PHP 'phar_detect_phar_fname_ext()' Heap Buffer Overflow Vulnerability
BID:106747
CVE-2019-9021 |Info
PHP 'phar_detect_phar_fname_ext()' Heap Buffer Overflow Vulnerability
| Bugtraq ID: | 106747 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2019-9021 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 06 2018 12:00AM |
| Updated: | Feb 26 2019 12:00PM |
| Credit: | zhihua dot yao |
| Vulnerable: |
PHP PHP 7.3 PHP PHP 7.2.13 PHP PHP 7.2.12 PHP PHP 7.2.8 PHP PHP 7.2.7 PHP PHP 7.2.6 PHP PHP 7.2.5 PHP PHP 7.2.4 PHP PHP 7.2.3 PHP PHP 7.2.2 PHP PHP 7.2.1 PHP PHP 7.2 PHP PHP 7.1.25 PHP PHP 7.1.24 PHP PHP 7.1.20 PHP PHP 7.1.17 PHP PHP 7.1.16 PHP PHP 7.1.13 PHP PHP 7.1.12 PHP PHP 7.1.11 PHP PHP 7.1.1 PHP PHP 7.1 PHP PHP 5.6.39 PHP PHP 5.6.38 PHP PHP 5.6.37 PHP PHP 5.6.36 PHP PHP 5.6.35 PHP PHP 5.6.33 PHP PHP 5.6.32 PHP PHP 5.6.31 PHP PHP 5.6.30 PHP PHP 5.6.29 PHP PHP 5.6.27 PHP PHP 5.6.22 PHP PHP 5.6.21 PHP PHP 5.6.20 PHP PHP 5.6.19 PHP PHP 5.6.18 PHP PHP 5.6.17 PHP PHP 5.6.13 PHP PHP 5.6.12 PHP PHP 5.6.11 PHP PHP 5.6.5 PHP PHP 5.6.4 PHP PHP 5.6.1 PHP PHP 5.6 PHP PHP 5.5.38 PHP PHP 5.5.35 PHP PHP 5.5.34 PHP PHP 5.5.33 PHP PHP 5.5.32 PHP PHP 5.5.29 PHP PHP 5.5.28 PHP PHP 5.5.27 PHP PHP 5.5.26 PHP PHP 5.5.21 PHP PHP 5.5.14 PHP PHP 5.5.13 PHP PHP 5.5.12 PHP PHP 5.5.11 PHP PHP 5.5.10 PHP PHP 5.5.6 PHP PHP 5.5.5 PHP PHP 5.5.4 PHP PHP 5.5.3 PHP PHP 5.5.1 PHP PHP 5.5 PHP PHP 5.4.45 PHP PHP 5.4.44 PHP PHP 5.4.43 PHP PHP 5.4.37 PHP PHP 5.4.30 PHP PHP 5.4.29 PHP PHP 5.4.26 PHP PHP 5.4.25 PHP PHP 5.4.17 PHP PHP 5.4.14 PHP PHP 5.4.8 PHP PHP 5.4.7 PHP PHP 5.4.6 PHP PHP 5.4.4 PHP PHP 5.4.3 PHP PHP 5.4.2 PHP PHP 5.4.1 PHP PHP 5.3.29 PHP PHP 5.3.28 PHP PHP 5.3.24 PHP PHP 5.3.23 PHP PHP 5.3.22 PHP PHP 5.3.21 PHP PHP 5.3.20 PHP PHP 5.3.17 PHP PHP 5.3.16 PHP PHP 5.3.14 PHP PHP 5.3.13 PHP PHP 5.3.12 PHP PHP 5.3.9 PHP PHP 5.3.8 PHP PHP 5.3.7 PHP PHP 5.3.6 PHP PHP 5.3.5 PHP PHP 5.3.2 PHP PHP 5.3.1 PHP PHP 5.3 PHP PHP 5.2.17 PHP PHP 5.2.16 PHP PHP 5.2.15 PHP PHP 5.2.13 PHP PHP 5.2.12 PHP PHP 5.2.11 PHP PHP 5.2.10 PHP PHP 5.2.9 PHP PHP 5.2.8 PHP PHP 5.2.7 PHP PHP 5.2.6 PHP PHP 5.2.5 PHP PHP 5.2.4 PHP PHP 5.2.3 PHP PHP 5.2.2 PHP PHP 5.1.6 PHP PHP 5.1.5 PHP PHP 5.1.4 PHP PHP 5.1.3 PHP PHP 5.1.2 PHP PHP 5.1.1 PHP PHP 5.1 PHP PHP 7.2 PHP PHP 7.1.2 PHP PHP 7.1.14 PHP PHP 7.1 PHP PHP 5.6.9 PHP PHP 