Revision Date: | 2013-05-02 | Version: | 1 | Title: | CVE-2012-5657 on Ubuntu 18.10 (cosmic) - medium. | Description: | The (1) Zend_Feed_Rss and (2) Zend_Feed_Atom classes in Zend_Feed in Zend Framework 1.11.x before 1.11.15 and 1.12.x before 1.12.1 allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, and possibly cause a denial of service (CPU and memory consumption) via an XML External Entity (XXE) attack.
| Family: | unix | Class: | vulnerability | Status: | | Reference(s): | CVE-2012-5657
| Platform(s): | Ubuntu 18.10
| Product(s): | | Definition Synopsis | Ubuntu 18.10 (cosmic) is installed. AND Package Information
NOT libzend-framework-php package in cosmic, while related to the CVE in some way, is not affected.
OR NOT zend-framework package in cosmic, while related to the CVE in some way, is not affected.
OR NOT zend-framework-bin package in cosmic, while related to the CVE in some way, is not affected.
OR NOT zendframework package in cosmic, while related to the CVE in some way, is not affected.
OR NOT zendframework-bin package in cosmic, while related to the CVE in some way, is not affected.
OR NOT zendframework-resources package in cosmic, while related to the CVE in some way, is not affected.
|
|