata/RHSA-2019:3299",
"https://bugs.php.net/bug.php?id=77242",
"https://bugs.php.net/bug.php?id=77249",
"https://security.netapp.com/advisory/ntap-20190321-0001/",
"https://usn.ubuntu.com/3902-1/",
"https://usn.ubuntu.com/3902-2/",
"https://www.debian.org/security/2019/dsa-4398",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html",
"http://www.securityfocus.com/bid/107156",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://access.redhat.com/errata/RHSA-2019:3299",
"https://bugs.php.net/bug.php?id=77242",
"https://bugs.php.net/bug.php?id=77249",
"https://security.netapp.com/advisory/ntap-20190321-0001/",
"https://usn.ubuntu.com/3902-1/",
"https://usn.ubuntu.com/3902-2/",
"https://www.debian.org/security/2019/dsa-4398"
],
"epss": 0.02394,
"cvss": 9.8
},
"CVE-2019-9021": {
"verified": false,
"ranking_epss": 0.96141,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse the file name, a different vulnerability than CVE-2018-20783. This is related to phar_detect_phar_fname_ext in ext/phar/phar.c.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html",
"http://www.securityfocus.com/bid/106747",
"http://www.securityfocus.com/bid/107156",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://access.redhat.com/errata/RHSA-2019:3299",
"https://bugs.php.net/bug.php?id=77247",
"https://security.netapp.com/advisory/ntap-20190321-0001/",
"https://usn.ubuntu.com/3902-1/",
"https://usn.ubuntu.com/3902-2/",
"https://www.debian.org/security/2019/dsa-4398",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html",
"http://www.securityfocus.com/bid/106747",
"http://www.securityfocus.com/bid/107156",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://access.redhat.com/errata/RHSA-2019:3299",
"https://bugs.php.net/bug.php?id=77247",
"https://security.netapp.com/advisory/ntap-20190321-0001/",
"https://usn.ubuntu.com/3902-1/",
"https://usn.ubuntu.com/3902-2/",
"https://www.debian.org/security/2019/dsa-4398"
],
"epss": 0.25106,
"cvss": 9.8
},
"CVE-2019-9024": {
"verified": false,
"ranking_epss": 0.94222,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpc_decode() can allow a hostile XMLRPC server to cause PHP to read memory outside of allocated areas in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html",
"http://www.securityfocus.com/bid/107156",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://access.redhat.com/errata/RHSA-2019:3299",
"https://bugs.php.net/bug.php?id=77380",
"https://security.netapp.com/advisory/ntap-20190321-0001/",
"https://usn.ubuntu.com/3902-1/",
"https://usn.ubuntu.com/3902-2/",
"https://www.debian.org/security/2019/dsa-4398",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html",
"http://www.securityfocus.com/bid/107156",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://access.redhat.com/errata/RHSA-2019:3299",
"https://bugs.php.net/bug.php?id=77380",
"https://security.netapp.com/advisory/ntap-20190321-0001/",
"https://usn.ubuntu.com/3902-1/",
"https://usn.ubuntu.com/3902-2/",
"https://www.debian.org/security/2019/dsa-4398"
],
"epss": 0.13719,
"cvss": 7.5
},
"CVE-2025-49812": {
"verified": false,
"ranking_epss": 0.32259,
"cvss_v2": null,
"cvss_version": 3,
"summary": "In some mod_ssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack allows a man-in-the-middle attacker to hijack an HTTP session via a TLS upgrade.\n\nOnly configurations using \"SSLEngine optional\" to enable TLS upgrades are affected. Users are recommended to upgrade to version 2.4.64, which removes support for TLS upgrade.",
"references": [
"https://httpd.apache.org/security/vulnerabilities_24.html",
"http://www.openwall.com/lists/oss-security/2025/07/09/3",
"http://www.openwall.com/lists/oss-security/2025/07/10/2",
"http://www.openwall.com/lists/oss-security/2025/07/10/9",
"https://lists.debian.org/debian-lts-announce/2025/08/msg00009.html"
],
"epss": 0.00129,
"cvss": 7.4
},
"CVE-2017-9233": {
"verified": false,
"ranking_epss": 0.4849,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.",
"references": [
"http://www.debian.org/security/2017/dsa-3898",
"http://www.openwall.com/lists/oss-security/2017/06/17/7",
"http://www.securityfocus.com/bid/99276",
"http://www.securitytracker.com/id/1039427",
"https://github.com/libexpat/libexpat/blob/master/expat/Changes",
"https://libexpat.github.io/doc/cve-2017-9233/",
"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
"https://support.apple.com/HT208112",
"https://support.apple.com/HT208113",
"https://support.apple.com/HT208115",
"https://support.apple.com/HT208144",
"https://support.f5.com/csp/article/K03244804",
"http://www.debian.org/security/2017/dsa-3898",
"http://www.openwall.com/lists/oss-security/2017/06/17/7",
"http://www.securityfocus.com/bid/99276",
"http://www.securitytracker.com/id/1039427",
"https://github.com/libexpat/libexpat/blob/master/expat/Changes",
"https://libexpat.github.io/doc/cve-2017-9233/",
"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
"https://support.apple.com/HT208112",
"https://support.apple.com/HT208113",
"https://support.apple.com/HT208115",
"https://support.apple.com/HT208144",
"https://support.f5.com/csp/article/K03244804"
],
"epss": 0.00252,
"cvss": 7.5
},
"CVE-2016-6291": {
"verified": false,
"ranking_epss": 0.91082,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The exif_process_IFD_in_MAKERNOTE function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds array access and memory corruption), obtain sensitive information from process memory, or possibly have unspecified other impact via a crafted JPEG image.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=eebcbd5de38a0f1c2876035402cb770e37476519",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://openwall.com/lists/oss-security/2016/07/24/2",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3631",
"http://www.securityfocus.com/bid/92073",
"http://www.securitytracker.com/id/1036430",
"https://bugs.php.net/72603",
"https://security.gentoo.org/glsa/201611-22",
"https://support.apple.com/HT207170",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=eebcbd5de38a0f1c2876035402cb770e37476519",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://openwall.com/lists/oss-security/2016/07/24/2",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3631",
"http://www.securityfocus.com/bid/92073",
"http://www.securitytracker.com/id/1036430",
"https://bugs.php.net/72603",
"https://security.gentoo.org/glsa/201611-22",
"https://support.apple.com/HT207170"
],
"epss": 0.06548,
"cvss": 9.8
},
"CVE-2016-6290": {
"verified": false,
"ranking_epss": 0.92303,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "ext/session/session.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly maintain a certain hash data structure, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors related to session deserialization.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=3798eb6fd5dddb211b01d41495072fd9858d4e32",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://openwall.com/lists/oss-security/2016/07/24/2",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3631",
"http://www.securityfocus.com/bid/92097",
"http://www.securitytracker.com/id/1036430",
"https://bugs.php.net/72562",
"https://security.gentoo.org/glsa/201611-22",
"https://support.apple.com/HT207170",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=3798eb6fd5dddb211b01d41495072fd9858d4e32",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://openwall.com/lists/oss-security/2016/07/24/2",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3631",
"http://www.securityfocus.com/bid/92097",
"http://www.securitytracker.com/id/1036430",
"https://bugs.php.net/72562",
"https://security.gentoo.org/glsa/201611-22",
"https://support.apple.com/HT207170"
],
"epss": 0.08435,
"cvss": 9.8
},
"CVE-2016-6292": {
"verified": false,
"ranking_epss": 0.90811,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "The exif_process_user_comment function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted JPEG image.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=41131cd41d2fd2e0c2f332a27988df75659c42e4",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://openwall.com/lists/oss-security/2016/07/24/2",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3631",
"http://www.securityfocus.com/bid/92078",
"http://www.securitytracker.com/id/1036430",
"https://bugs.php.net/72618",
"https://security.gentoo.org/glsa/201611-22",
"https://support.apple.com/HT207170",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=41131cd41d2fd2e0c2f332a27988df75659c42e4",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://openwall.com/lists/oss-security/2016/07/24/2",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3631",
"http://www.securityfocus.com/bid/92078",
"http://www.securitytracker.com/id/1036430",
"https://bugs.php.net/72618",
"https://security.gentoo.org/glsa/201611-22",
"https://support.apple.com/HT207170"
],
"epss": 0.06201,
"cvss": 6.5
},
"CVE-2016-6295": {
"verified": false,
"ranking_epss": 0.89809,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "ext/snmp/snmp.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via crafted serialized data, a related issue to CVE-2016-5773.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=cab1c3b3708eead315e033359d07049b23b147a3",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://openwall.com/lists/oss-security/2016/07/24/2",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3631",
"http://www.securityfocus.com/bid/92094",
"http://www.securitytracker.com/id/1036430",
"https://bugs.php.net/72479",
"https://security.gentoo.org/glsa/201611-22",
"https://support.apple.com/HT207170",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=cab1c3b3708eead315e033359d07049b23b147a3",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://openwall.com/lists/oss-security/2016/07/24/2",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3631",
"http://www.securityfocus.com/bid/92094",
"http://www.securitytracker.com/id/1036430",
"https://bugs.php.net/72479",
"https://security.gentoo.org/glsa/201611-22",
"https://support.apple.com/HT207170"
],
"epss": 0.05124,
"cvss": 9.8
},
"CVE-2016-6294": {
"verified": false,
"ranking_epss": 0.90777,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The locale_accept_from_http function in ext/intl/locale/locale_methods.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly restrict calls to the ICU uloc_acceptLanguageFromHTTP function, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a call with a long argument.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=aa82e99ed8003c01f1ef4f0940e56b85c5b032d4",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://openwall.com/lists/oss-security/2016/07/24/2",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3631",
"http://www.securityfocus.com/bid/92115",
"http://www.securitytracker.com/id/1036430",
"https://bugs.php.net/72533",
"https://security.gentoo.org/glsa/201611-22",
"https://support.apple.com/HT207170",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=aa82e99ed8003c01f1ef4f0940e56b85c5b032d4",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://openwall.com/lists/oss-security/2016/07/24/2",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3631",
"http://www.securityfocus.com/bid/92115",
"http://www.securitytracker.com/id/1036430",
"https://bugs.php.net/72533",
"https://security.gentoo.org/glsa/201611-22",
"https://support.apple.com/HT207170"
],
"epss": 0.06163,
"cvss": 9.8
},
"CVE-2016-6297": {
"verified": false,
"ranking_epss": 0.90859,
"cvss_v2": 6.8,
"cvss_version": 3,
"summary": "Integer overflow in the php_stream_zip_opener function in ext/zip/zip_stream.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted zip:// URL.",
"references": [
"http://fortiguard.com/advisory/fortinet-discovers-php-stack-based-buffer-overflow-vulnerabilities",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=81406c0c1d45f75fcc7972ed974d2597abb0b9e9",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://openwall.com/lists/oss-security/2016/07/24/2",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3631",
"http://www.securityfocus.com/bid/92099",
"http://www.securitytracker.com/id/1036430",
"https://bugs.php.net/72520",
"https://security.gentoo.org/glsa/201611-22",
"https://support.apple.com/HT207170",
"http://fortiguard.com/advisory/fortinet-discovers-php-stack-based-buffer-overflow-vulnerabilities",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=81406c0c1d45f75fcc7972ed974d2597abb0b9e9",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://openwall.com/lists/oss-security/2016/07/24/2",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3631",
"http://www.securityfocus.com/bid/92099",
"http://www.securitytracker.com/id/1036430",
"https://bugs.php.net/72520",
"https://security.gentoo.org/glsa/201611-22",
"https://support.apple.com/HT207170"
],
"epss": 0.06254,
"cvss": 8.8
},
"CVE-2016-6296": {
"verified": false,
"ranking_epss": 0.94037,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "Integer signedness error in the simplestring_addn function in simplestring.c in xmlrpc-epi through 0.54.2, as used in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a long first argument to the PHP xmlrpc_encode_request function.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=e6c48213c22ed50b2b987b479fcc1ac709394caa",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://openwall.com/lists/oss-security/2016/07/24/2",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3631",
