PHP 'ext/standard/http_fopen_wrapper.c' Denial of Service Vulnerability

Bugtraq ID:	104968
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2018-14884
Remote:	Yes
Local:	No
Published:	Jan 04 2018 12:00AM
Updated:	Jan 04 2018 12:00AM
Credit:	Orange
Vulnerable:	PHP PHP 7.2 PHP PHP 7.1.12 PHP PHP 7.1.11 PHP PHP 7.1.8 PHP PHP 7.1.7 PHP PHP 7.1.6 PHP PHP 7.1.5 PHP PHP 7.1.4 PHP PHP 7.1.1 PHP PHP 7.1 PHP PHP 7.0.26 PHP PHP 7.0.25 PHP PHP 7.0.22 PHP PHP 7.0.21 PHP PHP 7.0.17 PHP PHP 7.0.16 PHP PHP 7.0.15 PHP PHP 7.0.14 PHP PHP 7.0.12 PHP PHP 7.0.5 PHP PHP 7.0.3 PHP PHP 7.0 PHP PHP 7.2 PHP PHP 7.1.3 PHP PHP 7.1.2 PHP PHP 7.1 PHP PHP 7.0.9 PHP PHP 7.0.8 PHP PHP 7.0.7 PHP PHP 7.0.6 PHP PHP 7.0.4 PHP PHP 7.0.2 PHP PHP 7.0.13 PHP PHP 7.0.11 PHP PHP 7.0.10 PHP PHP 7.0.1 PHP PHP 7.0
Not Vulnerable:	PHP PHP 7.2.1 PHP PHP 7.1.13 PHP PHP 7.0.27

PHP 'ext/standard/http_fopen_wrapper.c' Denial of Service Vulnerability

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.