2019-02-23 00:29:00 2019-06-18 20:15:11

An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dns_get_record misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data. This affects php_parserr in ext/standard/dns.c for DNS_CAA and DNS_ANY queries.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

PARTIAL

Integrity

NONE

Availability

NONE
Php Php 7.0.17 (not an official CPE) Php Php 7.0.16 Rc1 (not an official CPE) Php Php 7.0.16 (not an official CPE) Php Php 7.0.16 - (not an official CPE) Php Php 7.0.15 - (not an official CPE) Php Php 7.0.15 Rc1 (not an official CPE) Php Php 7.0.15 (not an official CPE) Php Php 7.0.14 Rc1 (not an official CPE) Php Php 7.0.14 - (not an official CPE) Php Php 7.0.14 (not an official CPE) Php Php 7.0.13 Rc1 (not an official CPE) Php Php 7.0.13 - (not an official CPE) Php Php 7.0.13 (not an official CPE) Php Php 7.0.12 Rc1 (not an official CPE) Php Php 7.0.12 - (not an official CPE) Php Php 7.0.12 (not an official CPE) Php Php 7.0.11 Rc1 (not an official CPE) Php Php 7.0.11 - (not an official CPE) Php Php 7.0.11 (not an official CPE) Php Php 7.0.10 Rc1 (not an official CPE) Php Php 7.0.10 - (not an official CPE) Php Php 7.0.10 (not an official CPE) Php Php 7.0.9 Rc1 (not an official CPE) Php Php 7.0.9 - (not an official CPE) Php Php 7.0.9 (not an official CPE) Php Php 7.0.8 Rc1 (not an official CPE) Php Php 7.0.8 - (not an official CPE) Php Php 7.0.8 (not an official CPE) Php Php 7.0.7 Rc1 (not an official CPE) Php Php 7.0.7 - (not an official CPE) Php Php 7.0.7 (not an official CPE) Php Php 7.0.6 Rc1 (not an official CPE) Php Php 7.0.6 - (not an official CPE) Php Php 7.0.6 (not an official CPE) Php Php 7.0.5 Rc1 (not an official CPE) Php Php 7.0.5 - (not an official CPE) Php Php 7.0.5 (not an official CPE) Php Php 7.0.4 Rc1 (not an official CPE) Php Php 7.0.4 - (not an official CPE) Php Php 7.0.4 (not an official CPE) Php Php 7.0.3 Rc1 (not an official CPE) Php Php 7.0.3 - (not an official CPE) Php Php 7.0.3 (not an official CPE) Php Php 7.0.2 Rc1 (not an official CPE) Php Php 7.0.2 - (not an official CPE) Php Php 7.0.2 (not an official CPE) Php Php 7.0.1 Rc1 (not an official CPE) Php Php 7.0.1 - (not an official CPE) Php Php 7.0.1 (not an official CPE) Php Php 7.0.0 Rc8 (not an official CPE) Php Php 7.0.0 Rc7 (not an official CPE) Php Php 7.0.0 Rc6 (not an official CPE) Php Php 7.0.0 Rc5 (not an official CPE) Php Php 7.0.0 Rc4 (not an official CPE) Php Php 7.0.0 Rc3 (not an official CPE) Php Php 7.0.0 Rc2 (not an official CPE) Php Php 7.0.0 Rc1 (not an official CPE) Php Php 7.0.0 Beta3 (not an official CPE) Php Php 7.0.0 Beta2 (not an official CPE) Php Php 7.0.0 Beta1 (not an official CPE) Php Php 7.0.0 Alpha2 (not an official CPE) Php Php 7.0.0 (not an official CPE) Php Php 7.0.0 - (not an official CPE) Php Php 7.0.0 Alpha1 (not an official CPE) Netapp Storage automation store - (not an official CPE) Php Php 7.0.17 - (not an official CPE) Php Php 7.0.17 Rc1 (not an official CPE) Php Php 7.0.18 (not an official CPE) Php Php 7.0.18 - (not an official CPE) Php Php 7.0.18 Rc1 (not an official CPE) Php Php 7.0.19 (not an official CPE) Php Php 7.0.19 - (not an official CPE) Php Php 7.0.19 Rc1 (not an official CPE) Php Php 7.0.20 (not an official CPE) Php Php 7.0.20 - (not an official CPE) Php Php 7.0.20 Rc1 (not an official CPE) Php Php 7.0.21 (not an official CPE) Php Php 7.0.21 - (not an official CPE) Php Php 7.0.21 Rc1 (not an official CPE) Php Php 7.0.22 (not an official CPE) Php Php 7.0.22 - (not an official CPE) Php Php 