"http://www.securityfocus.com/bid/92095",
"http://www.securitytracker.com/id/1036430",
"http://www.ubuntu.com/usn/USN-3059-1",
"https://bugs.php.net/72606",
"https://lists.debian.org/debian-lts-announce/2019/11/msg00029.html",
"https://security.gentoo.org/glsa/201611-22",
"https://support.apple.com/HT207170",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=e6c48213c22ed50b2b987b479fcc1ac709394caa",
"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html",
"http://openwall.com/lists/oss-security/2016/07/24/2",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.debian.org/security/2016/dsa-3631",
"http://www.securityfocus.com/bid/92095",
"http://www.securitytracker.com/id/1036430",
"http://www.ubuntu.com/usn/USN-3059-1",
"https://bugs.php.net/72606",
"https://lists.debian.org/debian-lts-announce/2019/11/msg00029.html",
"https://security.gentoo.org/glsa/201611-22",
"https://support.apple.com/HT207170"
],
"epss": 0.13001,
"cvss": 9.8
},
"CVE-2018-1312": {
"verified": false,
"ranking_epss": 0.91618,
"cvss_v2": 6.8,
"cvss_version": 3,
"summary": "In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random seed. In a cluster of servers using a common Digest authentication configuration, HTTP requests could be replayed across servers by an attacker without detection.",
"references": [
"http://www.openwall.com/lists/oss-security/2018/03/24/7",
"http://www.securityfocus.com/bid/103524",
"http://www.securitytracker.com/id/1040571",
"https://access.redhat.com/errata/RHSA-2018:3558",
"https://access.redhat.com/errata/RHSA-2019:0366",
"https://access.redhat.com/errata/RHSA-2019:0367",
"https://access.redhat.com/errata/RHSA-2019:1898",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re473305a65b4db888e3556e4dae10c2a04ee89dcff2e26ecdbd860a9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2018/05/msg00020.html",
"https://security.netapp.com/advisory/ntap-20180601-0004/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",
"https://usn.ubuntu.com/3627-1/",
"https://usn.ubuntu.com/3627-2/",
"https://usn.ubuntu.com/3937-2/",
"https://www.debian.org/security/2018/dsa-4164",
"https://www.tenable.com/security/tns-2019-09",
"http://www.openwall.com/lists/oss-security/2018/03/24/7",
"http://www.securityfocus.com/bid/103524",
"http://www.securitytracker.com/id/1040571",
"https://access.redhat.com/errata/RHSA-2018:3558",
"https://access.redhat.com/errata/RHSA-2019:0366",
"https://access.redhat.com/errata/RHSA-2019:0367",
"https://access.redhat.com/errata/RHSA-2019:1898",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re473305a65b4db888e3556e4dae10c2a04ee89dcff2e26ecdbd860a9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2018/05/msg00020.html",
"https://security.netapp.com/advisory/ntap-20180601-0004/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",
"https://usn.ubuntu.com/3627-1/",
"https://usn.ubuntu.com/3627-2/",
"https://usn.ubuntu.com/3937-2/",
"https://www.debian.org/security/2018/dsa-4164",
"https://www.tenable.com/security/tns-2019-09"
],
"epss": 0.0728,
"cvss": 9.8
},
"CVE-2024-43394": {
"verified": false,
"ranking_epss": 0.15516,
"cvss_v2": null,
"cvss_version": 3,
"summary": "Server-Side Request Forgery (SSRF) in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via \nmod_rewrite or apache expressions that pass unvalidated request input.\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.63.\n\nNote: The Apache HTTP Server Project will be setting a higher bar for accepting vulnerability reports regarding SSRF via UNC paths. \n\nThe server offers limited protection against administrators directing the server to open UNC paths.\nWindows servers should limit the hosts they will connect over via SMB based on the nature of NTLM authentication.",
"references": [
"https://httpd.apache.org/security/vulnerabilities_24.html",
"http://www.openwall.com/lists/oss-security/2025/07/10/2",
"http://www.openwall.com/lists/oss-security/2025/07/10/5",
"https://lists.debian.org/debian-lts-announce/2025/08/msg00009.html"
],
"epss": 0.0005,
"cvss": 7.5
},
"CVE-2023-24329": {
"verified": false,
"ranking_epss": 0.8156,
"cvss_v2": null,
"cvss_version": 3,
"summary": "An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.",
"references": [
"https://github.com/python/cpython/issues/102153",
"https://github.com/python/cpython/pull/99421",
"https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6PEVICI7YNGGMSL3UCMWGE66QFLATH72/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DSL6NSOAXWBJJ67XPLSSC74MNKZF3BBO/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EM2XLZSTXG44TMFXF4E6VTGKR2MQCW3G/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F2NY75GFDZ5T6YPN44D3VMFT5SUVTOTG/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GR5US3BYILYJ4SKBV6YBNPRUBAL5P2CN/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H23OSKC6UG6IWOQAUPW74YUHWRWVXJP7/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZTLGV2HYFF4AMYJL25VDIGAIHCU7UPA/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LWC4WGXER5P6Q75RFGL7QUTPP3N5JR7T/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZEHSXSCMA4WWQKXT6QV7AAR6SWNZ2VP/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O5SP4RT3RRS434ZS2HQKQJ3VZW7YPKYR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OHHJHJRLEF3TDT2K3676CAUVRDD4CCMR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PEUN6T22UJFXR7J5F6UUHCXXPKJ2DVHI/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PURM5CFDABEWAIWZFD2MQ7ZJGCPYSQ44/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q3J5N24ECS4B6MJDRO6UAYU6GPLYBDCL/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QRQHN7RWJQJHYP6E5EKESOYP5VDSHZG4/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RA2MBEEES6L46OD64OBSVUUMGKNGMOWW/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4IDB5OAR5Y4UK3HLMZBW4WEL2B7YFMJ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TZH26JGNZ5XYPZ5SAU3NKSBSPRE5OHTG/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U2MZOJYGFCB5PPT6AKMAU72N7QOYWLBP/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UONZWLB4QVLQIY5CPDLEUEKH6WX4VQMC/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTOAUJNDWZDRWVSXJ354AYZYKRMT56HU/",
"https://pointernull.com/security/python-url-parse-problem.html",
"https://security.netapp.com/advisory/ntap-20230324-0004/",
"https://www.kb.cert.org/vuls/id/127587",
"https://github.com/python/cpython/issues/102153",
"https://github.com/python/cpython/pull/99421",
"https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2024/11/msg00005.html",
"https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6PEVICI7YNGGMSL3UCMWGE66QFLATH72/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DSL6NSOAXWBJJ67XPLSSC74MNKZF3BBO/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EM2XLZSTXG44TMFXF4E6VTGKR2MQCW3G/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F2NY75GFDZ5T6YPN44D3VMFT5SUVTOTG/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GR5US3BYILYJ4SKBV6YBNPRUBAL5P2CN/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H23OSKC6UG6IWOQAUPW74YUHWRWVXJP7/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZTLGV2HYFF4AMYJL25VDIGAIHCU7UPA/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LWC4WGXER5P6Q75RFGL7QUTPP3N5JR7T/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZEHSXSCMA4WWQKXT6QV7AAR6SWNZ2VP/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O5SP4RT3RRS434ZS2HQKQJ3VZW7YPKYR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OHHJHJRLEF3TDT2K3676CAUVRDD4CCMR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PEUN6T22UJFXR7J5F6UUHCXXPKJ2DVHI/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PURM5CFDABEWAIWZFD2MQ7ZJGCPYSQ44/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q3J5N24ECS4B6MJDRO6UAYU6GPLYBDCL/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QRQHN7RWJQJHYP6E5EKESOYP5VDSHZG4/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RA2MBEEES6L46OD64OBSVUUMGKNGMOWW/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4IDB5OAR5Y4UK3HLMZBW4WEL2B7YFMJ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TZH26JGNZ5XYPZ5SAU3NKSBSPRE5OHTG/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U2MZOJYGFCB5PPT6AKMAU72N7QOYWLBP/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UONZWLB4QVLQIY5CPDLEUEKH6WX4VQMC/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTOAUJNDWZDRWVSXJ354AYZYKRMT56HU/",
"https://pointernull.com/security/python-url-parse-problem.html",
"https://security.netapp.com/advisory/ntap-20230324-0004/",
"https://www.kb.cert.org/vuls/id/127587"
],
"epss": 0.0159,
"cvss": 7.5
},
"CVE-2015-0273": {
"verified": false,
"ranking_epss": 0.98698,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZone data handled by the php_date_timezone_initialize_from_hash function or (b) DateTime data handled by the php_date_initialize_from_hash function.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=71335e6ebabc1b12c057d8017fd811892ecdfd24",
"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html",
"http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00002.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00004.html",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://support.apple.com/kb/HT204942",
"http://www.debian.org/security/2015/dsa-3195",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:079",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/72701",
"http://www.securitytracker.com/id/1031945",
"http://www.ubuntu.com/usn/USN-2535-1",
"https://bugs.php.net/bug.php?id=68942",
"https://bugzilla.redhat.com/show_bug.cgi?id=1194730",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205267",
"https://support.apple.com/HT205375",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=71335e6ebabc1b12c057d8017fd811892ecdfd24",
"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html",
"http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00002.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html",
"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00004.html",
"http://marc.info/?l=bugtraq&m=143403519711434&w=2",
"http://marc.info/?l=bugtraq&m=143748090628601&w=2",
"http://marc.info/?l=bugtraq&m=144050155601375&w=2",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2015-1053.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://support.apple.com/kb/HT204942",
"http://www.debian.org/security/2015/dsa-3195",
"http://www.mandriva.com/security/advisories?name=MDVSA-2015:079",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/72701",
"http://www.securitytracker.com/id/1031945",
"http://www.ubuntu.com/usn/USN-2535-1",
"https://bugs.php.net/bug.php?id=68942",
"https://bugzilla.redhat.com/show_bug.cgi?id=1194730",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205267",
"https://support.apple.com/HT205375"
],
"epss": 0.7115,
"cvss": 7.5
},
"CVE-2018-7584": {
"verified": false,
"ranking_epss": 0.99248,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the php_stream_url_wrap_http_ex function in ext/standard/http_fopen_wrapper.c. This subsequently results in copying a large string.",
"references": [
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/103204",
"http://www.securitytracker.com/id/1041607",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://bugs.php.net/bug.php?id=75981",
"https://github.com/php/php-src/commit/523f230c831d7b33353203fa34aee4e92ac12bba",
"https://lists.debian.org/debian-lts-announce/2018/03/msg00030.html",
"https://lists.debian.org/debian-lts-announce/2018/06/msg00005.html",
"https://usn.ubuntu.com/3600-1/",
"https://usn.ubuntu.com/3600-2/",
"https://www.debian.org/security/2018/dsa-4240",
"https://www.exploit-db.com/exploits/44846/",
"https://www.tenable.com/security/tns-2018-03",
"https://www.tenable.com/security/tns-2018-12",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/103204",
"http://www.securitytracker.com/id/1041607",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://bugs.php.net/bug.php?id=75981",
"https://github.com/php/php-src/commit/523f230c831d7b33353203fa34aee4e92ac12bba",
"https://lists.debian.org/debian-lts-announce/2018/03/msg00030.html",
"https://lists.debian.org/debian-lts-announce/2018/06/msg00005.html",
"https://usn.ubuntu.com/3600-1/",
"https://usn.ubuntu.com/3600-2/",
"https://www.debian.org/security/2018/dsa-4240",
"https://www.exploit-db.com/exploits/44846/",
"https://www.tenable.com/security/tns-2018-03",
"https://www.tenable.com/security/tns-2018-12"
],
"epss": 0.83066,
"cvss": 9.8
},
"CVE-2016-10397": {
"verified": false,
"ranking_epss": 0.60648,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "In PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the URL parser could be used by attackers to bypass hostname-specific URL checks, as demonstrated by evil.example.com:80#@good.example.com/ and evil.example.com:80?@good.example.com/ inputs to the parse_url function (implemented in the php_url_parse_ex function in ext/standard/url.c).",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=b061fa909de77085d3822a89ab901b934d0362c4",
"http://openwall.com/lists/oss-security/2017/07/10/6",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/99552",
