PHP Update
3068Warning Date
Severity Level
Warning Number
Target Sector
29 October, 2019
● High
2019-571
All
Description:
PHP has released security update to address a vulnerability in the following versions:
- PHP 7.1 Prior to Version 7.1.33
- PHP 7.2 Prior to Version 7.2.24
- PHP 7.3 Prior to Version 7.3.11
Threats:
Attacker could exploit this vulnerability by doing the following:
- Denial of service attack (DoS).
- Install programs; view, change, or delete data; or create new accounts with full user rights.
- Execute arbitrary code remotely.
Best practice and Recommendations:
The CERT team encourages users to apply the necessary updates: