CVE-2016-1283

03.01.2016, 00:59

The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\"){99}-))(?J)(?'R'(?'R'<((?'RR'(?'R'\){97)?J)?J)(?'R'(?'R'\){99|(:(?|(?'R')(\k'R')|((?'R')))H'R'R)(H'R))))))/ pattern and related patterns with named subgroups, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	9.8 CRITICAL	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 94%

Affected Products (NVD)

Vendor	Product	Version
pcre	pcre	8.38
php	php	5.6.0 ≤ 𝑥 < 5.6.32
php	php	7.0.0 ≤ 𝑥 < 7.0.25
php	php	7.1.0 ≤ 𝑥 < 7.1.11
oracle	solaris	11.3

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

pcre2

bookworm	10.42-1 fixed
bullseye	10.36-2+deb11u1 fixed
sid	10.42-4 fixed
squeeze	not-affected
trixie	10.42-4 fixed
wheezy	not-affected

pcre3

bookworm	2:8.39-15 fixed
bullseye	2:8.39-13 fixed
sid	2:8.39-15.1 fixed
squeeze	not-affected
wheezy	not-affected

Ubuntu Releases

Ubuntu Product

Codename

pcre2

artful	ignored
bionic	not-affected
cosmic	not-affected
precise	dne
trusty	dne
vivid	dne
wily	dne
xenial	not-affected
yakkety	ignored
zesty	ignored

pcre3

artful	not-affected
bionic	not-affected
cosmic	not-affected
precise	not-affected
trusty	not-affected
vivid	ignored
wily	Fixed 2:8.35-7.1ubuntu1.3 released
xenial	not-affected
yakkety	not-affected
zesty	not-affected

openSUSE / SLES Releases

openSUSE Product

Release

libpcre1

suse enterprise desktop 15	8.41-4.20 fixed
suse enterprise desktop 15 SP1	8.41-4.20 fixed
suse enterprise desktop 15 SP2	8.41-4.20 fixed
suse enterprise desktop 15 SP3	8.41-4.20 fixed
suse enterprise desktop 15 SP4	8.45-20.10.1 fixed
suse enterprise desktop 15 SP5	8.45-150000.20.13.1 fixed
suse enterprise desktop 15 SP6	8.45-150000.20.13.1 fixed
suse enterprise desktop 15 SP7	8.45-150000.20.13.1 fixed
suse enterprise sap 12 SP1	8.39-7.1 fixed
suse enterprise sap 12 SP2	8.39-7.1 fixed
suse enterprise sap 15	8.41-4.20 fixed
suse enterprise sap 15 SP1	8.41-4.20 fixed
suse enterprise sap 15 SP2	8.41-4.20 fixed
suse enterprise sap 15 SP3	8.41-4.20 fixed
suse enterprise sap 15 SP4	8.45-20.10.1 fixed
suse enterprise sap 15 SP5	8.45-150000.20.13.1 fixed
suse enterprise sap 15 SP6	8.45-150000.20.13.1 fixed
suse enterprise sap 15 SP7	8.45-150000.20.13.1 fixed
suse enterprise server 12	8.39-7.1 fixed
suse enterprise server 12 SP1	8.39-7.1 fixed
suse enterprise server 12 SP2	8.39-7.1 fixed
suse enterprise server 12 SP4	8.39-8.3.1 fixed
suse enterprise server 12 SP5	8.39-8.3.1 fixed
suse enterprise server 15	8.41-4.20 fixed
suse enterprise server 15 SP1	8.41-4.20 fixed
suse enterprise server 15 SP2	8.41-4.20 fixed
suse enterprise server 15 SP3	8.41-4.20 fixed
suse enterprise server 15 SP4	8.45-20.10.1 fixed
suse enterprise server 15 SP5	8.45-150000.20.13.1 fixed
suse enterprise server 15 SP6	8.45-150000.20.13.1 fixed
suse enterprise server 15 SP7	8.45-150000.20.13.1 fixed