"https://bugs.php.net/bug.php?id=73192",
"https://security.netapp.com/advisory/ntap-20180112-0001/",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=b061fa909de77085d3822a89ab901b934d0362c4",
"http://openwall.com/lists/oss-security/2017/07/10/6",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/99552",
"https://bugs.php.net/bug.php?id=73192",
"https://security.netapp.com/advisory/ntap-20180112-0001/"
],
"epss": 0.00402,
"cvss": 7.5
},
"CVE-2014-3669": {
"verified": false,
"ranking_epss": 0.98469,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "Integer overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an argument to the unserialize function that triggers calculation of a large length value.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=56754a7f9eba0e4f559b6ca081d9f2a447b3f159",
"http://linux.oracle.com/errata/ELSA-2014-1767.html",
"http://linux.oracle.com/errata/ELSA-2014-1768.html",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-11/msg00024.html",
"http://lists.opensuse.org/opensuse-updates/2014-11/msg00034.html",
"http://lists.opensuse.org/opensuse-updates/2015-01/msg00006.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://rhn.redhat.com/errata/RHSA-2014-1767.html",
"http://rhn.redhat.com/errata/RHSA-2014-1768.html",
"http://rhn.redhat.com/errata/RHSA-2014-1824.html",
"http://secunia.com/advisories/59967",
"http://secunia.com/advisories/60630",
"http://secunia.com/advisories/60699",
"http://secunia.com/advisories/61763",
"http://secunia.com/advisories/61970",
"http://secunia.com/advisories/61982",
"http://www.debian.org/security/2014/dsa-3064",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.securityfocus.com/bid/70611",
"http://www.ubuntu.com/usn/USN-2391-1",
"https://bugs.php.net/bug.php?id=68044",
"https://bugzilla.redhat.com/show_bug.cgi?id=1154500",
"https://support.apple.com/HT204659",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=56754a7f9eba0e4f559b6ca081d9f2a447b3f159",
"http://linux.oracle.com/errata/ELSA-2014-1767.html",
"http://linux.oracle.com/errata/ELSA-2014-1768.html",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-11/msg00024.html",
"http://lists.opensuse.org/opensuse-updates/2014-11/msg00034.html",
"http://lists.opensuse.org/opensuse-updates/2015-01/msg00006.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://rhn.redhat.com/errata/RHSA-2014-1767.html",
"http://rhn.redhat.com/errata/RHSA-2014-1768.html",
"http://rhn.redhat.com/errata/RHSA-2014-1824.html",
"http://secunia.com/advisories/59967",
"http://secunia.com/advisories/60630",
"http://secunia.com/advisories/60699",
"http://secunia.com/advisories/61763",
"http://secunia.com/advisories/61970",
"http://secunia.com/advisories/61982",
"http://www.debian.org/security/2014/dsa-3064",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.securityfocus.com/bid/70611",
"http://www.ubuntu.com/usn/USN-2391-1",
"https://bugs.php.net/bug.php?id=68044",
"https://bugzilla.redhat.com/show_bug.cgi?id=1154500",
"https://support.apple.com/HT204659"
],
"epss": 0.65246,
"cvss": 7.5
},
"CVE-2014-3668": {
"verified": false,
"ranking_epss": 0.77653,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "Buffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc/xmlrpc.c in the XMLRPC extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to cause a denial of service (application crash) via (1) a crafted first argument to the xmlrpc_set_type function or (2) a crafted argument to the xmlrpc_decode function, related to an out-of-bounds read operation.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=88412772d295ebf7dd34409534507dc9bcac726e",
"http://linux.oracle.com/errata/ELSA-2014-1767.html",
"http://linux.oracle.com/errata/ELSA-2014-1768.html",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-11/msg00024.html",
"http://lists.opensuse.org/opensuse-updates/2014-11/msg00034.html",
"http://lists.opensuse.org/opensuse-updates/2015-01/msg00006.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://rhn.redhat.com/errata/RHSA-2014-1767.html",
"http://rhn.redhat.com/errata/RHSA-2014-1768.html",
"http://secunia.com/advisories/59967",
"http://secunia.com/advisories/60630",
"http://secunia.com/advisories/60699",
"http://secunia.com/advisories/61763",
"http://secunia.com/advisories/61970",
"http://secunia.com/advisories/61982",
"http://www.debian.org/security/2014/dsa-3064",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.securityfocus.com/bid/70666",
"http://www.ubuntu.com/usn/USN-2391-1",
"https://bugs.php.net/bug.php?id=68027",
"https://bugzilla.redhat.com/show_bug.cgi?id=1154503",
"https://support.apple.com/HT204659",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=88412772d295ebf7dd34409534507dc9bcac726e",
"http://linux.oracle.com/errata/ELSA-2014-1767.html",
"http://linux.oracle.com/errata/ELSA-2014-1768.html",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-11/msg00024.html",
"http://lists.opensuse.org/opensuse-updates/2014-11/msg00034.html",
"http://lists.opensuse.org/opensuse-updates/2015-01/msg00006.html",
"http://php.net/ChangeLog-5.php",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://rhn.redhat.com/errata/RHSA-2014-1767.html",
"http://rhn.redhat.com/errata/RHSA-2014-1768.html",
"http://secunia.com/advisories/59967",
"http://secunia.com/advisories/60630",
"http://secunia.com/advisories/60699",
"http://secunia.com/advisories/61763",
"http://secunia.com/advisories/61970",
"http://secunia.com/advisories/61982",
"http://www.debian.org/security/2014/dsa-3064",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.securityfocus.com/bid/70666",
"http://www.ubuntu.com/usn/USN-2391-1",
"https://bugs.php.net/bug.php?id=68027",
"https://bugzilla.redhat.com/show_bug.cgi?id=1154503",
"https://support.apple.com/HT204659"
],
"epss": 0.0107,
"cvss": 5
},
"CVE-2019-10092": {
"verified": false,
"ranking_epss": 0.99215,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This would only be exploitable where a server was set up with proxying enabled but was misconfigured in such a way that the Proxy Error page was displayed.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00004.html",
"http://www.openwall.com/lists/oss-security/2019/08/15/4",
"http://www.openwall.com/lists/oss-security/2020/08/08/1",
"http://www.openwall.com/lists/oss-security/2020/08/08/9",
"https://access.redhat.com/errata/RHSA-2019:4126",
"https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-10092-Limited%20Cross-Site%20Scripting%20in%20mod_proxy%20Error%20Page-Apache%20httpd",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/73768e31e0fcae03e12f5aa87da1cb26dece39327f3c32060baa3e94%40%3Cannounce.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r0a83b112cd9701ef8a2061c8ed557f3dc9bb774d4da69fbb91bbc3c4%40%3Cusers.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r3c5c3104813c1c5508b55564b66546933079250a46ce50eee90b2e36%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2019/08/msg00034.html",
"https://lists.debian.org/debian-lts-announce/2019/09/msg00034.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7RVHJHTU4JN3ULCQ44F2G6LZBF2LGNTC/",
"https://seclists.org/bugtraq/2019/Aug/47",
"https://seclists.org/bugtraq/2019/Oct/24",
"https://security.gentoo.org/glsa/201909-04",
"https://security.netapp.com/advisory/ntap-20190905-0003/",
"https://support.f5.com/csp/article/K30442259",
"https://usn.ubuntu.com/4113-1/",
"https://www.debian.org/security/2019/dsa-4509",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/security-alerts/cpujan2020.html",
"https://www.oracle.com/security-alerts/cpujul2020.html",
"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00004.html",
"http://www.openwall.com/lists/oss-security/2019/08/15/4",
"http://www.openwall.com/lists/oss-security/2020/08/08/1",
"http://www.openwall.com/lists/oss-security/2020/08/08/9",
"https://access.redhat.com/errata/RHSA-2019:4126",
"https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-10092-Limited%20Cross-Site%20Scripting%20in%20mod_proxy%20Error%20Page-Apache%20httpd",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/73768e31e0fcae03e12f5aa87da1cb26dece39327f3c32060baa3e94%40%3Cannounce.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r0a83b112cd9701ef8a2061c8ed557f3dc9bb774d4da69fbb91bbc3c4%40%3Cusers.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r3c5c3104813c1c5508b55564b66546933079250a46ce50eee90b2e36%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2019/08/msg00034.html",
"https://lists.debian.org/debian-lts-announce/2019/09/msg00034.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7RVHJHTU4JN3ULCQ44F2G6LZBF2LGNTC/",
"https://seclists.org/bugtraq/2019/Aug/47",
"https://seclists.org/bugtraq/2019/Oct/24",
"https://security.gentoo.org/glsa/201909-04",
"https://security.netapp.com/advisory/ntap-20190905-0003/",
"https://support.f5.com/csp/article/K30442259",
"https://usn.ubuntu.com/4113-1/",
"https://www.debian.org/security/2019/dsa-4509",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/security-alerts/cpujan2020.html",
"https://www.oracle.com/security-alerts/cpujul2020.html",
"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
],
"epss": 0.82379,
"cvss": 6.1
},
"CVE-2021-3712": {
"verified": false,
"ranking_epss": 0.61367,
"cvss_v2": 5.8,
"cvss_version": 3,
"summary": "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
"references": [
"http://www.openwall.com/lists/oss-security/2021/08/26/2",
"https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf",
"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10366",
"https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E",
"https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html",
"https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html",
"https://security.gentoo.org/glsa/202209-02",
"https://security.gentoo.org/glsa/202210-02",
"https://security.netapp.com/advisory/ntap-20210827-0010/",
"https://security.netapp.com/advisory/ntap-20240621-0006/",
"https://www.debian.org/security/2021/dsa-4963",
"https://www.openssl.org/news/secadv/20210824.txt",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujan2022.html",
"https://www.oracle.com/security-alerts/cpuoct2021.html",
"https://www.tenable.com/security/tns-2021-16",
"https://www.tenable.com/security/tns-2022-02",
"http://www.openwall.com/lists/oss-security/2021/08/26/2",
"https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf",
"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10366",
"https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E",
"https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html",
"https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html",
"https://security.gentoo.org/glsa/202209-02",
"https://security.gentoo.org/glsa/202210-02",
"https://security.netapp.com/advisory/ntap-20210827-0010/",
"https://security.netapp.com/advisory/ntap-20240621-0006/",
"https://www.debian.org/security/2021/dsa-4963",
"https://www.openssl.org/news/secadv/20210824.txt",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujan2022.html",
"https://www.oracle.com/security-alerts/cpuoct2021.html",
"https://www.tenable.com/security/tns-2021-16",
"https://www.tenable.com/security/tns-2022-02"
],
"epss": 0.00413,
"cvss": 7.4
},
"CVE-2023-0464": {
"verified": false,
"ranking_epss": 0.7492,
"cvss_v2": null,
"cvss_version": 3,
"summary": "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints. Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
"references": [
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1",
"https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html",
"https://security.gentoo.org/glsa/202402-08",
"https://security.netapp.com/advisory/ntap-20240621-0006/",
"https://www.couchbase.com/alerts/",
"https://www.debian.org/security/2023/dsa-5417",
"https://www.openssl.org/news/secadv/20230322.txt",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1",
"https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html",
"https://security.gentoo.org/glsa/202402-08",
"https://security.netapp.com/advisory/ntap-20230406-0006/",
"https://security.netapp.com/advisory/ntap-20240621-0006/",
"https://www.couchbase.com/alerts/",
"https://www.debian.org/security/2023/dsa-5417",
"https://www.openssl.org/news/secadv/20230322.txt"
],
"epss": 0.00857,
"cvss": 7.5
},
"CVE-2023-0465": {
"verified": false,
"ranking_epss": 0.63481,
"cvss_v2": null,
"cvss_version": 3,
"summary": "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.",
"references": [
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c",
"https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html",
"https://security.gentoo.org/glsa/202402-08",
"https://security.netapp.com/advisory/ntap-20230414-0001/",
"https://www.debian.org/security/2023/dsa-5417",
"https://www.openssl.org/news/secadv/20230328.txt",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c",
"https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html",
"https://security.gentoo.org/glsa/202402-08",
"https://security.netapp.com/advisory/ntap-20230414-0001/",
"https://www.debian.org/security/2023/dsa-5417",
"https://www.openssl.org/news/secadv/20230328.txt"
],
"epss": 0.00449,
"cvss": 5.3
},
"CVE-2023-0466": {
"verified": false,
"ranking_epss": 0.72182,
"cvss_v2": null,
"cvss_version": 3,
