Oval Definition:oval:com.ubuntu.artful:def:201711147000
Revision Date:2017-07-10Version:1
Title:CVE-2017-11147 on Ubuntu 17.10 (artful) - medium.
Description:In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying malicious archive files to crash the PHP interpreter or potentially disclose information due to a buffer over-read in the phar_parse_pharfile function in ext/phar/phar.c.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2017-11147
Platform(s):Ubuntu 17.10
Product(s):
Definition Synopsis
  • Ubuntu 17.10 (artful) is installed.
  • AND NOT While related to the CVE in some way, the 'php7.1' package in artful is not affected (note: '7.1.6-2ubuntu1').
    • BACK