Vulnerability identifier: #VU16905
Vulnerability risk: Low
CVSSv4.0: 7.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/U:Clear]
CVE-ID:
CWE-ID:
CWE-125
Exploitation vector: Network
Exploit availability: No
Vulnerable software:
PHP
Universal components / Libraries /
Scripting languages
Vendor: PHP Group
Description
The vulnerability allows a remote attacker to cause DoS condition on the target system.
The weakness exists due to heap out-of-bounds read when php is compiled with address sanitizer and USE_ZEND_ALLOC=0 is set. A remote attacker can supply a specially crafted input to the function xmlrpc_decode() , trigger heap buffer over-read and cause the service to crash.
Mitigation
The vulnerability has been fixed in the versions 5.6.40, 7.1.26, 7.2.14, 7.3.1.
Vulnerable software versions
PHP: 5.5.6, 5.6.0 - 5.6.39, 7.1.0 - 7.1.25, 7.2.0 - 7.2.13, 7.3.0alpha1 - 7.3.0
External links
https://bugs.php.net/bug.php?id=77242
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.