"summary": "The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications.",
"references": [
"http://www.openwall.com/lists/oss-security/2023/09/28/4",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061",
"https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html",
"https://security.gentoo.org/glsa/202402-08",
"https://security.netapp.com/advisory/ntap-20230414-0001/",
"https://www.debian.org/security/2023/dsa-5417",
"https://www.openssl.org/news/secadv/20230328.txt",
"http://www.openwall.com/lists/oss-security/2023/09/28/4",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72",
"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061",
"https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html",
"https://security.gentoo.org/glsa/202402-08",
"https://security.netapp.com/advisory/ntap-20230414-0001/",
"https://www.debian.org/security/2023/dsa-5417",
"https://www.openssl.org/news/secadv/20230328.txt"
],
"epss": 0.00711,
"cvss": 5.3
},
"CVE-2015-3307": {
"verified": false,
"ranking_epss": 0.95193,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "The phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (heap metadata corruption) or possibly have unspecified other impact via a crafted tar archive.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/74703",
"https://bugs.php.net/bug.php?id=69443",
"https://bugzilla.redhat.com/show_bug.cgi?id=1223441",
"https://support.apple.com/kb/HT205031",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://rhn.redhat.com/errata/RHSA-2015-1066.html",
"http://rhn.redhat.com/errata/RHSA-2015-1135.html",
"http://rhn.redhat.com/errata/RHSA-2015-1186.html",
"http://rhn.redhat.com/errata/RHSA-2015-1187.html",
"http://rhn.redhat.com/errata/RHSA-2015-1218.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/74703",
"https://bugs.php.net/bug.php?id=69443",
"https://bugzilla.redhat.com/show_bug.cgi?id=1223441",
"https://support.apple.com/kb/HT205031"
],
"epss": 0.18407,
"cvss": 7.5
},
"CVE-2021-40438": {
"verified": false,
"ransomware_campaign": "Unknown",
"ranking_epss": 0.99985,
"cvss_v2": 6.8,
"cvss_version": 3,
"summary": "A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.",
"references": [
"https://cert-portal.siemens.com/productcert/pdf/ssa-685781.pdf",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/r210807d0bb55f4aa6fbe1512be6bcc4dacd64e84940429fba329967a%40%3Cusers.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r2eb200ac1340f69aa22af61ab34780c531d110437910cb9c0ece3b37%40%3Cbugs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r3925e167d5eb1c75def3750c155d753064e1d34a143028bb32910432%40%3Cusers.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r61fdbfc26ab170f4e6492ef3bd5197c20b862ce156e9d5a54d4b899c%40%3Cusers.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r82838efc5fa6fc4c73986399c9b71573589f78b31846aff5bd9b1697%40%3Cusers.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r82c077663f9759c7df5a6656f925b3ee4f55fcd33c889ba7cd687029%40%3Cusers.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6954e60b1c8e480678ce3d02f61b8a788997785652e9557a3265c00%40%3Cusers.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2021/10/msg00001.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20211008-0004/",
"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQ",
"https://www.debian.org/security/2021/dsa-4982",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujan2022.html",
"https://www.tenable.com/security/tns-2021-17",
"https://cert-portal.siemens.com/productcert/pdf/ssa-685781.pdf",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/r210807d0bb55f4aa6fbe1512be6bcc4dacd64e84940429fba329967a%40%3Cusers.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r2eb200ac1340f69aa22af61ab34780c531d110437910cb9c0ece3b37%40%3Cbugs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r3925e167d5eb1c75def3750c155d753064e1d34a143028bb32910432%40%3Cusers.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r61fdbfc26ab170f4e6492ef3bd5197c20b862ce156e9d5a54d4b899c%40%3Cusers.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r82838efc5fa6fc4c73986399c9b71573589f78b31846aff5bd9b1697%40%3Cusers.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r82c077663f9759c7df5a6656f925b3ee4f55fcd33c889ba7cd687029%40%3Cusers.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6954e60b1c8e480678ce3d02f61b8a788997785652e9557a3265c00%40%3Cusers.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2021/10/msg00001.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20211008-0004/",
"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQ",
"https://www.debian.org/security/2021/dsa-4982",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujan2022.html",
"https://www.tenable.com/security/tns-2021-17",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-40438"
],
"epss": 0.94432,
"kev": true,
"cvss": 9
},
"CVE-2011-1176": {
"verified": false,
"ranking_epss": 0.76399,
"cvss_v2": 4.3,
"cvss_version": 2,
"summary": "The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2.11-01 and 2.2.11-02 for the Apache HTTP Server does not properly handle certain configuration sections that specify NiceValue but not AssignUserID, which might allow remote attackers to gain privileges by leveraging the root uid and root gid of an mpm-itk process.",
"references": [
"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=618857",
"http://lists.err.no/pipermail/mpm-itk/2011-March/000393.html",
"http://lists.err.no/pipermail/mpm-itk/2011-March/000394.html",
"http://openwall.com/lists/oss-security/2011/03/20/1",
"http://openwall.com/lists/oss-security/2011/03/21/13",
"http://www.debian.org/security/2011/dsa-2202",
"http://www.mandriva.com/security/advisories?name=MDVSA-2011:057",
"http://www.securityfocus.com/bid/46953",
"http://www.vupen.com/english/advisories/2011/0748",
"http://www.vupen.com/english/advisories/2011/0749",
"http://www.vupen.com/english/advisories/2011/0824",
"https://exchange.xforce.ibmcloud.com/vulnerabilities/66248",
"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=618857",
"http://lists.err.no/pipermail/mpm-itk/2011-March/000393.html",
"http://lists.err.no/pipermail/mpm-itk/2011-March/000394.html",
"http://openwall.com/lists/oss-security/2011/03/20/1",
"http://openwall.com/lists/oss-security/2011/03/21/13",
"http://www.debian.org/security/2011/dsa-2202",
"http://www.mandriva.com/security/advisories?name=MDVSA-2011:057",
"http://www.securityfocus.com/bid/46953",
"http://www.vupen.com/english/advisories/2011/0748",
"http://www.vupen.com/english/advisories/2011/0749",
"http://www.vupen.com/english/advisories/2011/0824",
"https://exchange.xforce.ibmcloud.com/vulnerabilities/66248"
],
"epss": 0.0096,
"cvss": 4.3
},
"CVE-2017-18207": {
"verified": false,
"ranking_epss": 0.68473,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service (divide-by-zero and exception) via a crafted wav format audio file. NOTE: the vendor disputes this issue because Python applications \"need to be prepared to handle a wide variety of exceptions.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"https://bugs.python.org/issue32056",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"https://bugs.python.org/issue32056"
],
"epss": 0.00569,
"cvss": 6.5
},
"CVE-2022-23943": {
"verified": false,
"ranking_epss": 0.98269,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions.",
"references": [
"http://www.openwall.com/lists/oss-security/2022/03/14/1",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.debian.org/debian-lts-announce/2022/03/msg00033.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTD/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20220321-0001/",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.tenable.com/security/tns-2022-08",
"https://www.tenable.com/security/tns-2022-09",
"http://www.openwall.com/lists/oss-security/2022/03/14/1",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.debian.org/debian-lts-announce/2022/03/msg00033.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTD/",
"https://security.gentoo.org/glsa/202208-20",
"https://security.netapp.com/advisory/ntap-20220321-0001/",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.tenable.com/security/tns-2022-08",
"https://www.tenable.com/security/tns-2022-09"
],
"epss": 0.60552,
"cvss": 9.8
},
"CVE-2019-16935": {
"verified": false,
"ranking_epss": 0.8452,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If set_server_title is called with untrusted input, arbitrary JavaScript can be delivered to clients that visit the http URL for this server.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00062.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00063.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00012.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00021.html",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"https://bugs.python.org/issue38243",
"https://github.com/python/cpython/blob/35c0809158be7feae4c4f877a08b93baea2d8291/Lib/xmlrpc/server.py#L897",
"https://github.com/python/cpython/blob/e007860b8b3609ce0bc62b1780efaa06241520bd/Lib/DocXMLRPCServer.py#L213",
"https://github.com/python/cpython/pull/16373",
"https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html",
"https://lists.debian.org/debian-lts-announce/2021/04/msg00015.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEARDOTXCYPYELKBD2KWZ27GSPXDI3GQ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/COATURTCY7G67AYI6UDV5B2JZTBCKIDX/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K7HNVIFMETMFWWWUNTB72KYJYXCZOS5V/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OYGESQSGIHDCIGOBVF7VXCMIE6YDWRYB/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBTGPBUABGXZ7WH7677OEM3NSP6ZEA76/",
"https://security.netapp.com/advisory/ntap-20191017-0004/",
"https://usn.ubuntu.com/4151-1/",
"https://usn.ubuntu.com/4151-2/",
"https://www.oracle.com/security-alerts/cpujul2020.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00062.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00063.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00012.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00021.html",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"https://bugs.python.org/issue38243",
"https://github.com/python/cpython/blob/35c0809158be7feae4c4f877a08b93baea2d8291/Lib/xmlrpc/server.py#L897",
"https://github.com/python/cpython/blob/e007860b8b3609ce0bc62b1780efaa06241520bd/Lib/DocXMLRPCServer.py#L213",
"https://github.com/python/cpython/pull/16373",
"https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html",
"https://lists.debian.org/debian-lts-announce/2021/04/msg00015.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEARDOTXCYPYELKBD2KWZ27GSPXDI3GQ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/COATURTCY7G67AYI6UDV5B2JZTBCKIDX/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K7HNVIFMETMFWWWUNTB72KYJYXCZOS5V/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OYGESQSGIHDCIGOBVF7VXCMIE6YDWRYB/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBTGPBUABGXZ7WH7677OEM3NSP6ZEA76/",
"https://security.netapp.com/advisory/ntap-20191017-0004/",
"https://usn.ubuntu.com/4151-1/",
"https://usn.ubuntu.com/4151-2/",
"https://www.oracle.com/security-alerts/cpujul2020.html"
],
"epss": 0.02256,
"cvss": 6.1
},
"CVE-2023-25690": {
"verified": false,
"ranking_epss": 0.98584,
"cvss_v2": null,
"cvss_version": 3,
"summary": "Some mod_proxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack.\n\n\n\n\nConfigurations are affected when mod_proxy is enabled along with some form of RewriteRule\n or ProxyPassMatch in which a non-specific pattern matches\n some portion of the user-supplied request-target (URL) data and is then\n re-inserted into the proxied request-target using variable \nsubstitution. For example, something like:\n\n\n\n\nRewriteEngine on\nRewriteRule \"^/here/(.*)\" \"http://example.com:8080/elsewhere?$1\"; [P]\nProxyPassReverse /here/ http://example.com:8080/\n\n\nRequest splitting/smuggling could result in bypass of access controls in the proxy server, proxying unintended URLs to existing origin servers, and cache poisoning. Users are recommended to update to at least version 2.4.56 of Apache HTTP Server.",
"references": [
"http://packetstormsecurity.com/files/176334/Apache-2.4.55-mod_proxy-HTTP-Request-Smuggling.html",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.debian.org/debian-lts-announce/2023/04/msg00028.html",
"https://security.gentoo.org/glsa/202309-01",
"http://packetstormsecurity.com/files/176334/Apache-2.4.55-mod_proxy-HTTP-Request-Smuggling.html",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.debian.org/debian-lts-announce/2023/04/msg00028.html",
"https://security.gentoo.org/glsa/202309-01"
],
"epss": 0.68183,
"cvss": 9.8
},
"CVE-2020-11985": {
"verified": false,
"ranking_epss": 0.94592,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "IP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using proxying with mod_remoteip and certain mod_rewrite rules, an attacker could spoof their IP address for logging and PHP scripts. Note this issue was fixed in Apache HTTP Server 2.4.24 but was retrospectively allocated a low severity CVE in 2020.",
"references": [
