NetSight
IP …
critical9.8Public exploit code

CVE-2018-7584

In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP respo…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the php_stream_url_wrap_http_ex function in ext/standard/http_fopen_wrapper.c. This subsequently results in copying a large string.

Affected products

VendorProductAffected versions
PhpPhp
through 5.6.33
from 7.0.0 before 7.0.28
from 7.1.0 through 7.1.14
from 7.2.0 through 7.2.2
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 17.10
DebianDebian Linux
Versions 7.0, 8.0, 9.0

Weakness classification

CWE-119

References