PT-2017-2454 · Php+3 · Php+3

Henri Salo + 1 · Published 2017-01-11 · Updated 2022-07-20 · CVE-2017-5340

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PHP versions prior to 7.0.15 PHP versions 7.1.x prior to 7.1.1

Description The issue is caused by an integer overflow in the Zend/zend hash.c component of the PHP interpreter, which mishandles certain cases that require large array allocations. This allows remote attackers to execute arbitrary code or cause a denial of service via crafted serialized data, resulting in uninitialized memory access and use of arbitrary destructor function pointers.

Recommendations For PHP versions prior to 7.0.15, update to version 7.0.15 or later. For PHP versions 7.1.x prior to 7.1.1, update to version 7.1.1 or later.

Exploit

Fix

DoS

RCE

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALT-PU-2017-1114

BDU:2017-01662

CVE-2017-5340

OPENSUSE-SU-2017_0588-1

RHSA-2018:1296

SUSE-SU-2017:0534-1

USN-3211-1

USN-3211-2

Affected Products

Alt Linux

Php

Suse

Ubuntu

References · 54

• 🔥 https://bugs.php.net/bug.php?id=73832 · Exploit
• https://github.com/php/php-src/commit/4cc0286f2f3780abc6084bcdae5dce595daa3c12 · Patch
• https://osv.dev/vulnerability/USN-3211-2 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3211-2 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-5340 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-7479 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-10158 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9935 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-01662 · Security Note
• https://ubuntu.com/security/CVE-2016-10162 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3211-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-10159 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-10160 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:0534-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9137 · Vendor Advisory