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r09bb998baee74a2c316446bd1a41ae7f8d7049d09d9ff991471e8775%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r3c5c3104813c1c5508b55564b66546933079250a46ce50eee90b2e36%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A2RN46PRBJE7E7OPD4YZX5SVWV5QKGV5/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYVYE2ZERFXDV6RMKK3I5SDSDQLPSEIQ/",
"https://security.gentoo.org/glsa/202008-04",
"https://security.netapp.com/advisory/ntap-20200827-0002/",
"https://www.oracle.com/security-alerts/cpujan2021.html",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r09bb998baee74a2c316446bd1a41ae7f8d7049d09d9ff991471e8775%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r3c5c3104813c1c5508b55564b66546933079250a46ce50eee90b2e36%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A2RN46PRBJE7E7OPD4YZX5SVWV5QKGV5/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYVYE2ZERFXDV6RMKK3I5SDSDQLPSEIQ/",
"https://security.gentoo.org/glsa/202008-04",
"https://security.netapp.com/advisory/ntap-20200827-0002/",
"https://www.oracle.com/security-alerts/cpujan2021.html"
],
"epss": 0.15318,
"cvss": 5.3
},
"CVE-2007-4559": {
"verified": false,
"ranking_epss": 0.99611,
"cvss_v2": 6.8,
"cvss_version": 3,
"summary": "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
"references": [
"http://mail.python.org/pipermail/python-dev/2007-August/074290.html",
"http://mail.python.org/pipermail/python-dev/2007-August/074292.html",
"http://secunia.com/advisories/26623",
"http://www.vupen.com/english/advisories/2007/3022",
"https://bugzilla.redhat.com/show_bug.cgi?id=263261",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVBB7NU3YIRRDOKLYVN647WPRR3IAKR6/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FI55PGL47ES3OU2FQPGEHOI2EK3S2OBH/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KA4Z44ZAI4SY7THCFBUDNT5EEFO4XQ3A/",
"https://security.gentoo.org/glsa/202309-06",
"http://mail.python.org/pipermail/python-dev/2007-August/074290.html",
"http://mail.python.org/pipermail/python-dev/2007-August/074292.html",
"http://secunia.com/advisories/26623",
"http://www.vupen.com/english/advisories/2007/3022",
"https://bugzilla.redhat.com/show_bug.cgi?id=263261",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVBB7NU3YIRRDOKLYVN647WPRR3IAKR6/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FI55PGL47ES3OU2FQPGEHOI2EK3S2OBH/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KA4Z44ZAI4SY7THCFBUDNT5EEFO4XQ3A/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CVBB7NU3YIRRDOKLYVN647WPRR3IAKR6/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FI55PGL47ES3OU2FQPGEHOI2EK3S2OBH/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KA4Z44ZAI4SY7THCFBUDNT5EEFO4XQ3A/",
"https://security.gentoo.org/glsa/202309-06"
],
"epss": 0.90582,
"cvss": 9.8
},
"CVE-2018-14647": {
"verified": false,
"ranking_epss": 0.81838,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming large amounts CPU and RAM. The vulnerability exists in Python versions 3.7.0, 3.6.0 through 3.6.6, 3.5.0 through 3.5.6, 3.4.0 through 3.4.9, 2.7.0 through 2.7.15.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"http://www.securityfocus.com/bid/105396",
"http://www.securitytracker.com/id/1041740",
"https://access.redhat.com/errata/RHSA-2019:1260",
"https://access.redhat.com/errata/RHSA-2019:2030",
"https://access.redhat.com/errata/RHSA-2019:3725",
"https://bugs.python.org/issue34623",
"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14647",
"https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2019/06/msg00023.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RBJCB2HWOJLP3L7CUQHJHNBHLSVOXJE5/",
"https://usn.ubuntu.com/3817-1/",
"https://usn.ubuntu.com/3817-2/",
"https://www.debian.org/security/2018/dsa-4306",
"https://www.debian.org/security/2018/dsa-4307",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"http://www.securityfocus.com/bid/105396",
"http://www.securitytracker.com/id/1041740",
"https://access.redhat.com/errata/RHSA-2019:1260",
"https://access.redhat.com/errata/RHSA-2019:2030",
"https://access.redhat.com/errata/RHSA-2019:3725",
"https://bugs.python.org/issue34623",
"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14647",
"https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2019/06/msg00023.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RBJCB2HWOJLP3L7CUQHJHNBHLSVOXJE5/",
"https://usn.ubuntu.com/3817-1/",
"https://usn.ubuntu.com/3817-2/",
"https://www.debian.org/security/2018/dsa-4306",
"https://www.debian.org/security/2018/dsa-4307"
],
"epss": 0.01634,
"cvss": 5.3
},
"CVE-2013-4352": {
"verified": false,
"ranking_epss": 0.96062,
"cvss_v2": 4.3,
"cvss_version": 2,
"summary": "The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP servers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger a missing hostname value.",
"references": [
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/cache/cache_storage.c",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/cache/cache_storage.c?r1=1491564&r2=1523235&diff_format=h",
"https://bugzilla.redhat.com/show_bug.cgi?id=1120604",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"http://httpd.apache.org/security/vulnerabilities_24.html",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/cache/cache_storage.c",
"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/cache/cache_storage.c?r1=1491564&r2=1523235&diff_format=h",
"https://bugzilla.redhat.com/show_bug.cgi?id=1120604",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E"
],
"epss": 0.24352,
"cvss": 4.3
},
"CVE-2018-1000802": {
"verified": false,
"ranking_epss": 0.95902,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in shutil module (make_archive function) that can result in Denial of service, Information gain via injection of arbitrary files on the system or entire drive. This attack appear to be exploitable via Passage of unfiltered user input to the function. This vulnerability appears to have been fixed in after commit add531a1e55b0a739b0f42582f1c9747e5649ace.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"https://bugs.python.org/issue34540",
"https://github.com/python/cpython/pull/8985",
"https://github.com/python/cpython/pull/8985/commits/add531a1e55b0a739b0f42582f1c9747e5649ace",
"https://lists.debian.org/debian-lts-announce/2018/09/msg00030.html",
"https://lists.debian.org/debian-lts-announce/2018/09/msg00031.html",
"https://mega.nz/#%21JUFiCC4R%21mq-jQ8ySFwIhX6WMDujaZuNBfttDVt7DETlfOIQE1ig",
"https://security.netapp.com/advisory/ntap-20230309-0002/",
"https://usn.ubuntu.com/3817-1/",
"https://usn.ubuntu.com/3817-2/",
"https://www.debian.org/security/2018/dsa-4306",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"https://bugs.python.org/issue34540",
"https://github.com/python/cpython/pull/8985",
"https://github.com/python/cpython/pull/8985/commits/add531a1e55b0a739b0f42582f1c9747e5649ace",
"https://lists.debian.org/debian-lts-announce/2018/09/msg00030.html",
"https://lists.debian.org/debian-lts-announce/2018/09/msg00031.html",
"https://mega.nz/#%21JUFiCC4R%21mq-jQ8ySFwIhX6WMDujaZuNBfttDVt7DETlfOIQE1ig",
"https://security.netapp.com/advisory/ntap-20230309-0002/",
"https://usn.ubuntu.com/3817-1/",
"https://usn.ubuntu.com/3817-2/",
"https://www.debian.org/security/2018/dsa-4306"
],
"epss": 0.23201,
"cvss": 9.8
},
"CVE-2016-9935": {
"verified": false,
"ranking_epss": 0.88939,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.29 and 7.x before 7.0.14 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) or possibly have unspecified other impact via an empty boolean element in a wddxPacket XML document.",
"references": [
"http://lists.opensuse.org/opensuse-updates/2016-12/msg00142.html",
"http://lists.opensuse.org/opensuse-updates/2017-01/msg00034.html",
"http://lists.opensuse.org/opensuse-updates/2017-01/msg00054.html",
"http://www.debian.org/security/2016/dsa-3737",
"http://www.openwall.com/lists/oss-security/2016/12/12/2",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/94846",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=73631",
"https://github.com/php/php-src/commit/66fd44209d5ffcb9b3d1bc1b9fd8e35b485040c0",
"https://security.gentoo.org/glsa/201702-29",
"http://lists.opensuse.org/opensuse-updates/2016-12/msg00142.html",
"http://lists.opensuse.org/opensuse-updates/2017-01/msg00034.html",
"http://lists.opensuse.org/opensuse-updates/2017-01/msg00054.html",
"http://www.debian.org/security/2016/dsa-3737",
"http://www.openwall.com/lists/oss-security/2016/12/12/2",
"http://www.php.net/ChangeLog-5.php",
"http://www.php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/94846",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://bugs.php.net/bug.php?id=73631",
"https://github.com/php/php-src/commit/66fd44209d5ffcb9b3d1bc1b9fd8e35b485040c0",
"https://security.gentoo.org/glsa/201702-29"
],
"epss": 0.04393,
"cvss": 9.8
},
"CVE-2025-12084": {
"verified": false,
"ranking_epss": 0.15277,
"cvss_v2": null,
"cvss_version": 3,
"summary": "When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents.",
"references": [
"https://github.com/python/cpython/commit/027f21e417b26eed4505ac2db101a4352b7c51a0",
"https://github.com/python/cpython/commit/08d8e18ad81cd45bc4a27d6da478b51ea49486e4",
"https://github.com/python/cpython/commit/27648a1818749ef44c420afe6173af6868715437",
"https://github.com/python/cpython/commit/41f468786762348960486c166833a218a0a436af",
"https://github.com/python/cpython/commit/57937a8e5e293f0dcba5115f7b7a11b1e0c9a273",
"https://github.com/python/cpython/commit/8d2d7bb2e754f8649a68ce4116271a4932f76907",
"https://github.com/python/cpython/commit/9c9dda6625a2a90d2a06c657eee021d6be19842d",
"https://github.com/python/cpython/commit/a46c10ec9d4050ab67b8a932e0859a2ea60c3cb8",
"https://github.com/python/cpython/commit/a696ba8b4d42fd632afc9bc88ad830a2e4cceed8",
"https://github.com/python/cpython/commit/c97e87593063d84a2bd9fe7068b30eb44de23dc0",
"https://github.com/python/cpython/commit/ddcd2acd85d891a53e281c773b3093f9db953964",
"https://github.com/python/cpython/commit/e91c11449cad34bac3ea55ee09ca557691d92b53",
"https://github.com/python/cpython/issues/142145",
"https://github.com/python/cpython/pull/142146"
],
"epss": 0.00049,
"cvss": 5.3
},
"CVE-2009-2940": {
"verified": false,
"ranking_epss": 0.68677,
"cvss_v2": 7.5,
"cvss_version": 2,
"summary": "The pygresql module 3.8.1 and 4.0 for Python does not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings.",
"references": [
"http://secunia.com/advisories/37046",
"http://secunia.com/advisories/37654",
"http://ubuntu.com/usn/usn-870-1",
"http://www.debian.org/security/2009/dsa-1911",
"http://www.osvdb.org/59028",
"http://secunia.com/advisories/37046",
"http://secunia.com/advisories/37654",
"http://ubuntu.com/usn/usn-870-1",
"http://www.debian.org/security/2009/dsa-1911",
"http://www.osvdb.org/59028"
],
"epss": 0.00576,
"cvss": 7.5
},
"CVE-2022-0778": {
"verified": false,
"ranking_epss": 0.91691,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).",
"references": [
"http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html",
"http://seclists.org/fulldisclosure/2022/May/33",
"http://seclists.org/fulldisclosure/2022/May/35",
"http://seclists.org/fulldisclosure/2022/May/38",
"https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246",
"https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html",
"https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/",
"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002",
"https://security.gentoo.org/glsa/202210-02",
"https://security.netapp.com/advisory/ntap-20220321-0002/",
"https://security.netapp.com/advisory/ntap-20220429-0005/",
"https://security.netapp.com/advisory/ntap-20240621-0006/",
"https://support.apple.com/kb/HT213255",
"https://support.apple.com/kb/HT213256",
"https://support.apple.com/kb/HT213257",
"https://www.debian.org/security/2022/dsa-5103",
"https://www.openssl.org/news/secadv/20220315.txt",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujul2022.html",
"https://www.tenable.com/security/tns-2022-06",
"https://www.tenable.com/security/tns-2022-07",
"https://www.tenable.com/security/tns-2022-08",
"https://www.tenable.com/security/tns-2022-09",
"http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html",
"http://seclists.org/fulldisclosure/2022/May/33",
"http://seclists.org/fulldisclosure/2022/May/35",
"http://seclists.org/fulldisclosure/2022/May/38",
"https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246",
"https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html",
"https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/",
"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002",
"https://security.gentoo.org/glsa/202210-02",
"https://security.netapp.com/advisory/ntap-20220321-0002/",
"https://security.netapp.com/advisory/ntap-20220429-0005/",
"https://security.netapp.com/advisory/ntap-20240621-0006/",
"https://support.apple.com/kb/HT213255",
"https://support.apple.com/kb/HT213256",
"https://support.apple.com/kb/HT213257",
"https://www.debian.org/security/2022/dsa-5103",
"https://www.openssl.org/news/secadv/20220315.txt",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujul2022.html",
"https://www.tenable.com/security/tns-2022-06",
"https://www.tenable.com/security/tns-2022-07",
"https://www.tenable.com/security/tns-2022-08",
