PT-2017-4185 · Php+3 · Php+3

Eyal Itkin · Published 2017-01-24 · Updated 2018-05-04 · CVE-2016-10158

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.30 PHP versions 7.0.x prior to 7.0.15 PHP versions 7.1.x prior to 7.1.1

Description The issue is related to errors in number processing in the exif convert any to int function. This can be exploited by remote attackers to cause a denial of service (application crash) via crafted EXIF data. The exploitation is possible due to an attempt to divide the minimum representable negative integer by -1.

Recommendations For PHP versions prior to 5.6.30, update to version 5.6.30 or later. For PHP versions 7.0.x prior to 7.0.15, update to version 7.0.15 or later. For PHP versions 7.1.x prior to 7.1.1, update to version 7.1.1 or later.

Fix

DoS

Weakness Enumeration

CWE-189

Related Identifiers

ALT-PU-2017-1114

BDU:2022-02563

CVE-2016-10158

DLA-818-1

DSA-3783-1

MGASA-2017-0040

OPENSUSE-SU-2017_0588-1

RHSA-2018:1296

SUSE-SU-2017:0534-1

SUSE-SU-2017:0556-1

SUSE-SU-2017:0568-1

SUSE-SU-2017_0534-1

SUSE-SU-2017_0556-1

SUSE-SU-2017_0568-1

USN-3196-1

USN-3211-1

USN-3211-2

Affected Products

Alt Linux

Php

Suse

Ubuntu

References · 73

• https://github.com/php/php-src/commit/1cda0d7c2ffb62d8331c64e703131d9cabdc03ea · Patch
• https://osv.dev/vulnerability/USN-3196-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-7478 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3211-2 · Vendor Advisory
• http://debian.org/security/2017/dsa-3783 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-10162 · Vendor Advisory
• http://php.net/ChangeLog-5.php · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9934 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:0534-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9137 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:1296 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-5340 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0040 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3211-2 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0040.html · Security Note