libpcre1-32bit

suse enterprise desktop 15	8.41-4.20 fixed
suse enterprise desktop 15 SP1	8.41-4.20 fixed
suse enterprise desktop 15 SP2	8.41-4.20 fixed
suse enterprise desktop 15 SP3	8.41-4.20 fixed
suse enterprise desktop 15 SP4	8.45-20.10.1 fixed
suse enterprise desktop 15 SP5	8.45-150000.20.13.1 fixed
suse enterprise desktop 15 SP6	8.45-150000.20.13.1 fixed
suse enterprise desktop 15 SP7	8.45-150000.20.13.1 fixed
suse enterprise sap 12 SP1	8.39-7.1 fixed
suse enterprise sap 12 SP2	8.39-7.1 fixed
suse enterprise sap 15	8.41-4.20 fixed
suse enterprise sap 15 SP1	8.41-4.20 fixed
suse enterprise sap 15 SP2	8.41-4.20 fixed
suse enterprise sap 15 SP3	8.41-4.20 fixed
suse enterprise sap 15 SP4	8.45-20.10.1 fixed
suse enterprise sap 15 SP5	8.45-150000.20.13.1 fixed
suse enterprise sap 15 SP6	8.45-150000.20.13.1 fixed
suse enterprise sap 15 SP7	8.45-150000.20.13.1 fixed
suse enterprise server 12	8.39-7.1 fixed
suse enterprise server 12 SP1	8.39-7.1 fixed
suse enterprise server 12 SP2	8.39-7.1 fixed
suse enterprise server 12 SP4	8.39-8.3.1 fixed
suse enterprise server 12 SP5	8.39-8.3.1 fixed
suse enterprise server 15	8.41-4.20 fixed
suse enterprise server 15 SP1	8.41-4.20 fixed
suse enterprise server 15 SP2	8.41-4.20 fixed
suse enterprise server 15 SP3	8.41-4.20 fixed
suse enterprise server 15 SP4	8.45-20.10.1 fixed
suse enterprise server 15 SP5	8.45-150000.20.13.1 fixed
suse enterprise server 15 SP6	8.45-150000.20.13.1 fixed
suse enterprise server 15 SP7	8.45-150000.20.13.1 fixed

libpcre16-0

suse enterprise desktop 15	8.41-4.20 fixed
suse enterprise desktop 15 SP1	8.41-4.20 fixed
suse enterprise desktop 15 SP2	8.41-4.20 fixed
suse enterprise desktop 15 SP3	8.41-4.20 fixed
suse enterprise desktop 15 SP4	8.45-20.10.1 fixed
suse enterprise desktop 15 SP5	8.45-150000.20.13.1 fixed
suse enterprise desktop 15 SP6	8.45-150000.20.13.1 fixed
suse enterprise desktop 15 SP7	8.45-150000.20.13.1 fixed
suse enterprise sap 12 SP1	8.39-7.1 fixed
suse enterprise sap 12 SP2	8.39-7.1 fixed
suse enterprise sap 15	8.41-4.20 fixed
suse enterprise sap 15 SP1	8.41-4.20 fixed
suse enterprise sap 15 SP2	8.41-4.20 fixed
suse enterprise sap 15 SP3	8.41-4.20 fixed
suse enterprise sap 15 SP4	8.45-20.10.1 fixed
suse enterprise sap 15 SP5	8.45-150000.20.13.1 fixed
suse enterprise sap 15 SP6	8.45-150000.20.13.1 fixed
suse enterprise sap 15 SP7	8.45-150000.20.13.1 fixed
suse enterprise server 12	8.39-7.1 fixed
suse enterprise server 12 SP1	8.39-7.1 fixed
suse enterprise server 12 SP2	8.39-7.1 fixed
suse enterprise server 12 SP4	8.39-8.3.1 fixed
suse enterprise server 12 SP5	8.39-8.3.1 fixed
suse enterprise server 15	8.41-4.20 fixed
suse enterprise server 15 SP1	8.41-4.20 fixed
suse enterprise server 15 SP2	8.41-4.20 fixed
suse enterprise server 15 SP3	8.41-4.20 fixed
suse enterprise server 15 SP4	8.45-20.10.1 fixed
suse enterprise server 15 SP5	8.45-150000.20.13.1 fixed
suse enterprise server 15 SP6	8.45-150000.20.13.1 fixed
suse enterprise server 15 SP7	8.45-150000.20.13.1 fixed

