USN-5300-3: PHP vulnerabilities
USN-5300-1 fixed vulnerabilities in PHP. This update provides the corresponding updates for Ubuntu 21.10. Original advisory details: It was discovered that PHP incorrectly handled certain scripts. An attacker could possibly use this issue to cause a denial of service. (CVE-2015-9253, CVE-2017-8923, CVE-2017-9118, CVE-2017-9120) It was discovered that PHP incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service, or possibly obtain sensitive information. (CVE-2017-9119) It was discovered that PHP incorrectly handled certain scripts with XML parsing functions. An attacker could possibly use this issue to obtain sensitive information. (CVE-2021-21707)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID of the PHP vulnerabilities?
The vulnerability ID of the PHP vulnerabilities is USN-5300-3.
What is the severity of USN-5300-3?
The severity of USN-5300-3 is not specified.
How can an attacker exploit the PHP vulnerabilities?
An attacker can exploit the PHP vulnerabilities to cause a denial of service.
Which versions of PHP are affected by USN-5300-3?
PHP versions 8.0.8-1ubuntu0.3 are affected by USN-5300-3.
How can I fix the PHP vulnerabilities?
To fix the PHP vulnerabilities, update to version 8.0.8-1ubuntu0.3 of php8.0-fpm, php8.0-cli, and php8.0-cgi.