"https://www.tenable.com/security/tns-2022-09"
],
"epss": 0.07394,
"cvss": 7.5
},
"CVE-2016-2554": {
"verified": false,
"ranking_epss": 0.93134,
"cvss_v2": 10,
"cvss_version": 3,
"summary": "Stack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TAR archive.",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.ubuntu.com/usn/USN-2952-1",
"http://www.ubuntu.com/usn/USN-2952-2",
"https://bugs.php.net/bug.php?id=71488",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://rhn.redhat.com/errata/RHSA-2016-2750.html",
"http://www.ubuntu.com/usn/USN-2952-1",
"http://www.ubuntu.com/usn/USN-2952-2",
"https://bugs.php.net/bug.php?id=71488",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"
],
"epss": 0.10282,
"cvss": 9.8
},
"CVE-2022-2255": {
"verified": false,
"ranking_epss": 0.65601,
"cvss_v2": null,
"cvss_version": 3,
"summary": "A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.",
"references": [
"https://github.com/GrahamDumpleton/mod_wsgi/blob/4.9.2/src/server/mod_wsgi.c#L13940-L13941",
"https://github.com/GrahamDumpleton/mod_wsgi/blob/4.9.2/src/server/mod_wsgi.c#L14046-L14082",
"https://lists.debian.org/debian-lts-announce/2022/09/msg00021.html",
"https://modwsgi.readthedocs.io/en/latest/release-notes/version-4.9.3.html",
"https://github.com/GrahamDumpleton/mod_wsgi/blob/4.9.2/src/server/mod_wsgi.c#L13940-L13941",
"https://github.com/GrahamDumpleton/mod_wsgi/blob/4.9.2/src/server/mod_wsgi.c#L14046-L14082",
"https://lists.debian.org/debian-lts-announce/2022/09/msg00021.html",
"https://modwsgi.readthedocs.io/en/latest/release-notes/version-4.9.3.html"
],
"epss": 0.00493,
"cvss": 7.5
},
"CVE-2016-8612": {
"verified": false,
"ranking_epss": 0.79802,
"cvss_v2": 3.3,
"cvss_version": 3,
"summary": "Apache HTTP Server mod_cluster before version httpd 2.4.23 is vulnerable to an Improper Input Validation in the protocol parsing logic in the load balancer resulting in a Segmentation Fault in the serving httpd process.",
"references": [
"http://rhn.redhat.com/errata/RHSA-2016-2957.html",
"http://www.securityfocus.com/bid/94939",
"https://access.redhat.com/errata/RHSA-2017:0193",
"https://access.redhat.com/errata/RHSA-2017:0194",
"https://bugzilla.redhat.com/show_bug.cgi?id=1387605",
"https://security.netapp.com/advisory/ntap-20180601-0005/",
"http://rhn.redhat.com/errata/RHSA-2016-2957.html",
"http://www.securityfocus.com/bid/94939",
"https://access.redhat.com/errata/RHSA-2017:0193",
"https://access.redhat.com/errata/RHSA-2017:0194",
"https://bugzilla.redhat.com/show_bug.cgi?id=1387605",
"https://security.netapp.com/advisory/ntap-20180601-0005/"
],
"epss": 0.01319,
"cvss": 4.3
},
"CVE-2019-1547": {
"verified": false,
"ranking_epss": 0.49273,
"cvss_v2": 1.9,
"cvss_version": 3,
"summary": "Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some cases, it is possible to construct a group using explicit parameters (instead of using a named curve). In those cases it is possible that such a group does not have the cofactor present. This can occur even where all the parameters match a known named curve. If such a curve is used then OpenSSL falls back to non-side channel resistant code paths which may result in full key recovery during an ECDSA signature operation. In order to be vulnerable an attacker would have to have the ability to time the creation of a large number of signatures where explicit parameters with no co-factor present are in use by an application using libcrypto. For the avoidance of doubt libssl is not vulnerable because explicit parameters are never used. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s).",
"references": [
"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00054.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00072.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00012.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00016.html",
"http://packetstormsecurity.com/files/154467/Slackware-Security-Advisory-openssl-Updates.html",
"https://arxiv.org/abs/1909.01785",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=21c856b75d81eff61aa63b4f036bb64a85bf6d46",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30c22fa8b1d840036b8e203585738df62a03cec8",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7c1709c2da5414f5b6133d00a03fc8c5bf996c7a",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10365",
"https://lists.debian.org/debian-lts-announce/2019/09/msg00026.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6SNRJP2S7Y42GIIDO3HXPNMDYN2U3A/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZN4VVQJ3JDCHGIHV4Y2YTXBYQZ6PWQ7E/",
"https://seclists.org/bugtraq/2019/Oct/0",
"https://seclists.org/bugtraq/2019/Oct/1",
"https://seclists.org/bugtraq/2019/Sep/25",
"https://security.gentoo.org/glsa/201911-04",
"https://security.netapp.com/advisory/ntap-20190919-0002/",
"https://security.netapp.com/advisory/ntap-20200122-0002/",
"https://security.netapp.com/advisory/ntap-20200416-0003/",
"https://security.netapp.com/advisory/ntap-20240621-0006/",
"https://support.f5.com/csp/article/K73422160?utm_source=f5support&%3Butm_medium=RSS",
"https://usn.ubuntu.com/4376-1/",
"https://usn.ubuntu.com/4376-2/",
"https://usn.ubuntu.com/4504-1/",
"https://www.debian.org/security/2019/dsa-4539",
"https://www.debian.org/security/2019/dsa-4540",
"https://www.openssl.org/news/secadv/20190910.txt",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/security-alerts/cpujan2020.html",
"https://www.oracle.com/security-alerts/cpujul2020.html",
"https://www.oracle.com/security-alerts/cpuoct2020.html",
"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
"https://www.tenable.com/security/tns-2019-08",
"https://www.tenable.com/security/tns-2019-09",
"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00054.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00072.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00012.html",
"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00016.html",
"http://packetstormsecurity.com/files/154467/Slackware-Security-Advisory-openssl-Updates.html",
"https://arxiv.org/abs/1909.01785",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=21c856b75d81eff61aa63b4f036bb64a85bf6d46",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30c22fa8b1d840036b8e203585738df62a03cec8",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7c1709c2da5414f5b6133d00a03fc8c5bf996c7a",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10365",
"https://lists.debian.org/debian-lts-announce/2019/09/msg00026.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6SNRJP2S7Y42GIIDO3HXPNMDYN2U3A/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZN4VVQJ3JDCHGIHV4Y2YTXBYQZ6PWQ7E/",
"https://seclists.org/bugtraq/2019/Oct/0",
"https://seclists.org/bugtraq/2019/Oct/1",
"https://seclists.org/bugtraq/2019/Sep/25",
"https://security.gentoo.org/glsa/201911-04",
"https://security.netapp.com/advisory/ntap-20190919-0002/",
"https://security.netapp.com/advisory/ntap-20200122-0002/",
"https://security.netapp.com/advisory/ntap-20200416-0003/",
"https://security.netapp.com/advisory/ntap-20240621-0006/",
"https://support.f5.com/csp/article/K73422160?utm_source=f5support&%3Butm_medium=RSS",
"https://usn.ubuntu.com/4376-1/",
"https://usn.ubuntu.com/4376-2/",
"https://usn.ubuntu.com/4504-1/",
"https://www.debian.org/security/2019/dsa-4539",
"https://www.debian.org/security/2019/dsa-4540",
"https://www.openssl.org/news/secadv/20190910.txt",
"https://www.oracle.com/security-alerts/cpuapr2020.html",
"https://www.oracle.com/security-alerts/cpujan2020.html",
"https://www.oracle.com/security-alerts/cpujul2020.html",
"https://www.oracle.com/security-alerts/cpuoct2020.html",
"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
"https://www.tenable.com/security/tns-2019-08",
"https://www.tenable.com/security/tns-2019-09"
],
"epss": 0.0026,
"cvss": 4.7
},
"CVE-2022-45061": {
"verified": false,
"ranking_epss": 0.29257,
"cvss_v2": null,
"cvss_version": 3,
"summary": "An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490) decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often supplied by remote servers that could be controlled by a malicious actor; in such a scenario, they could trigger excessive CPU consumption on the client attempting to make use of an attacker-supplied supposed hostname. For example, the attack payload could be placed in the Location header of an HTTP response with status code 302. A fix is planned in 3.11.1, 3.10.9, 3.9.16, 3.8.16, and 3.7.16.",
"references": [
"https://github.com/python/cpython/issues/98433",
"https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html",
"https://lists.debian.org/debian-lts-announce/2023/06/msg00039.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2AOUKI72ACV6CHY2QUFO6VK2DNMVJ2MB/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/35YDIWCUMWTMDBWFRAVENFH6BLB65D6S/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4WBZJNSALFGMPYTINIF57HAAK46U72WQ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63FS6VHY4DCS74HBTEINUDOECQ2X6ZCH/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WQPHKGNXUJC3TC3BDW5RKGROWRJVSFR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B3YI6JYARWU6GULWOHNUROSACT54XFFS/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4MYQ3IV6NWA4CKSXEHW45CH2YNDHEPH/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BWJREJHWVRBYDP43YB5WRL3QC7UBA7BR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTPVDZDATRQFE6KAT6B4BQIQ4GRHIIIJ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IN26PWZTYG6IF3APLRXQJBVACQHZUPT2/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCDJXNBHWXNYUTOEV4H2HCFSRKV3SYL3/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JTYVESWVBPD57ZJC35G5722Q6TS37WSB/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KNE4GMD45RGC2HWUAAIGTDHT5VJ2E4O4/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKWAMPURWUV3DCCT4J7VHRF4NT2CFVBR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O67LRHDTJWH544KXB6KY4HMHQLYDXFPK/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORVCQGJCCAVLN4DJDTWGREFCUWXKQRML/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PLQ2BNZVBBAQPV3SPRU24ZD37UYJJS7W/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QCKD4AFBHXIMHS64ZER2U7QRT33HNE7L/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QLUGZSEAO3MBWGKCUSMKQIRYJZKJCIOB/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDK3ZZBRYFO47ET3N4BNTKVXN47U6ICY/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RH57BNT4VQERGEJ5SXNXSVMDYP66YD4H/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTN2OOLKYTG34DODUEJGT5MLC2PFGPBA/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T3D5TX4TDJPXHXD2QICKTY3OCQC3JARP/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHVW73QZJMHA4MK7JBT7CXX7XSNYQEGF/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMDX6IFKLOA3NXUQEV524L5LHTPI2JI/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3EJ6J7PXVQOULBQZQGBXCXY6LFF6LZD/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XXZJL3CNAFS5PAIR7K4RL62S3Y7THR7O/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPNWZKXPKTNHS5FVMN7UQZ2UPCSEFJUK/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB5YCMIRVX35RUB6XPOWKENCVCJEVDRK/",
"https://security.gentoo.org/glsa/202305-02",
"https://security.netapp.com/advisory/ntap-20221209-0007/",
"https://github.com/python/cpython/issues/98433",
"https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html",
"https://lists.debian.org/debian-lts-announce/2023/06/msg00039.html",
"https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html",
"https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2AOUKI72ACV6CHY2QUFO6VK2DNMVJ2MB/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/35YDIWCUMWTMDBWFRAVENFH6BLB65D6S/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4WBZJNSALFGMPYTINIF57HAAK46U72WQ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63FS6VHY4DCS74HBTEINUDOECQ2X6ZCH/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WQPHKGNXUJC3TC3BDW5RKGROWRJVSFR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B3YI6JYARWU6GULWOHNUROSACT54XFFS/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4MYQ3IV6NWA4CKSXEHW45CH2YNDHEPH/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BWJREJHWVRBYDP43YB5WRL3QC7UBA7BR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTPVDZDATRQFE6KAT6B4BQIQ4GRHIIIJ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IN26PWZTYG6IF3APLRXQJBVACQHZUPT2/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCDJXNBHWXNYUTOEV4H2HCFSRKV3SYL3/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JTYVESWVBPD57ZJC35G5722Q6TS37WSB/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KNE4GMD45RGC2HWUAAIGTDHT5VJ2E4O4/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKWAMPURWUV3DCCT4J7VHRF4NT2CFVBR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O67LRHDTJWH544KXB6KY4HMHQLYDXFPK/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORVCQGJCCAVLN4DJDTWGREFCUWXKQRML/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PLQ2BNZVBBAQPV3SPRU24ZD37UYJJS7W/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QCKD4AFBHXIMHS64ZER2U7QRT33HNE7L/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QLUGZSEAO3MBWGKCUSMKQIRYJZKJCIOB/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDK3ZZBRYFO47ET3N4BNTKVXN47U6ICY/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RH57BNT4VQERGEJ5SXNXSVMDYP66YD4H/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTN2OOLKYTG34DODUEJGT5MLC2PFGPBA/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T3D5TX4TDJPXHXD2QICKTY3OCQC3JARP/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHVW73QZJMHA4MK7JBT7CXX7XSNYQEGF/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMDX6IFKLOA3NXUQEV524L5LHTPI2JI/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3EJ6J7PXVQOULBQZQGBXCXY6LFF6LZD/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XXZJL3CNAFS5PAIR7K4RL62S3Y7THR7O/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPNWZKXPKTNHS5FVMN7UQZ2UPCSEFJUK/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB5YCMIRVX35RUB6XPOWKENCVCJEVDRK/",
