FLAT-ED7R9 – Vulnerability | Fluid Attacks Database

Database

Description

arbitrary code execution

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
packagist	phpunit/phpunit	>=4.8.19 <4.8.28 \|\| >=5.0.10 <5.6.3	4.8.28, 5.6.3
debian 11	phpunit	>=0 <5.4.6-2	5.4.6-2
debian 12	phpunit	>=0 <5.4.6-2	5.4.6-2
debian 13	phpunit	>=0 <5.4.6-2	5.4.6-2
alpm rolling_release	mediawiki	>=1.28.2-1 <1.28.3-1	1.28.3-1
debian 14	phpunit	>=0 <5.4.6-2	5.4.6-2

Aliases

1. CVE-2017-98412. NVD-2017-98413. OSV-2017-98414. OSV-DEBIAN-2017-98415. GCVE-2017-98416. security.gentoo.org7. SECURITY-TRACKER-CVE-2017-9841

References

1. https://github.com/sebastianbergmann/phpunit/pull/19552. https://github.com/sebastianbergmann/phpunit/pull/19563. https://github.com/sebastianbergmann/phpunit/commit/284a69fb88a2d0845d23f42974a583d8f59bf5a54. https://github.com/sebastianbergmann/phpunit/commit/3aaddb1c5bd9b9b8d070b4cf120e71c36fd084125. https://github.com/FriendsOfPHP/security-advisories/blob/master/phpunit/phpunit/CVE-2017-9841.yaml6. https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-98417. https://www.oracle.com/security-alerts/cpuoct2021.html8. http://web.archive.org/web/20170701212357/http://phpunit.vulnbusters.com9. http://www.securityfocus.com/bid/10179810. http://www.securitytracker.com/id/103981211. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9841.yaml12. https://github.com/mbrasile/CVE-2017-9841

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.