CVE-2016-6233 Amazon Linux Security Advisory for php-ZendFramework: ALAS-2016-767

2016年11月20日 1262点热度 0人点赞 0条评论

漏洞类别：Amazon Linux

漏洞等级：

漏洞信息

The implementation of ORDER BY and GROUP BY in Zend_Db_Select was discovered to be vulnerable to SQL injection.

漏洞危害

Allows unauthorized disclosure of information; allows unauthorized modification; allows disruption of service.

解决方案

Please refer to Amazon advisory ALAS-2016-767 for affected packages and patching details, or update with your package manager.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

0day