libpcrecpp0

suse enterprise desktop 12 SP1	8.39-7.1 fixed
suse enterprise desktop 12 SP2	8.39-7.1 fixed
suse enterprise desktop 12 SP3	8.39-7.1 fixed
suse enterprise desktop 12 SP4	8.39-8.3.1 fixed
suse enterprise desktop 15	8.41-4.20 fixed
suse enterprise desktop 15 SP1	8.41-4.20 fixed
suse enterprise desktop 15 SP2	8.41-4.20 fixed
suse enterprise desktop 15 SP3	8.41-4.20 fixed
suse enterprise desktop 15 SP4	8.45-20.10.1 fixed
suse enterprise desktop 15 SP5	8.45-150000.20.13.1 fixed
suse enterprise desktop 15 SP6	8.45-150000.20.13.1 fixed
suse enterprise desktop 15 SP7	8.45-150000.20.13.1 fixed
suse enterprise sap 12 SP1	8.39-7.1 fixed
suse enterprise sap 12 SP2	8.39-7.1 fixed
suse enterprise sap 12 SP3	8.39-7.1 fixed
suse enterprise sap 12 SP4	8.39-8.3.1 fixed
suse enterprise sap 12 SP5	8.39-7.1 fixed
suse enterprise sap 15	8.41-4.20 fixed
suse enterprise sap 15 SP1	8.41-4.20 fixed
suse enterprise sap 15 SP2	8.41-4.20 fixed
suse enterprise sap 15 SP3	8.41-4.20 fixed
suse enterprise sap 15 SP4	8.45-20.10.1 fixed
suse enterprise sap 15 SP5	8.45-150000.20.13.1 fixed
suse enterprise sap 15 SP6	8.45-150000.20.13.1 fixed
suse enterprise sap 15 SP7	8.45-150000.20.13.1 fixed
suse enterprise server 12 SP1	8.39-7.1 fixed
suse enterprise server 12 SP2	8.39-7.1 fixed
suse enterprise server 12 SP3	8.39-7.1 fixed
suse enterprise server 12 SP4	8.39-8.3.1 fixed
suse enterprise server 12 SP5	8.39-7.1 fixed
suse enterprise server 15	8.41-4.20 fixed
suse enterprise server 15 SP1	8.41-4.20 fixed
suse enterprise server 15 SP2	8.41-4.20 fixed
suse enterprise server 15 SP3	8.41-4.20 fixed
suse enterprise server 15 SP4	8.45-20.10.1 fixed
suse enterprise server 15 SP5	8.45-150000.20.13.1 fixed
suse enterprise server 15 SP6	8.45-150000.20.13.1 fixed
suse enterprise server 15 SP7	8.45-150000.20.13.1 fixed
suse enterprise workstation 12 SP1	8.39-7.1 fixed
suse enterprise workstation 12 SP2	8.39-7.1 fixed
suse enterprise workstation 12 SP3	8.39-7.1 fixed
suse enterprise workstation 12 SP4	8.39-8.3.1 fixed
suse enterprise workstation 12 SP5	8.39-7.1 fixed

libpcrecpp0-32bit

suse enterprise desktop 12 SP1	8.39-7.1 fixed
suse enterprise desktop 12 SP2	8.39-7.1 fixed
suse enterprise desktop 12 SP3	8.39-7.1 fixed
suse enterprise desktop 12 SP4	8.39-8.3.1 fixed
suse enterprise desktop 15	8.41-4.20 fixed
suse enterprise desktop 15 SP1	8.41-4.20 fixed
suse enterprise desktop 15 SP2	8.41-4.20 fixed
suse enterprise desktop 15 SP3	8.41-4.20 fixed
suse enterprise desktop 15 SP4	8.45-20.10.1 fixed
suse enterprise desktop 15 SP5	8.45-150000.20.13.1 fixed
suse enterprise desktop 15 SP6	8.45-150000.20.13.1 fixed
suse enterprise desktop 15 SP7	8.45-150000.20.13.1 fixed
suse enterprise sap 12 SP1	8.39-7.1 fixed
suse enterprise sap 12 SP2	8.39-7.1 fixed
suse enterprise sap 12 SP3	8.39-7.1 fixed
suse enterprise sap 12 SP4	8.39-8.3.1 fixed
suse enterprise sap 12 SP5	8.39-7.1 fixed
suse enterprise sap 15	8.41-4.20 fixed
suse enterprise sap 15 SP1	8.41-4.20 fixed
suse enterprise sap 15 SP2	8.41-4.20 fixed
suse enterprise sap 15 SP3	8.41-4.20 fixed
suse enterprise sap 15 SP4	8.45-20.10.1 fixed
suse enterprise sap 15 SP5	8.45-150000.20.13.1 fixed
suse enterprise sap 15 SP6	8.45-150000.20.13.1 fixed
suse enterprise sap 15 SP7	8.45-150000.20.13.1 fixed
suse enterprise server 12 SP1	8.39-7.1 fixed
suse enterprise server 12 SP2	8.39-7.1 fixed
suse enterprise server 12 SP3	8.39-7.1 fixed
suse enterprise server 12 SP4	8.39-8.3.1 fixed
suse enterprise server 12 SP5	8.39-7.1 fixed
suse enterprise server 15	8.41-4.20 fixed
suse enterprise server 15 SP1	8.41-4.20 fixed
suse enterprise server 15 SP2	8.41-4.20 fixed
suse enterprise server 15 SP3	8.41-4.20 fixed
suse enterprise server 15 SP4	8.45-20.10.1 fixed
suse enterprise server 15 SP5	8.45-150000.20.13.1 fixed
suse enterprise server 15 SP6	8.45-150000.20.13.1 fixed
suse enterprise server 15 SP7	8.45-150000.20.13.1 fixed
suse enterprise workstation 12 SP1	8.39-7.1 fixed
suse enterprise workstation 12 SP2	8.39-7.1 fixed
suse enterprise workstation 12 SP3	8.39-7.1 fixed
suse enterprise workstation 12 SP4	8.39-8.3.1 fixed
suse enterprise workstation 12 SP5	8.39-7.1 fixed

