[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fT-UaGKzeHAEgBKG8wI7_iOtZmRSzDrgdv83zGb1dUjo":3,"g5a-risk:CVE-2017-16642":238},{"success":4,"data":5,"meta":236},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":68,"references":69,"referencesCount":150,"weaknesses":151,"weaknessesCount":160,"isActivelyExploited":161,"cisaInfo":15,"otxData":15,"relatedBlogPosts":162,"seoMetadata":163,"configurations":188,"relatedVendorCves":227,"notableEvents":228},"CVE-2017-16642","What is CVE-2017-16642?","In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext\u002Fdate\u002Flib\u002Fparse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: this is a different issue than CVE-2017-11145.","In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back of' dire...","2017-11-07T21:29:00.29","2025-04-20T01:37:25.86",7.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",3.9,3.6,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":34,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.26373,[39,39,39,39,39,39,39],"High",[43,47,52,55,60,65],{"vendor":44,"product":44,"version":45,"criteria":46,"vulnerable":4},"php","*","cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":53,"criteria":54,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":58,"criteria":59,"vulnerable":4},"canonical","ubuntu_linux","14.04","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",{"vendor":61,"product":62,"version":63,"criteria":64,"vulnerable":4},"netapp","storage_automation_store","-","cpe:2.3:a:netapp:storage_automation_store:-:*:*:*:*:*:*:*",{"vendor":61,"product":66,"version":63,"criteria":67,"vulnerable":4},"clustered_data_ontap","cpe:2.3:o:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",6,[70,77,80,86,90,93,96,101,104,108,112,116,119,124,126,128,130,132,134,136,138,140,142,144,146,148],{"url":71,"source":72,"tags":73},"http:\u002F\u002Fphp.net\u002FChangeLog-5.php","Php",[74,75,76],"Issue Tracking","Release Notes","Vendor Advisory",{"url":78,"source":72,"tags":79},"http:\u002F\u002Fphp.net\u002FChangeLog-7.php",[74,75,76],{"url":81,"source":82,"tags":83},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F101745","Securityfocus",[84,85],"Third Party Advisory","VDB Entry",{"url":87,"source":88,"tags":89},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:1296","Red Hat",[84],{"url":91,"source":88,"tags":92},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:2519",[],{"url":94,"source":72,"tags":95},"https:\u002F\u002Fbugs.php.net\u002Fbug.php?id=75055",[74,76],{"url":97,"source":98,"tags":99},"https:\u002F\u002Fgithub.com\u002Fderickr\u002Ftimelib\u002Fcommit\u002Faa9156006e88565e1f1a5f7cc088b18322d57536","GitHub",[74,100,84],"Patch",{"url":102,"source":98,"tags":103},"https:\u002F\u002Fgithub.com\u002Fphp\u002Fphp-src\u002Fcommit\u002F5c0455bf2c8cd3c25401407f158e820aa3b239e1",[74,100,84],{"url":105,"source":106,"tags":107},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20181123-0001\u002F","Netapp",[84],{"url":109,"source":110,"tags":111},"https:\u002F\u002Fusn.ubuntu.com\u002F3566-1\u002F","Ubuntu",[84],{"url":113,"source":114,"tags":115},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2018\u002Fdsa-4080","Debian",[84],{"url":117,"source":114,"tags":118},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2018\u002Fdsa-4081",[84],{"url":120,"source":121,"tags":122},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F43133\u002F","Exploit-db",[123,74,84,85],"Exploit",{"url":71,"source":72,"tags":125},[74,75,76],{"url":78,"source":72,"tags":127},[74,75,76],{"url":81,"source":82,"tags":129},[84,85],{"url":87,"source":88,"tags":131},[84],{"url":91,"source":88,"tags":133},[],{"url":94,"source":72,"tags":135},[74,76],{"url":97,"source":98,"tags":137},[74,100,84],{"url":102,"source":98,"tags":139},[74,100,84],{"url":105,"source":106,"tags":141},[84],{"url":109,"source":110,"tags":143},[84],{"url":113,"source":114,"tags":145},[84],{"url":117,"source":114,"tags":147},[84],{"url":120,"source":121,"tags":149},[123,74,84,85],26,[152],{"id":153,"name":154,"description":155,"extendedDescription":156,"status":157,"abstraction":158,"structure":159},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":164,"metaDescription":165,"keywords":166,"canonicalUrl":167,"structuredData":168},"What is CVE-2017-16642? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-16642, a high severity cyber security vulnerability from 2017. In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7...","CVE-2017-16642, CVE-2017-16642 vulnerability, CVE-2017-16642 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, php security, debian security, canonical security, netapp security, php vulnerability, debian_linux vulnerability, ubuntu_linux vulnerability, storage_automation_store vulnerability","\u002Fwhat-is\u002Fcve-2017-16642",{"@context":169,"@type":170,"headline":164,"description":165,"datePublished":10,"dateModified":11,"author":171,"publisher":175,"about":179,"mainEntityOfPage":183,"articleSection":186,"keywords":187},"https:\u002F\u002Fschema.org","TechArticle",{"@type":172,"name":173,"url":174},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":172,"name":173,"url":174,"logo":176},{"@type":177,"url":178},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":180,"name":6,"description":181,"additionalType":182},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":184,"@id":185},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-16642","Cybersecurity","CVE-2017-16642, CVE-2017-16642 vulnerability, CVE-2017-16642 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[189,205,213,219],{"Operator":15,"Negate":15,"Nodes":190},[191],{"Operator":192,"Negate":15,"CPEMatch":193},"OR",[194,197,201],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":195,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":196,"VersionEndIncluding":15},"6029D86B-258B-4BCB-A7F4-2D8AAB6BF986","5.6.32",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":198,"VersionStartExcluding":15,"VersionStartIncluding":199,"VersionEndExcluding":200,"VersionEndIncluding":15},"6FED5332-FB60-4EC7-9018-14E7DE0FF72E","7.0.0","7.0.25",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":202,"VersionStartExcluding":15,"VersionStartIncluding":203,"VersionEndExcluding":204,"VersionEndIncluding":15},"52497E39-05A7-4C19-96FF-27449D146E3B","7.1.0","7.1.11",{"Operator":15,"Negate":15,"Nodes":206},[207],{"Operator":192,"Negate":15,"CPEMatch":208},[209,211],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":210,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":212,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Operator":15,"Negate":15,"Nodes":214},[215],{"Operator":192,"Negate":15,"CPEMatch":216},[217],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":218,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B5A6F2F3-4894-4392-8296-3B8DD2679084",{"Operator":15,"Negate":15,"Nodes":220},[221],{"Operator":192,"Negate":15,"CPEMatch":222},[223,225],{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":224,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"7B7A6697-98CC-4E36-93DB-B7160F8399F9",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":226,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"1FED6CAE-D97F-49E0-9D00-1642A3A427B4",[],[229],{"id":230,"eventType":231,"eventTime":232,"details":233,"label":234,"color":235},"dbe908da-aaa7-4ace-bac9-b22171fa9343","HIGH_EPSS_DELTA","2026-06-16T04:06:24.576999+00:00","Daily EPSS score increased by 0.181 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":237,"version":32},1792254265207,{"score":239,"band":240,"action":241,"scoredAt":242},49,"Medium","Plan remediation","2026-10-17T09:12:46.34236+00:00"]