"https://security.gentoo.org/glsa/202305-02",
"https://security.netapp.com/advisory/ntap-20221209-0007/"
],
"epss": 0.00109,
"cvss": 7.5
},
"CVE-2014-0240": {
"verified": false,
"ranking_epss": 0.45575,
"cvss_v2": 6.2,
"cvss_version": 2,
"summary": "The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on certain Linux kernels, which allows local users to gain privileges via vectors related to the number of running processes.",
"references": [
"http://blog.dscpl.com.au/2014/05/security-release-for-modwsgi-version-35.html",
"http://modwsgi.readthedocs.org/en/latest/release-notes/version-3.5.html",
"http://rhn.redhat.com/errata/RHSA-2014-0789.html",
"http://secunia.com/advisories/59551",
"http://secunia.com/advisories/60094",
"http://www.openwall.com/lists/oss-security/2014/05/21/1",
"http://www.securityfocus.com/bid/67532",
"http://blog.dscpl.com.au/2014/05/security-release-for-modwsgi-version-35.html",
"http://modwsgi.readthedocs.org/en/latest/release-notes/version-3.5.html",
"http://rhn.redhat.com/errata/RHSA-2014-0789.html",
"http://secunia.com/advisories/59551",
"http://secunia.com/advisories/60094",
"http://www.openwall.com/lists/oss-security/2014/05/21/1",
"http://www.securityfocus.com/bid/67532"
],
"epss": 0.00229,
"cvss": 6.2
},
"CVE-2022-37436": {
"verified": false,
"ranking_epss": 0.64131,
"cvss_v2": null,
"cvss_version": 3,
"summary": "Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be interpreted by the client.",
"references": [
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://security.gentoo.org/glsa/202309-01",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://security.gentoo.org/glsa/202309-01"
],
"epss": 0.00463,
"cvss": 5.3
},
"CVE-2016-9063": {
"verified": false,
"ranking_epss": 0.85056,
"cvss_v2": 7.5,
"cvss_version": 3,
"summary": "An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.",
"references": [
"http://www.securityfocus.com/bid/94337",
"http://www.securitytracker.com/id/1037298",
"http://www.securitytracker.com/id/1039427",
"https://bugzilla.mozilla.org/show_bug.cgi?id=1274777",
"https://www.debian.org/security/2017/dsa-3898",
"https://www.mozilla.org/security/advisories/mfsa2016-89/",
"http://www.securityfocus.com/bid/94337",
"http://www.securitytracker.com/id/1037298",
"http://www.securitytracker.com/id/1039427",
"https://bugzilla.mozilla.org/show_bug.cgi?id=1274777",
"https://www.debian.org/security/2017/dsa-3898",
"https://www.mozilla.org/security/advisories/mfsa2016-89/"
],
"epss": 0.02423,
"cvss": 9.8
},
"CVE-2018-17199": {
"verified": false,
"ranking_epss": 0.93205,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded.",
"references": [
"http://www.securityfocus.com/bid/106742",
"https://access.redhat.com/errata/RHSA-2019:3932",
"https://access.redhat.com/errata/RHSA-2019:3933",
"https://access.redhat.com/errata/RHSA-2019:3935",
"https://access.redhat.com/errata/RHSA-2019:4126",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re473305a65b4db888e3556e4dae10c2a04ee89dcff2e26ecdbd860a9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2019/01/msg00024.html",
"https://seclists.org/bugtraq/2019/Apr/5",
"https://security.gentoo.org/glsa/201903-21",
"https://security.netapp.com/advisory/ntap-20190125-0001/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03950en_us",
"https://usn.ubuntu.com/3937-1/",
"https://www.debian.org/security/2019/dsa-4422",
"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.tenable.com/security/tns-2019-09",
"http://www.securityfocus.com/bid/106742",
"https://access.redhat.com/errata/RHSA-2019:3932",
"https://access.redhat.com/errata/RHSA-2019:3933",
"https://access.redhat.com/errata/RHSA-2019:3935",
"https://access.redhat.com/errata/RHSA-2019:4126",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re473305a65b4db888e3556e4dae10c2a04ee89dcff2e26ecdbd860a9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2019/01/msg00024.html",
"https://seclists.org/bugtraq/2019/Apr/5",
"https://security.gentoo.org/glsa/201903-21",
"https://security.netapp.com/advisory/ntap-20190125-0001/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03950en_us",
"https://usn.ubuntu.com/3937-1/",
"https://www.debian.org/security/2019/dsa-4422",
"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"https://www.tenable.com/security/tns-2019-09"
],
"epss": 0.10459,
"cvss": 7.5
},
"CVE-2023-36632": {
"verified": false,
"ranking_epss": 0.29827,
"cvss_v2": null,
"cvss_version": 3,
"summary": "The legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger \"RecursionError: maximum recursion depth exceeded while calling a Python object\" via a crafted argument. This argument is plausibly an untrusted value from an application's input data that was supposed to contain a name and an e-mail address. NOTE: email.utils.parseaddr is categorized as a Legacy API in the documentation of the Python email package. Applications should instead use the email.parser.BytesParser or email.parser.Parser class. NOTE: the vendor's perspective is that this is neither a vulnerability nor a bug. The email package is intended to have size limits and to throw an exception when limits are exceeded; they were exceeded by the example demonstration code.",
"references": [
"https://docs.python.org/3/library/email.html",
"https://docs.python.org/3/library/email.utils.html",
"https://github.com/Daybreak2019/PoC_python3.9_Vul/blob/main/RecursionError-email.utils.parseaddr.py",
"https://github.com/python/cpython/issues/103800",
"https://docs.python.org/3/library/email.html",
"https://docs.python.org/3/library/email.utils.html",
"https://github.com/Daybreak2019/PoC_python3.9_Vul/blob/main/RecursionError-email.utils.parseaddr.py",
"https://github.com/python/cpython/issues/103800"
],
"epss": 0.00112,
"cvss": 7.5
},
"CVE-2014-3581": {
"verified": false,
"ranking_epss": 0.89453,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty HTTP Content-Type header.",
"references": [
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html",
"http://rhn.redhat.com/errata/RHSA-2015-0325.html",
"http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/CHANGES?view=markup&pathrev=1627749",
"http://svn.apache.org/viewvc?view=revision&revision=1624234",
"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/71656",
"http://www.securitytracker.com/id/1031005",
"http://www.ubuntu.com/usn/USN-2523-1",
"https://bugzilla.redhat.com/show_bug.cgi?id=1149709",
"https://exchange.xforce.ibmcloud.com/vulnerabilities/97027",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://security.gentoo.org/glsa/201610-02",
"https://support.apple.com/HT205219",
"https://support.apple.com/kb/HT205031",
"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html",
"http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html",
"http://rhn.redhat.com/errata/RHSA-2015-0325.html",
"http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/CHANGES?view=markup&pathrev=1627749",
"http://svn.apache.org/viewvc?view=revision&revision=1624234",
"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"http://www.securityfocus.com/bid/71656",
"http://www.securitytracker.com/id/1031005",
"http://www.ubuntu.com/usn/USN-2523-1",
"https://bugzilla.redhat.com/show_bug.cgi?id=1149709",
"https://exchange.xforce.ibmcloud.com/vulnerabilities/97027",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://security.gentoo.org/glsa/201610-02",
"https://support.apple.com/HT205219",
"https://support.apple.com/kb/HT205031"
],
"epss": 0.04809,
"cvss": 5
},
"CVE-2014-3710": {
"verified": false,
"ranking_epss": 0.91688,
"cvss_v2": 5,
"cvss_version": 2,
"summary": "The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=1803228597e82218a8c105e67975bc50e6f5bf0d",
"http://linux.oracle.com/errata/ELSA-2014-1767.html",
"http://linux.oracle.com/errata/ELSA-2014-1768.html",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-11/msg00113.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://rhn.redhat.com/errata/RHSA-2014-1767.html",
"http://rhn.redhat.com/errata/RHSA-2014-1768.html",
"http://rhn.redhat.com/errata/RHSA-2016-0760.html",
"http://secunia.com/advisories/60630",
"http://secunia.com/advisories/60699",
"http://secunia.com/advisories/61763",
"http://secunia.com/advisories/61970",
"http://secunia.com/advisories/61982",
"http://secunia.com/advisories/62347",
"http://secunia.com/advisories/62559",
"http://www.debian.org/security/2014/dsa-3072",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.securityfocus.com/bid/70807",
"http://www.securitytracker.com/id/1031344",
"http://www.ubuntu.com/usn/USN-2391-1",
"http://www.ubuntu.com/usn/USN-2494-1",
"https://bugs.php.net/bug.php?id=68283",
"https://bugzilla.redhat.com/show_bug.cgi?id=1155071",
"https://github.com/file/file/commit/39c7ac1106be844a5296d3eb5971946cc09ffda0",
"https://security.gentoo.org/glsa/201503-03",
"https://security.gentoo.org/glsa/201701-42",
"https://support.apple.com/HT204659",
"https://www.freebsd.org/security/advisories/FreeBSD-SA-14:28.file.asc",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=1803228597e82218a8c105e67975bc50e6f5bf0d",
"http://linux.oracle.com/errata/ELSA-2014-1767.html",
"http://linux.oracle.com/errata/ELSA-2014-1768.html",
"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"http://lists.opensuse.org/opensuse-updates/2014-11/msg00113.html",
"http://rhn.redhat.com/errata/RHSA-2014-1765.html",
"http://rhn.redhat.com/errata/RHSA-2014-1766.html",
"http://rhn.redhat.com/errata/RHSA-2014-1767.html",
"http://rhn.redhat.com/errata/RHSA-2014-1768.html",
"http://rhn.redhat.com/errata/RHSA-2016-0760.html",
"http://secunia.com/advisories/60630",
"http://secunia.com/advisories/60699",
"http://secunia.com/advisories/61763",
"http://secunia.com/advisories/61970",
"http://secunia.com/advisories/61982",
"http://secunia.com/advisories/62347",
"http://secunia.com/advisories/62559",
"http://www.debian.org/security/2014/dsa-3072",
"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"http://www.securityfocus.com/bid/70807",
"http://www.securitytracker.com/id/1031344",
"http://www.ubuntu.com/usn/USN-2391-1",
"http://www.ubuntu.com/usn/USN-2494-1",
"https://bugs.php.net/bug.php?id=68283",
"https://bugzilla.redhat.com/show_bug.cgi?id=1155071",
"https://github.com/file/file/commit/39c7ac1106be844a5296d3eb5971946cc09ffda0",
"https://security.gentoo.org/glsa/201503-03",
"https://security.gentoo.org/glsa/201701-42",
"https://support.apple.com/HT204659",
"https://www.freebsd.org/security/advisories/FreeBSD-SA-14:28.file.asc"
],
"epss": 0.0739,
"cvss": 5
},
"CVE-2015-2325": {
"verified": false,
"ranking_epss": 0.57997,
"cvss_v2": 6.8,
"cvss_version": 3,
"summary": "The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service (out-of-bounds heap read and crash), or possibly have other unspecified impact via a regular expression with a group containing a forward reference repeated a large number of times within a repeated outer group that has a zero minimum quantifier.",
"references": [
"http://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html",
"https://bugs.exim.org/show_bug.cgi?id=1591",
"https://fortiguard.com/zeroday/FG-VD-15-015",
"https://www.pcre.org/original/changelog.txt",
"http://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html",
"https://bugs.exim.org/show_bug.cgi?id=1591",
"https://fortiguard.com/zeroday/FG-VD-15-015",
"https://www.pcre.org/original/changelog.txt"
],
"epss": 0.00359,
"cvss": 7.8
},
"CVE-2015-2326": {
"verified": false,
"ranking_epss": 0.68483,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "The pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code and cause a denial of service (out-of-bounds read) via regular expression with a group containing both a forward referencing subroutine call and a recursive back reference, as demonstrated by \"((?+1)(\\1))/\".",
"references": [
"http://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html",
"https://bugs.exim.org/show_bug.cgi?id=1592",
"https://fortiguard.com/zeroday/FG-VD-15-016",
"https://www.pcre.org/original/changelog.txt",
"http://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html",
"https://bugs.exim.org/show_bug.cgi?id=1592",
"https://fortiguard.com/zeroday/FG-VD-15-016",
"https://www.pcre.org/original/changelog.txt"
],
"epss": 0.00569,
"cvss": 5.5
},
"CVE-2015-7803": {
"verified": false,
"ranking_epss": 0.96284,
"cvss_v2": 6.8,
"cvss_version": 2,
"summary": "The phar_get_entry_data function in ext/phar/util.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a .phar file with a crafted TAR archive entry in which the Link indicator references a file that does not exist.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=d698f0ae51f67c9cce870b09c59df3d6ba959244",