libpcreposix0

suse enterprise desktop 15	8.41-4.20 fixed
suse enterprise desktop 15 SP1	8.41-4.20 fixed
suse enterprise desktop 15 SP2	8.41-4.20 fixed
suse enterprise desktop 15 SP3	8.41-4.20 fixed
suse enterprise desktop 15 SP4	8.45-20.10.1 fixed
suse enterprise desktop 15 SP5	8.45-150000.20.13.1 fixed
suse enterprise desktop 15 SP6	8.45-150000.20.13.1 fixed
suse enterprise desktop 15 SP7	8.45-150000.20.13.1 fixed
suse enterprise sap 15	8.41-4.20 fixed
suse enterprise sap 15 SP1	8.41-4.20 fixed
suse enterprise sap 15 SP2	8.41-4.20 fixed
suse enterprise sap 15 SP3	8.41-4.20 fixed
suse enterprise sap 15 SP4	8.45-20.10.1 fixed
suse enterprise sap 15 SP5	8.45-150000.20.13.1 fixed
suse enterprise sap 15 SP6	8.45-150000.20.13.1 fixed
suse enterprise sap 15 SP7	8.45-150000.20.13.1 fixed
suse enterprise server 15	8.41-4.20 fixed
suse enterprise server 15 SP1	8.41-4.20 fixed
suse enterprise server 15 SP2	8.41-4.20 fixed
suse enterprise server 15 SP3	8.41-4.20 fixed
suse enterprise server 15 SP4	8.45-20.10.1 fixed
suse enterprise server 15 SP5	8.45-150000.20.13.1 fixed
suse enterprise server 15 SP6	8.45-150000.20.13.1 fixed
suse enterprise server 15 SP7	8.45-150000.20.13.1 fixed

pcre-devel

suse enterprise desktop 15	8.41-4.20 fixed
suse enterprise desktop 15 SP1	8.41-4.20 fixed
suse enterprise desktop 15 SP2	8.41-4.20 fixed
suse enterprise desktop 15 SP3	8.41-4.20 fixed
suse enterprise desktop 15 SP4	8.45-20.10.1 fixed
suse enterprise desktop 15 SP5	8.45-150000.20.13.1 fixed
suse enterprise desktop 15 SP6	8.45-150000.20.13.1 fixed
suse enterprise desktop 15 SP7	8.45-150000.20.13.1 fixed
suse enterprise sap 15	8.41-4.20 fixed
suse enterprise sap 15 SP1	8.41-4.20 fixed
suse enterprise sap 15 SP2	8.41-4.20 fixed
suse enterprise sap 15 SP3	8.41-4.20 fixed
suse enterprise sap 15 SP4	8.45-20.10.1 fixed
suse enterprise sap 15 SP5	8.45-150000.20.13.1 fixed
suse enterprise sap 15 SP6	8.45-150000.20.13.1 fixed
suse enterprise sap 15 SP7	8.45-150000.20.13.1 fixed
suse enterprise server 15	8.41-4.20 fixed
suse enterprise server 15 SP1	8.41-4.20 fixed
suse enterprise server 15 SP2	8.41-4.20 fixed
suse enterprise server 15 SP3	8.41-4.20 fixed
suse enterprise server 15 SP4	8.45-20.10.1 fixed
suse enterprise server 15 SP5	8.45-150000.20.13.1 fixed
suse enterprise server 15 SP6	8.45-150000.20.13.1 fixed
suse enterprise server 15 SP7	8.45-150000.20.13.1 fixed

