2018-03-01 20:29:00 2019-08-19 13:15:14

In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the php_stream_url_wrap_http_ex function in ext/standard/http_fopen_wrapper.c. This subsequently results in copying a large string.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL
Php Php 7.0.9 - (not an official CPE) Php Php 7.0.9 (not an official CPE) Php Php 7.0.8 Rc1 (not an official CPE) Php Php 7.0.8 - (not an official CPE) Php Php 7.0.8 (not an official CPE) Php Php 7.0.7 Rc1 (not an official CPE) Php Php 7.0.7 - (not an official CPE) Php Php 7.0.7 (not an official CPE) Php Php 7.0.6 Rc1 (not an official CPE) Php Php 7.0.6 - (not an official CPE) Php Php 7.0.6 (not an official CPE) Php Php 7.0.5 Rc1 (not an official CPE) Php Php 7.0.5 - (not an official CPE) Php Php 7.0.5 (not an official CPE) Php Php 7.0.4 Rc1 (not an official CPE) Php Php 7.0.4 - (not an official CPE) Php Php 7.0.4 (not an official CPE) Php Php 7.0.3 Rc1 (not an official CPE) Php Php 7.0.3 - (not an official CPE) Php Php 7.0.3 (not an official CPE) Php Php 7.0.2 Rc1 (not an official CPE) Php Php 7.0.2 - (not an official CPE) Php Php 7.0.2 (not an official CPE) Php Php 7.0.1 Rc1 (not an official CPE) Php Php 7.0.1 - (not an official CPE) Php Php 7.0.1 (not an official CPE) Php Php 7.0.0 Rc8 (not an official CPE) Php Php 7.0.0 Rc7 (not an official CPE) Php Php 7.0.0 Rc6 (not an official CPE) Php Php 7.0.0 Rc5 (not an official CPE) Php Php 7.0.0 Rc4 (not an official CPE) Php Php 7.0.0 Rc3 (not an official CPE) Php Php 7.0.0 Rc2 (not an official CPE) Php Php 7.0.0 Rc1 (not an official CPE) Php Php 7.0.0 Beta3 (not an official CPE) Php Php 7.0.0 Beta2 (not an official CPE) Php Php 7.0.0 Beta1 (not an official CPE) Php Php 7.0.0 Alpha2 (not an official CPE) Php Php 7.0.0 Alpha1 (not an official CPE) Php Php 7.0.0 - (not an official CPE) Php Php 7.0.0 (not an official CPE) Php Php 5.6.33 (not an official CPE) Php Php 7.0.9 Rc1 (not an official CPE) Php Php 7.0.10 (not an official CPE) Php Php 7.0.10 - (not an official CPE) Php Php 7.0.10 Rc1 (not an official CPE) Php Php 7.0.11 (not an official CPE) Php Php 7.0.11 - (not an official CPE) Php Php 7.0.11 Rc1 (not an official CPE) Php Php 7.0.12 (not an official CPE) Php Php 7.0.12 - (not an official CPE) Php Php 7.0.12 Rc1 (not an official CPE) Php Php 7.0.13 (not an official CPE) Php Php 7.0.13 - (not an official CPE) Php Php 7.0.13 Rc1 (not an official CPE) Php Php 7.0.14 (not an official CPE) Php Php 7.0.14 - (not an official CPE) Php Php 7.0.14 Rc1 (not an official CPE) Php Php 7.0.15 (not an official CPE) Php Php 7.0.15 - (not an official CPE) Php Php 7.0.15 Rc1 (not an official CPE) Php Php 7.0.16 (not an official CPE) Php Php 7.0.16 - (not an official CPE) Php Php 7.0.16 Rc1 (not an official CPE) Php Php 7.0.17 (not an official CPE) Php Php 7.0.17 - (not an official CPE) Php Php 7.0.17 Rc1 (not an official CPE) Php Php 7.0.18 (not an official CPE) Php Php 7.0.18 - (not an official CPE) Php Php 7.0.18 Rc1 (not an official CPE) Php Php 7.0.19 (not an official CPE) Php Php 7.0.19 - (not an official CPE) Php Php 7.0.19 Rc1 (not an official CPE) Php Php 7.0.20 (not an official CPE) Php Php 7.0.20 - (not an official CPE) Php Php 7.0.20 Rc1 (not an official CPE) Php Php 7.0.21 (not an official CPE) Php Php 7.0.21 - (not an official CPE) Php Php 7.0.21 Rc1 (not an official CPE) Php Php 7.0.22 (not an official CPE) Php Php 7.0.22 - (not an official CPE) Php Php 7.0.22 Rc1 (not an official CPE) Php Php 7.0.23 (not an official CPE) Php Php 