PHP 'zend_string_extend()' Function Denial of Service Vulnerability
BID:98518
Info
PHP 'zend_string_extend()' Function Denial of Service Vulnerability
| Bugtraq ID: | 98518 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2017-8923 |
| Remote: | Yes |
| Local: | No |
| Published: | May 12 2017 12:00AM |
| Updated: | May 12 2017 12:00AM |
| Credit: | whitehat002 |
| Vulnerable: |
PHP PHP 7.1.5 PHP PHP 7.1.4 PHP PHP 7.1.1 PHP PHP 7.1 PHP PHP 7.0.15 PHP PHP 7.0.14 PHP PHP 7.0.12 PHP PHP 7.0.5 PHP PHP 7.0.3 PHP PHP 7.0 PHP PHP 7.1.3 PHP PHP 7.1.2 PHP PHP 7.0.9 PHP PHP 7.0.8 PHP PHP 7.0.7 PHP PHP 7.0.6 PHP PHP 7.0.4 PHP PHP 7.0.2 PHP PHP 7.0.13 PHP PHP 7.0.11 PHP PHP 7.0.10 PHP PHP 7.0.1 |
| Not Vulnerable: | |
Discussion
PHP 'zend_string_extend()' Function Denial of Service Vulnerability
PHP is prone to a denial-of-service vulnerability.
An attacker may exploit this issue to crash the affected application, resulting in a denial-of-service condition.
PHP 7.1.5 and prior are vulnerable.
PHP is prone to a denial-of-service vulnerability.
An attacker may exploit this issue to crash the affected application, resulting in a denial-of-service condition.
PHP 7.1.5 and prior are vulnerable.
Exploit / POC
PHP 'zend_string_extend()' Function Denial of Service Vulnerability
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
Solution / Fix
PHP 'zend_string_extend()' Function Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
PHP 'zend_string_extend()' Function Denial of Service Vulnerability
References:
References: