Skip to main content

PHP Phar Extension Multiple Vulnerabilities

Last Update Date: 5 Nov 2015 Release Date: 28 Oct 2015 3120 Views

RISK: Medium Risk

TYPE: Servers - Web Servers

TYPE: Web Servers

Multiple vulnerabilities were identified in PHP Phar Extension, which could lead to denial of service and information disclosure.


Impact

  • Denial of Service
  • Information Disclosure

System / Technologies affected

  • Versions prior to 5.4.45 (wheezy)
  • Versions prior to 5.6.14 (jessie)

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

  • Upgrade to version 5.4.45-0+deb7u2 (wheezy) or 5.6.14+dfsg-1 (jessie).

Vulnerability Identifier


Source


Related Link