USN-6199-1: PHP vulnerability

Reference Links

• https://ubuntu.com/security/CVE-2023-3247
• https://ubuntu.com/security/notices/USN-6199-2
• https://launchpad.net/ubuntu/+source/php8.1/8.1.12-1ubuntu4.2
• https://launchpad.net/ubuntu/+source/php8.1/8.1.7-1ubuntu3.5
• https://launchpad.net/ubuntu/+source/php8.1/8.1.2-1ubuntu2.13
• https://launchpad.net/ubuntu/+source/php7.4/7.4.3-4ubuntu2.19
• https://ubuntu.com/security/notices/USN-6199-1 (Advisory)

Child vulnerabilities

(Contains the following vulnerabilities)

• CVE-2023-3247

Frequently Asked Questions

• What is the severity of USN-6199-1?

  The severity of USN-6199-1 is moderate.

• What software is affected by USN-6199-1?

  The affected software includes PHP versions 8.1.12-1ubuntu4.2, 8.1.7-1ubuntu3.5, 8.1.2-1ubuntu2.13, 7.4.3-4ubuntu2.19.

• How can an attacker exploit the vulnerability described in USN-6199-1?

  An attacker could exploit the vulnerability in USN-6199-1 to expose sensitive information by incorrectly handling certain Digest authentication for SOAP.

• How can I fix the PHP vulnerability described in USN-6199-1?

  To fix the vulnerability, update PHP to the latest version provided in the remedy field of the affected software section.

• Where can I find more information about USN-6199-1?

  You can find more information about USN-6199-1 on the Ubuntu Security Notices page and the referenced links.