"http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html",
"http://lists.opensuse.org/opensuse-updates/2016-01/msg00099.html",
"http://lists.opensuse.org/opensuse-updates/2016-02/msg00037.html",
"http://www.debian.org/security/2015/dsa-3380",
"http://www.openwall.com/lists/oss-security/2015/10/05/8",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/76959",
"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.461720",
"http://www.ubuntu.com/usn/USN-2786-1",
"https://bugs.php.net/bug.php?id=69720",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205637",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=d698f0ae51f67c9cce870b09c59df3d6ba959244",
"http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html",
"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html",
"http://lists.opensuse.org/opensuse-updates/2016-01/msg00099.html",
"http://lists.opensuse.org/opensuse-updates/2016-02/msg00037.html",
"http://www.debian.org/security/2015/dsa-3380",
"http://www.openwall.com/lists/oss-security/2015/10/05/8",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/76959",
"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.461720",
"http://www.ubuntu.com/usn/USN-2786-1",
"https://bugs.php.net/bug.php?id=69720",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205637"
],
"epss": 0.26499,
"cvss": 6.8
},
"CVE-2015-7804": {
"verified": false,
"ranking_epss": 0.93545,
"cvss_v2": 6.8,
"cvss_version": 2,
"summary": "Off-by-one error in the phar_parse_zipfile function in ext/phar/zip.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service (uninitialized pointer dereference and application crash) by including the / filename in a .zip PHAR archive.",
"references": [
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=1ddf72180a52d247db88ea42a3e35f824a8fbda1",
"http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html",
"http://lists.opensuse.org/opensuse-updates/2016-01/msg00099.html",
"http://www.debian.org/security/2015/dsa-3380",
"http://www.openwall.com/lists/oss-security/2015/10/05/8",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/76959",
"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.461720",
"http://www.ubuntu.com/usn/USN-2786-1",
"https://bugs.php.net/bug.php?id=70433",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205637",
"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=1ddf72180a52d247db88ea42a3e35f824a8fbda1",
"http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html",
"http://lists.opensuse.org/opensuse-updates/2016-01/msg00099.html",
"http://www.debian.org/security/2015/dsa-3380",
"http://www.openwall.com/lists/oss-security/2015/10/05/8",
"http://www.php.net/ChangeLog-5.php",
"http://www.securityfocus.com/bid/76959",
"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.461720",
"http://www.ubuntu.com/usn/USN-2786-1",
"https://bugs.php.net/bug.php?id=70433",
"https://security.gentoo.org/glsa/201606-10",
"https://support.apple.com/HT205637"
],
"epss": 0.11431,
"cvss": 6.8
},
"CVE-2018-1301": {
"verified": false,
"ranking_epss": 0.91753,
"cvss_v2": 4.3,
"cvss_version": 3,
"summary": "A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size limit is reached by reading the HTTP header. This vulnerability is considered very hard if not impossible to trigger in non-debug mode (both log and build level), so it is classified as low risk for common server usage.",
"references": [
"http://www.openwall.com/lists/oss-security/2018/03/24/2",
"http://www.securityfocus.com/bid/103515",
"http://www.securitytracker.com/id/1040573",
"https://access.redhat.com/errata/RHSA-2018:3558",
"https://access.redhat.com/errata/RHSA-2019:0366",
"https://access.redhat.com/errata/RHSA-2019:0367",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2018/05/msg00020.html",
"https://security.netapp.com/advisory/ntap-20180601-0004/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",
"https://usn.ubuntu.com/3627-1/",
"https://usn.ubuntu.com/3627-2/",
"https://usn.ubuntu.com/3937-2/",
"https://www.debian.org/security/2018/dsa-4164",
"https://www.tenable.com/security/tns-2019-09",
"http://www.openwall.com/lists/oss-security/2018/03/24/2",
"http://www.securityfocus.com/bid/103515",
"http://www.securitytracker.com/id/1040573",
"https://access.redhat.com/errata/RHSA-2018:3558",
"https://access.redhat.com/errata/RHSA-2019:0366",
"https://access.redhat.com/errata/RHSA-2019:0367",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2018/05/msg00020.html",
"https://security.netapp.com/advisory/ntap-20180601-0004/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",
"https://usn.ubuntu.com/3627-1/",
"https://usn.ubuntu.com/3627-2/",
"https://usn.ubuntu.com/3937-2/",
"https://www.debian.org/security/2018/dsa-4164",
"https://www.tenable.com/security/tns-2019-09"
],
"epss": 0.07499,
"cvss": 5.9
},
"CVE-2016-0736": {
"verified": false,
"ranking_epss": 0.97392,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured ciphers with possibly either CBC or ECB modes of operation (AES256-CBC by default), hence no selectable or builtin authenticated encryption. This made it vulnerable to padding oracle attacks, particularly with CBC.",
"references": [
"http://rhn.redhat.com/errata/RHSA-2017-1415.html",
"http://www.debian.org/security/2017/dsa-3796",
"http://www.securityfocus.com/bid/95078",
"http://www.securitytracker.com/id/1037508",
"https://access.redhat.com/errata/RHSA-2017:0906",
"https://access.redhat.com/errata/RHSA-2017:1161",
"https://access.redhat.com/errata/RHSA-2017:1413",
"https://access.redhat.com/errata/RHSA-2017:1414",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us",
"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-0736",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://security.gentoo.org/glsa/201701-36",
"https://security.netapp.com/advisory/ntap-20180423-0001/",
"https://support.apple.com/HT208221",
"https://www.exploit-db.com/exploits/40961/",
"https://www.tenable.com/security/tns-2017-04",
"http://rhn.redhat.com/errata/RHSA-2017-1415.html",
"http://www.debian.org/security/2017/dsa-3796",
"http://www.securityfocus.com/bid/95078",
"http://www.securitytracker.com/id/1037508",
"https://access.redhat.com/errata/RHSA-2017:0906",
"https://access.redhat.com/errata/RHSA-2017:1161",
"https://access.redhat.com/errata/RHSA-2017:1413",
"https://access.redhat.com/errata/RHSA-2017:1414",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us",
"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-0736",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://security.gentoo.org/glsa/201701-36",
"https://security.netapp.com/advisory/ntap-20180423-0001/",
"https://support.apple.com/HT208221",
"https://www.exploit-db.com/exploits/40961/",
"https://www.tenable.com/security/tns-2017-04"
],
"epss": 0.4168,
"cvss": 7.5
},
"CVE-2018-1303": {
"verified": false,
"ranking_epss": 0.97314,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while preparing data to be cached in shared memory. It could be used as a Denial of Service attack against users of mod_cache_socache. The vulnerability is considered as low risk since mod_cache_socache is not widely used, mod_cache_disk is not concerned by this vulnerability.",
"references": [
"http://www.openwall.com/lists/oss-security/2018/03/24/3",
"http://www.securityfocus.com/bid/103522",
"http://www.securitytracker.com/id/1040572",
"https://access.redhat.com/errata/RHSA-2018:3558",
"https://access.redhat.com/errata/RHSA-2019:0366",
"https://access.redhat.com/errata/RHSA-2019:0367",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re473305a65b4db888e3556e4dae10c2a04ee89dcff2e26ecdbd860a9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
"https://security.netapp.com/advisory/ntap-20180601-0004/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",
"https://usn.ubuntu.com/3627-1/",
"https://usn.ubuntu.com/3627-2/",
"https://www.debian.org/security/2018/dsa-4164",
"https://www.tenable.com/security/tns-2019-09",
"http://www.openwall.com/lists/oss-security/2018/03/24/3",
"http://www.securityfocus.com/bid/103522",
"http://www.securitytracker.com/id/1040572",
"https://access.redhat.com/errata/RHSA-2018:3558",
"https://access.redhat.com/errata/RHSA-2019:0366",
"https://access.redhat.com/errata/RHSA-2019:0367",
"https://httpd.apache.org/security/vulnerabilities_24.html",
"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/re473305a65b4db888e3556e4dae10c2a04ee89dcff2e26ecdbd860a9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
"https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E",
"https://security.netapp.com/advisory/ntap-20180601-0004/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",
"https://usn.ubuntu.com/3627-1/",
"https://usn.ubuntu.com/3627-2/",
"https://www.debian.org/security/2018/dsa-4164",
"https://www.tenable.com/security/tns-2019-09"
],
"epss": 0.40137,
"cvss": 7.5
},
"CVE-2017-16642": {
"verified": false,
"ranking_epss": 0.92193,
"cvss_v2": 5,
"cvss_version": 3,
"summary": "In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: this is a different issue than CVE-2017-11145.",
"references": [
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/101745",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://bugs.php.net/bug.php?id=75055",
"https://github.com/derickr/timelib/commit/aa9156006e88565e1f1a5f7cc088b18322d57536",
"https://github.com/php/php-src/commit/5c0455bf2c8cd3c25401407f158e820aa3b239e1",
"https://security.netapp.com/advisory/ntap-20181123-0001/",
"https://usn.ubuntu.com/3566-1/",
"https://www.debian.org/security/2018/dsa-4080",
"https://www.debian.org/security/2018/dsa-4081",
"https://www.exploit-db.com/exploits/43133/",
"http://php.net/ChangeLog-5.php",
"http://php.net/ChangeLog-7.php",
"http://www.securityfocus.com/bid/101745",
"https://access.redhat.com/errata/RHSA-2018:1296",
"https://access.redhat.com/errata/RHSA-2019:2519",
"https://bugs.php.net/bug.php?id=75055",
"https://github.com/derickr/timelib/commit/aa9156006e88565e1f1a5f7cc088b18322d57536",
"https://github.com/php/php-src/commit/5c0455bf2c8cd3c25401407f158e820aa3b239e1",
"https://security.netapp.com/advisory/ntap-20181123-0001/",
"https://usn.ubuntu.com/3566-1/",
"https://www.debian.org/security/2018/dsa-4080",
"https://www.debian.org/security/2018/dsa-4081",
"https://www.exploit-db.com/exploits/43133/"
],
"epss": 0.08257,
"cvss": 7.5
}
},
"product": "Apache httpd",
"http": {
"status": 200,
"robots_hash": null,
"redirects": [],
"title_hash": -268790447,
"securitytxt": null,
"title": "Lumma Device Index Page",
"sitemap_hash": null,
"html_hash": 1738074742,
"robots": null,
"dom_hash": -572218902,
"headers_hash": 2028843718,
"host": "190.57.250.99",
"html": "<HTML>\n<HEAD>\n<TITLE>Lumma Device Index Page</TITLE>\n<LINK REL='stylesheet' TYPE='text/css' HREF='default.css'>\n</HEAD>\n<BODY bgcolor=\"#ffffff\" text=\"#000000\">\n<CENTER>\n<DIV><FONT FACE='Arial' SIZE='+1'><B>Lumma Device Index Page - April 2, 2026</B></FONT></DIV>\n<HR>\n<DIV STYLE='width: 100%'>\n<TABLE CLASS=\"gradient-style\">\n <THEAD><TR><TH COLSPAN='2'>Menu</TH></TR></THEAD>\n <TBODY>\n<TR> <TD ONCLICK=\"window.location='/nagvis/'\">\n <A HREF='/nagvis/'><IMG SRC='images/nagvis.png'><BR>Nagvis</A>\n </TD>\n <TD ONCLICK=\"window.location='/dnsi/'\">\n <A HREF='/dnsi/'><IMG SRC='images/dnsi.png'><BR>DNSI</A>\n </TD>\n </TBODY>\n</TABLE>\n</DIV>\n<HR>\n</CENTER>\n</BODY>\n</HTML>\n",
"location": "/",
"components": {
"CentOS": {
"categories": [
"Operating systems"
]
},
"Python": {
"categories": [
"Programming languages"
],
"versions": [
"2.7.5"
]
},
"OpenSSL": {
"categories": [
"Web server extensions"
],
"versions": [
"1.0.2k"
]
},
"Apache HTTP Server": {
"categories": [
"Web servers"
],
"versions": [
"2.4.6"
]
},
"PHP": {
"categories": [
"Programming languages"
],
"versions": [
"5.4.16"
]
},
"mod_wsgi": {
"categories": [
"Web server extensions"
],
"versions": [
"3.4"
]
}
},
"securitytxt_hash": null,
"server": "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.4.16 mod_wsgi/3.4 Python/2.7.5",
"sitemap": null,
"server_hash": 79436855
},
"tags": [
"eol-product"
],
"timestamp": "2026-04-02T18:34:34.310363",
"hostnames": [],
"org": "Gigared S.A.",
"data": "HTTP/1.1 200 OK\r\nDate: Thu, 02 Apr 2026 18:34:34 GMT\r\nServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.4.16 mod_wsgi/3.4 Python/2.7.5\r\nX-Powered-By: PHP/5.4.16\r\nContent-Length: 725\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n",
"asn": "AS20207",
"cpe23": [
"cpe:2.3:a:apache:http_server:2.4.6",
"cpe:2.3:a:modwsgi:mod_wsgi:3.4",
"cpe:2.3:a:openssl:openssl:1.0.2k",
"cpe:2.3:a:php:php:5.4.16",
"cpe:2.3:a:python:python:2.7.5",
"cpe:2.3:o:centos:centos"
],
"info": "(CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.4.16 mod_wsgi/3.4 Python/2.7.5",
"isp": "Gigared S.A.",
"cpe": [
"cpe:/a:apache:http_server:2.4.6",
"cpe:/a:modwsgi:mod_wsgi:3.4",
"cpe:/a:openssl:openssl:1.0.2k",
"cpe:/a:php:php:5.4.16",
"cpe:/a:python:python:2.7.5",
"cpe:/o:centos:centos"
],
"domains": [],
"ip_str": "190.57.250.99",
"os": null,
"_shodan": {
"region": "na",
"ptr": true,
"module": "http",
"id": "e0e0d44f-020a-4ea7-82cf-7aff1a024dfc",
"options": {},
"crawler": "1e4769fde0b9dbe1f84ba3a427cb5b0e415246c1"
}
}