7.0.23 - (not an official CPE) Php Php 7.0.23 Rc1 (not an official CPE) Php Php 7.0.24 (not an official CPE) Php Php 7.0.24 - (not an official CPE) Php Php 7.0.24 Rc1 (not an official CPE) Php Php 7.0.25 (not an official CPE) Php Php 7.0.25 - (not an official CPE) Php Php 7.0.25 Rc1 (not an official CPE) Php Php 7.0.26 (not an official CPE) Php Php 7.0.26 - (not an official CPE) Php Php 7.0.26 Rc1 (not an official CPE) Php Php 7.0.27 (not an official CPE) Php Php 7.0.27 - (not an official CPE) Php Php 7.0.27 Rc1 (not an official CPE) Php Php 7.1.0 (not an official CPE) Php Php 7.1.0 - (not an official CPE) Php Php 7.1.0 Alpha1 (not an official CPE) Php Php 7.1.0 Alpha2 (not an official CPE) Php Php 7.1.0 Alpha3 (not an official CPE) Php Php 7.1.0 Beta1 (not an official CPE) Php Php 7.1.0 Beta2 (not an official CPE) Php Php 7.1.0 Beta3 (not an official CPE) Php Php 7.1.0 Rc1 (not an official CPE) Php Php 7.1.0 Rc2 (not an official CPE) Php Php 7.1.0 Rc3 (not an official CPE) Php Php 7.1.0 Rc4 (not an official CPE) Php Php 7.1.0 Rc5 (not an official CPE) Php Php 7.1.0 Rc6 (not an official CPE) Php Php 7.1.1 (not an official CPE) Php Php 7.1.1 - (not an official CPE) Php Php 7.1.1 Rc1 (not an official CPE) Php Php 7.1.2 (not an official CPE) Php Php 7.1.2 - (not an official CPE) Php Php 7.1.2 Rc1 (not an official CPE) Php Php 7.1.3 (not an official CPE) Php Php 7.1.3 - (not an official CPE) Php Php 7.1.3 Rc1 (not an official CPE) Php Php 7.1.4 (not an official CPE) Php Php 7.1.4 - (not an official CPE) Php Php 7.1.4 Rc1 (not an official CPE) Php Php 7.1.5 (not an official CPE) Php Php 7.1.5 - (not an official CPE) Php Php 7.1.5 Rc1 (not an official CPE) Php Php 7.1.6 (not an official CPE) Php Php 7.1.6 - (not an official CPE) Php Php 7.1.6 Rc1 (not an official CPE) Php Php 7.1.7 (not an official CPE) Php Php 7.1.7 - (not an official CPE) Php Php 7.1.7 Rc1 (not an official CPE) Php Php 7.1.8 (not an official CPE) Php Php 7.1.8 - (not an official CPE) Php Php 7.1.8 Rc1 (not an official CPE) Php Php 7.1.9 (not an official CPE) Php Php 7.1.9 - (not an official CPE) Php Php 7.1.9 Rc1 (not an official CPE) Php Php 7.1.10 (not an official CPE) Php Php 7.1.10 - (not an official CPE) Php Php 7.1.10 Rc1 (not an official CPE) Php Php 7.1.11 (not an official CPE) Php Php 7.1.11 - (not an official CPE) Php Php 7.1.11 Rc1 (not an official CPE) Php Php 7.1.12 (not an official CPE) Php Php 7.1.12 - (not an official CPE) Php Php 7.1.12 Rc1 (not an official CPE) Php Php 7.1.13 (not an official CPE) Php Php 7.1.13 - (not an official CPE) Php Php 7.1.13 Rc1 (not an official CPE) Php Php 7.1.14 (not an official CPE) Php Php 7.1.14 - (not an official CPE) Php Php 7.1.14 Rc1 (not an official CPE) Php Php 7.2.0 (not an official CPE) Php Php 7.2.0 - (not an official CPE) Php Php 7.2.0 Alpha1 (not an official CPE) Php Php 7.2.0 Alpha2 (not an official CPE) Php Php 7.2.0 Alpha3 (not an official CPE) Php Php 7.2.0 Beta1 (not an official CPE) Php Php 7.2.0 Beta2 (not an official CPE) Php Php 7.2.0 Beta3 (not an official CPE) Php Php 7.2.0 Rc1 (not an official CPE) Php Php 7.2.0 Rc2 (not an official CPE) Php Php 7.2.0 Rc3 (not an official CPE) Php Php 7.2.0 Rc4 (not an official CPE) Php Php 7.2.0 Rc5 (not an official CPE) Php Php 7.2.0 Rc6 (not an official CPE) Php Php 7.2.1 (not an official CPE) Php Php 7.2.1 - (not an official CPE) Php Php 7.2.1 Rc1 (not an official CPE) Php Php 7.2.2 (not an official CPE) Php Php 7.2.2 - (not an official CPE) Php Php 7.2.2 Rc1 (not an official CPE)