CVE-2017-11143

概要

参考情報

• openwall.com/lists/oss-security/2017/07/10/6 · Mailing List
• php.net/ChangeLog-5.php · Release Notes
• securityfocus.com/bid/99553
• access.redhat.com/errata/RHSA-2018:1296
• bugs.php.net/bug.php · Issue Tracking
• git.php.net
• security.netapp.com/advisory/ntap-20180112-0001
• debian.org/security/2018/dsa-4081
• tenable.com/security/tns-2017-12

php のその他の脆弱性

• CVE-2026-109619高 8.1悪用確認済み（CISA KEV）PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may…
• CVE-2026-109618緊急 9.8悪用確認済み（CISA KEV）PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not prope…
• CVE-2026-92842中 5.9The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars opti…
• CVE-2026-91768中 6.5The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowed_clients mat…
• CVE-2026-91769中 4.3PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to t…