7.0.22 Rc1 (not an official CPE) Php Php 7.0.23 (not an official CPE) Php Php 7.0.23 - (not an official CPE) Php Php 7.0.23 Rc1 (not an official CPE) Php Php 7.0.24 (not an official CPE) Php Php 7.0.24 - (not an official CPE) Php Php 7.0.24 Rc1 (not an official CPE) Php Php 7.0.25 (not an official CPE) Php Php 7.0.25 - (not an official CPE) Php Php 7.0.25 Rc1 (not an official CPE) Php Php 7.0.26 (not an official CPE) Php Php 7.0.26 - (not an official CPE) Php Php 7.0.26 Rc1 (not an official CPE) Php Php 7.0.27 (not an official CPE) Php Php 7.0.27 - (not an official CPE) Php Php 7.0.27 Rc1 (not an official CPE) Php Php 7.0.28 (not an official CPE) Php Php 7.0.29 (not an official CPE) Php Php 7.0.30 (not an official CPE) Php Php 7.0.31 (not an official CPE) Php Php 7.0.32 (not an official CPE) Php Php 7.0.33 (not an official CPE) Php Php 7.1.0 (not an official CPE) Php Php 7.1.0 - (not an official CPE) Php Php 7.1.0 Alpha1 (not an official CPE) Php Php 7.1.0 Alpha2 (not an official CPE) Php Php 7.1.0 Alpha3 (not an official CPE) Php Php 7.1.0 Beta1 (not an official CPE) Php Php 7.1.0 Beta2 (not an official CPE) Php Php 7.1.0 Beta3 (not an official CPE) Php Php 7.1.0 Rc1 (not an official CPE) Php Php 7.1.0 Rc2 (not an official CPE) Php Php 7.1.0 Rc3 (not an official CPE) Php Php 7.1.0 Rc4 (not an official CPE) Php Php 7.1.0 Rc5 (not an official CPE) Php Php 7.1.0 Rc6 (not an official CPE) Php Php 7.1.1 (not an official CPE) Php Php 7.1.1 - (not an official CPE) Php Php 7.1.1 Rc1 (not an official CPE) Php Php 7.1.2 (not an official CPE) Php Php 7.1.2 - (not an official CPE) Php Php 7.1.2 Rc1 (not an official CPE) Php Php 7.1.3 (not an official CPE) Php Php 7.1.3 - (not an official CPE) Php Php 7.1.3 Rc1 (not an official CPE) Php Php 7.1.4 (not an official CPE) Php Php 7.1.4 - (not an official CPE) Php Php 7.1.4 Rc1 (not an official CPE) Php Php 7.1.5 (not an official CPE) Php Php 7.1.5 - (not an official CPE) Php Php 7.1.5 Rc1 (not an official CPE) Php Php 7.1.6 (not an official CPE) Php Php 7.1.6 - (not an official CPE) Php Php 7.1.6 Rc1 (not an official CPE) Php Php 7.1.7 (not an official CPE) Php Php 7.1.7 - (not an official CPE) Php Php 7.1.7 Rc1 (not an official CPE) Php Php 7.1.8 (not an official CPE) Php Php 7.1.8 - (not an official CPE) Php Php 7.1.8 Rc1 (not an official CPE) Php Php 7.1.9 (not an official CPE) Php Php 7.1.9 - (not an official CPE) Php Php 7.1.9 Rc1 (not an official CPE) Php Php 7.1.10 (not an official CPE) Php Php 7.1.10 - (not an official CPE) Php Php 7.1.10 Rc1 (not an official CPE) Php Php 7.1.11 (not an official CPE) Php Php 7.1.11 - (not an official CPE) Php Php 7.1.11 Rc1 (not an official CPE) Php Php 7.1.12 (not an official CPE) Php Php 7.1.12 - (not an official CPE) Php Php 7.1.12 Rc1 (not an official CPE) Php Php 7.1.13 (not an official CPE) Php Php 7.1.13 - (not an official CPE) Php Php 7.1.13 Rc1 (not an official CPE) Php Php 7.1.14 (not an official CPE) Php Php 7.1.14 - (not an official CPE) Php Php 7.1.14 Rc1 (not an official CPE) Php Php 7.1.15 (not an official CPE) Php Php 7.1.15 - (not an official CPE) Php Php 7.1.15 Rc1 (not an official CPE) Php Php 7.1.16 (not an official CPE) Php Php 7.1.16 - (not an official CPE) Php Php 7.1.16 Rc1 (not an official CPE) Php Php 7.1.17 (not an official CPE) Php Php 7.1.17 - (not an official CPE) Php Php 7.1.17 Rc1 (not an official CPE) Php Php 7.1.18 (not an official CPE) Php Php 7.1.18 - (not an official CPE) Php Php 7.1.18 Rc1 (not an official CPE) Php Php 7.1.19 (not an official CPE) Php