Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Masonm

#38459of 56,330
7.5Total CVSS
Vulnerabilities · 1
PT-2016-2121
7.5
2016-04-21
Php · Php · CVE-2015-8867
**Name of the Vulnerable Software and Affected Versions** PHP versions prior to 5.4.44 PHP versions 5.5.x prior to 5.5.28 PHP versions 5.6.x prior to 5.6.12 **Description** The issue is related to the incorrect interaction of the openssl random pseudo bytes function with the deprecated RAND pseudo bytes function in PHP. This can allow a remote attacker to defeat cryptographic protection mechanisms. **Recommendations** For PHP versions prior to 5.4.44, update to version 5.4.44 or later. For PHP versions 5.5.x prior to 5.5.28, update to version 5.5.28 or later. For PHP versions 5.6.x prior to 5.6.12, update to version 5.6.12 or later.