Cloud Foundry Logo
blog single gear
Security Advisory

CVE-2013-7456 and CVE-2016-5093 PHP vulnerabilities

CVE-2013-7456 and CVE-2016-5093 PHP vulnerabilities

Severity

Low

Vendor

PHP

Versions Affected

  • Cloud Foundry PHP buildpack versions prior to 4.3.14

Description

Several out-of-bounds reads were discovered in PHP and its dependencies that could cause memory leaks or other unexpected conditions.

Mitigation

Users of affected versions should apply the following mitigation:

  • Upgrade the PHP Buildpack to v4.3.14 or later and restage all applications that use automated buildpack detection

References

Cloud Foundry Foundation Security Team Profile Image

Cloud Foundry Foundation Security Team, AUTHOR

SEE ALL ARTICLES