pcre-tools

suse enterprise desktop 15	8.41-4.20 fixed
suse enterprise desktop 15 SP1	8.41-4.20 fixed
suse enterprise desktop 15 SP2	8.41-4.20 fixed
suse enterprise desktop 15 SP3	8.41-4.20 fixed
suse enterprise desktop 15 SP4	8.45-20.10.1 fixed
suse enterprise desktop 15 SP5	8.45-150000.20.13.1 fixed
suse enterprise sap 15	8.41-4.20 fixed
suse enterprise sap 15 SP1	8.41-4.20 fixed
suse enterprise sap 15 SP2	8.41-4.20 fixed
suse enterprise sap 15 SP3	8.41-4.20 fixed
suse enterprise sap 15 SP4	8.45-20.10.1 fixed
suse enterprise sap 15 SP5	8.45-150000.20.13.1 fixed
suse enterprise server 15	8.41-4.20 fixed
suse enterprise server 15 SP1	8.41-4.20 fixed
suse enterprise server 15 SP2	8.41-4.20 fixed
suse enterprise server 15 SP3	8.41-4.20 fixed
suse enterprise server 15 SP4	8.45-20.10.1 fixed
suse enterprise server 15 SP5	8.45-150000.20.13.1 fixed

Amazon Linux Releases

Amazon Package

Release

php56

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-bcmath

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-cli

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-common

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-dba

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-dbg

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-debuginfo

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-devel

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-embedded

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-enchant

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-fpm

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-gd

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-gmp

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-imap

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-intl

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-ldap

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-mbstring

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-mcrypt

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-mssql

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-mysqlnd

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-odbc

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-opcache

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-pdo

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-pgsql

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-process

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-pspell

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-recode

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-snmp

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-soap

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-tidy

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-xml

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php56-xmlrpc

Amazon Linux 1

0:5.6.32-1.135.amzn1

fixed

php70

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-bcmath

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-cli

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-common

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-dba

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-dbg

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-debuginfo

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-devel

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-embedded

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-enchant

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-fpm

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-gd

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-gmp

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-imap

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-intl

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-json

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-ldap

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-mbstring

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-mcrypt

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-mysqlnd

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-odbc

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-opcache

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-pdo

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-pdo-dblib

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-pgsql

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-process

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-pspell

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-recode

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-snmp

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-soap

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-tidy

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-xml

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-xmlrpc

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php70-zip

Amazon Linux 1

0:7.0.25-1.25.amzn1

fixed

php71

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-bcmath

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-cli

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-common

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-dba

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-dbg

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-debuginfo

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-devel

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-embedded

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-enchant

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-fpm

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-gd

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-gmp

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-imap

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-intl

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-json

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-ldap

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-mbstring

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-mcrypt

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-mysqlnd

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-odbc

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-opcache

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-pdo

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-pdo-dblib

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-pgsql

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-process

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-pspell

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-recode

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-snmp

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-soap

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-tidy

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-xml

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

php71-xmlrpc

Amazon Linux 1

0:7.1.11-1.28.amzn1

fixed

Known Exploits!

Common Weakness Enumeration

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

References

http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178193.html

http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178955.html

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

http://www.securityfocus.com/bid/79825

http://www.securitytracker.com/id/1034555

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.343110

https://access.redhat.com/errata/RHSA-2016:1132

https://bto.bluecoat.com/security-advisory/sa128

https://bugs.exim.org/show_bug.cgi?id=1767

https://security.gentoo.org/glsa/201607-02

https://www.tenable.com/security/tns-2016-18

https://www.tenable.com/security/tns-2017-14

http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178193.html

http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178955.html

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

http://www.securityfocus.com/bid/79825

http://www.securitytracker.com/id/1034555

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.343110

https://access.redhat.com/errata/RHSA-2016:1132

https://bto.bluecoat.com/security-advisory/sa128

https://bugs.exim.org/show_bug.cgi?id=1767

https://security.gentoo.org/glsa/201607-02

https://www.tenable.com/security/tns-2016-18

https://www.tenable.com/security/tns-2017-14