ISOMAN

CVE

CVE-2018-7584

In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the php_stream_url_wrap_http_ex function in ext/standard/http_fopen_wrapper.c. This subsequently results in copying a large string.

Severity
CRITICAL
CVSS
9.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://php.net/ChangeLog-7.php
  2. http://www.securityfocus.com/bid/103204
  3. http://www.securitytracker.com/id/1041607
  4. https://access.redhat.com/errata/RHSA-2019:2519
  5. https://bugs.php.net/bug.php?id=75981
  6. https://github.com/php/php-src/commit/523f230c831d7b33353203fa34aee4e92ac12bba
  7. https://lists.debian.org/debian-lts-announce/2018/03/msg00030.html
  8. https://lists.debian.org/debian-lts-announce/2018/06/msg00005.html
  9. https://usn.ubuntu.com/3600-1/
  10. https://usn.ubuntu.com/3600-2/
  11. https://www.debian.org/security/2018/dsa-4240
  12. https://www.exploit-db.com/exploits/44846/
  13. https://www.tenable.com/security/tns-2018-03
  14. https://www.tenable.com/security/tns-2018-12
  15. http://php.net/ChangeLog-7.php
  16. http://www.securityfocus.com/bid/103204
  17. http://www.securitytracker.com/id/1041607
  18. https://access.redhat.com/errata/RHSA-2019:2519
  19. https://bugs.php.net/bug.php?id=75981
  20. https://github.com/php/php-src/commit/523f230c831d7b33353203fa34aee4e92ac12bba