Php 7.1.19 - (not an official CPE) Php Php 7.1.19 Rc1 (not an official CPE) Php Php 7.1.20 (not an official CPE) Php Php 7.1.20 - (not an official CPE) Php Php 7.1.20 Rc1 (not an official CPE) Php Php 7.1.21 (not an official CPE) Php Php 7.1.21 - (not an official CPE) Php Php 7.1.21 Rc1 (not an official CPE) Php Php 7.1.22 (not an official CPE) Php Php 7.1.22 - (not an official CPE) Php Php 7.1.23 (not an official CPE) Php Php 7.1.23 - (not an official CPE) Php Php 7.1.23 Rc1 (not an official CPE) Php Php 7.1.24 (not an official CPE) Php Php 7.1.24 - (not an official CPE) Php Php 7.1.24 Rc1 (not an official CPE) Php Php 7.1.25 (not an official CPE) Php Php 7.1.25 - (not an official CPE) Php Php 7.1.25 Rc1 (not an official CPE) Php Php 7.2.0 (not an official CPE) Php Php 7.2.0 - (not an official CPE) Php Php 7.2.0 Alpha1 (not an official CPE) Php Php 7.2.0 Alpha2 (not an official CPE) Php Php 7.2.0 Alpha3 (not an official CPE) Php Php 7.2.0 Beta1 (not an official CPE) Php Php 7.2.0 Beta2 (not an official CPE) Php Php 7.2.0 Beta3 (not an official CPE) Php Php 7.2.0 Rc1 (not an official CPE) Php Php 7.2.0 Rc2 (not an official CPE) Php Php 7.2.0 Rc3 (not an official CPE) Php Php 7.2.0 Rc4 (not an official CPE) Php Php 7.2.0 Rc5 (not an official CPE) Php Php 7.2.0 Rc6 (not an official CPE) Php Php 7.2.1 (not an official CPE) Php Php 7.2.1 - (not an official CPE) Php Php 7.2.1 Rc1 (not an official CPE) Php Php 7.2.2 (not an official CPE) Php Php 7.2.2 - (not an official CPE) Php Php 7.2.2 Rc1 (not an official CPE) Php Php 7.2.3 (not an official CPE) Php Php 7.2.3 - (not an official CPE) Php Php 7.2.3 Rc1 (not an official CPE) Php Php 7.2.4 (not an official CPE) Php Php 7.2.4 - (not an official CPE) Php Php 7.2.4 Rc1 (not an official CPE) Php Php 7.2.5 (not an official CPE) Php Php 7.2.5 - (not an official CPE) Php Php 7.2.5 Rc1 (not an official CPE) Php Php 7.2.6 (not an official CPE) Php Php 7.2.6 - (not an official CPE) Php Php 7.2.6 Rc1 (not an official CPE) Php Php 7.2.7 (not an official CPE) Php Php 7.2.7 - (not an official CPE) Php Php 7.2.7 Rc1 (not an official CPE) Php Php 7.2.8 (not an official CPE) Php Php 7.2.8 - (not an official CPE) Php Php 7.2.8 Rc1 (not an official CPE) Php Php 7.2.9 (not an official CPE) Php Php 7.2.9 - (not an official CPE) Php Php 7.2.9 Rc1 (not an official CPE) Php Php 7.2.10 (not an official CPE) Php Php 7.2.10 - (not an official CPE) Php Php 7.2.10 Rc1 (not an official CPE) Php Php 7.2.11 (not an official CPE) Php Php 7.2.11 - (not an official CPE) Php Php 7.2.11 Rc1 (not an official CPE) Php Php 7.2.12 (not an official CPE) Php Php 7.2.12 - (not an official CPE) Php Php 7.2.12 Rc1 (not an official CPE) Php Php 7.2.13 (not an official CPE) Php Php 7.2.13 - (not an official CPE) Php Php 7.2.13 Rc1 (not an official CPE) Php Php 7.3.0 (not an official CPE) Php Php 7.3.0 - (not an official CPE) Php Php 7.3.0 Alpha1 (not an official CPE) Php Php 7.3.0 Alpha2 (not an official CPE) Php Php 7.3.0 Alpha3 (not an official CPE) Php Php 7.3.0 Alpha4 (not an official CPE) Php Php 7.3.0 Beta1 (not an official CPE) Php Php 7.3.0 Beta2 (not an official CPE) Php Php 7.3.0 Beta3 (not an official CPE) Php Php 7.3.0 Rc1 (not an official CPE) Php Php 7.3.0 Rc2 (not an official CPE) Php Php 7.3.0 Rc3 (not an official CPE) Php Php 7.3.0 Rc4 (not an official CPE) Php Php 7.3.0 Rc5 (not an official CPE) Php Php 7.3.0 Rc6 (not an official CPE) Php Php 7.3.1 (not an official CPE) Php Php 7.3.1 - (not an official CPE) Php Php 7.3.1 Rc1 (not an official CPE)