CVE-2017-16642: canonical ubuntu_linux Out-of-bounds Read
Vulnerability summary
CVE-2017-16642 is a high (CVSS 7.5) Out-of-bounds Read vulnerability in canonical ubuntu_linux. EPSS estimates a 26.37% chance of exploitation in the next 30 days, higher than 98% of scored vulnerabilities. 1 public exploit is recorded.
Public exploit (exploit-database, 09-11-2017)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 8 · Related 4Timeline
- 07-11-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: this is a different issue than CVE-2017-11145.
CVSS metrics
3 scores · 2 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS trend
Probability
26.37%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
No change 0.00 pp
From 26.37% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundPHP 7.1.8 - Heap Buffer Overflow
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Netapp2 products
Ubuntu2 products
- php5< 5.5.9+dfsg-1ubuntu4.23
- php7.0< 7.0.25-0ubuntu0.16.04.1
Canonical1 product
- ubuntu_linuxEOL14.04
Debian1 product
- debian_linuxEOL8.0 | 9.0
Php1 product
- php< 5.6.32 | ≥ 7.0.0, < 7.0.25 | ≥ 7.1.0, < 7.1.11
5 vendors · 7 products
References
16 links- www.exploit-db.com/exploits/43133/ExploitX Refsource EXPLOIT DBIssue TrackingThird Party AdvisoryVDB Entry
Show all 16 references
- github.com/derickr/timelib/commit/aa9156006e88565e1f1a5f7cc088b18322d57536X Refsource CONFIRMIssue TrackingPatchThird Party Advisory
- github.com/php/php-src/commit/5c0455bf2c8cd3c25401407f158e820aa3b239e1X Refsource CONFIRMIssue TrackingPatchThird Party Advisory