PHP Update
3486Warning Date
Severity Level
Warning Number
Target Sector
8 September, 2019
● High
2019-410
All
Description:
PHP has released security update to address a vulnerability in the following versions:
- PHP 7.1 versions prior to 7.1.32
- PHP 7.2 versions prior to 7.2.22
- PHP 7.3 versions prior to 7.3.9
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Denial of service attack (DoS).
- Install programs; view, change, or delete data; or create new accounts with full user rights.
- Execute arbitrary code.
Best practice and Recommendations:
The CERT team encourages users to apply the necessary updates: