Debian Php-Gettext vulnerabilities

2 known vulnerabilities affecting debian/php-gettext.

Total CVEs

2

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

CRITICAL2

Vulnerabilities

Page 1 of 1

CVE-2016-6175CRITICALCVSS 9.8PoCfixed in php-gettext 1.0.12-1 (bookworm)2016

CVE-2016-6175 [CRITICAL] CVE-2016-6175: php-gettext - Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote att... Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header. Scope: local bookworm: resolved (fixed in 1.0.12-1) bullseye: resolved (fixed in 1.0.12-1) sid: resolved (fixed in 1.0.12-1)

CVE-2015-8980CRITICALCVSS 9.8fixed in php-gettext 1.0.12-0.1 (bookworm)2015

CVE-2015-8980 [CRITICAL] CVE-2015-8980: php-gettext - The plural form formula in ngettext family of calls in php-gettext before 1.0.12... The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code. Scope: local bookworm: resolved (fixed in 1.0.12-0.1) bullseye: resolved (fixed in 1.0.12-0.1) sid: resolved (fixed in 1.0.12-0.1)