5.6.8 PHP PHP 5.6.7 PHP PHP 5.6.6 PHP PHP 5.6.34 PHP PHP 5.6.3 PHP PHP 5.6.28 PHP PHP 5.6.26 PHP PHP 5.6.25 PHP PHP 5.6.24 PHP PHP 5.6.23 PHP PHP 5.6.2 PHP PHP 5.6.14 PHP PHP 5.6.10 PHP PHP 5.6 PHP PHP 5.5.9 PHP PHP 5.5.8 PHP PHP 5.5.7 PHP PHP 5.5.37 PHP PHP 5.5.36 PHP PHP 5.5.31 PHP PHP 5.5.30 PHP PHP 5.5.25 PHP PHP 5.5.24 PHP PHP 5.5.23 PHP PHP 5.5.22 PHP PHP 5.5.20 PHP PHP 5.5.2 PHP PHP 5.5.19 PHP PHP 5.5.18 PHP PHP 5.5.17 PHP PHP 5.5.16 PHP PHP 5.5.15 PHP PHP 5.4.9 PHP PHP 5.4.5 PHP PHP 5.4.42 PHP PHP 5.4.41 PHP PHP 5.4.40 PHP PHP 5.4.39 PHP PHP 5.4.38 PHP PHP 5.4.36 PHP PHP 5.4.35 PHP PHP 5.4.34 PHP PHP 5.4.33 PHP PHP 5.4.32 PHP PHP 5.4.31 PHP PHP 5.4.28 PHP PHP 5.4.27 PHP PHP 5.4.24 PHP PHP 5.4.23 PHP PHP 5.4.22 PHP PHP 5.4.21 PHP PHP 5.4.20 PHP PHP 5.4.19 PHP PHP 5.4.18 PHP PHP 5.4.16 PHP PHP 5.4.15 PHP PHP 5.4.13 PHP PHP 5.4.12 PHP PHP 5.4.11 PHP PHP 5.4.10 PHP PHP 5.3.4 PHP PHP 5.3.3 PHP PHP 5.3.27 PHP PHP 5.3.26 PHP PHP 5.3.25 PHP PHP 5.3.19 PHP PHP 5.3.18 PHP PHP 5.3.15 PHP PHP 5.3.11 PHP PHP 5.3.10 PHP PHP 5.2.14 PHP PHP 5.2 PHP PHP 5.1.43 |
| Not Vulnerable: |
PHP PHP 7.3.1 PHP PHP 7.2.14 PHP PHP 7.1.26 PHP PHP 5.6.40 |
Discussion
PHP 'phar_detect_phar_fname_ext()' Heap Buffer Overflow Vulnerability
PHP is prone to a heap-based buffer-overflow vulnerability.
An attacker can exploit this issue to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition.
The following versions are vulnerable:
PHP 5.1 prior to 5.6.40
PHP 7.1 prior to 7.1.26
PHP 7.2 prior to 7.2.14
PHP 7.3 prior to 7.3.1
PHP is prone to a heap-based buffer-overflow vulnerability.
An attacker can exploit this issue to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition.
The following versions are vulnerable:
PHP 5.1 prior to 5.6.40
PHP 7.1 prior to 7.1.26
PHP 7.2 prior to 7.2.14
PHP 7.3 prior to 7.3.1
Exploit / POC
PHP 'phar_detect_phar_fname_ext()' Heap Buffer Overflow Vulnerability
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
Solution / Fix
PHP 'phar_detect_phar_fname_ext()' Heap Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
PHP 'phar_detect_phar_fname_ext()' Heap Buffer Overflow Vulnerability
References:
References:
- PHP Homepage (PHP)
- 77247 heap buffer overflow in phar_detect_phar_fname_ext (PHP)
- Patch 77247 for PHAR related Bug #77247 (PHP)
- php/php-src (Github)