PHP CVE-2017-11147 Memory Corruption Vulnerability

Bugtraq ID:	99607
Class:	Design Error
CVE:	CVE-2017-11147
Remote:	Yes
Local:	No
Published:	Jul 10 2017 12:00AM
Updated:	Jul 10 2017 12:00AM
Credit:	eyal
Vulnerable:	PHP PHP 7.0.14 PHP PHP 7.0.12 PHP PHP 7.0.5 PHP PHP 7.0.3 PHP PHP 7.0 PHP PHP 5.6.29 PHP PHP 5.6.27 PHP PHP 5.6.22 PHP PHP 5.6.21 PHP PHP 5.6.20 PHP PHP 5.6.19 PHP PHP 5.6.18 PHP PHP 5.6.17 PHP PHP 5.6.13 PHP PHP 5.6.12 PHP PHP 5.6.11 PHP PHP 5.6.5 PHP PHP 5.6.4 PHP PHP 5.6.1 PHP PHP 5.6 PHP PHP 7.0.9 PHP PHP 7.0.8 PHP PHP 7.0.7 PHP PHP 7.0.6 PHP PHP 7.0.4 PHP PHP 7.0.2 PHP PHP 7.0.13 PHP PHP 7.0.11 PHP PHP 7.0.10 PHP PHP 7.0.1 PHP PHP 5.6.9 PHP PHP 5.6.8 PHP PHP 5.6.7 PHP PHP 5.6.6 PHP PHP 5.6.3 PHP PHP 5.6.28 PHP PHP 5.6.26 PHP PHP 5.6.25 PHP PHP 5.6.24 PHP PHP 5.6.23 PHP PHP 5.6.2 PHP PHP 5.6.14 PHP PHP 5.6.10
Not Vulnerable:	PHP PHP 7.0.15 PHP PHP 5.6.30

PHP CVE-2017-11147 Memory Corruption Vulnerability

PHP is prone to a memory-corruption vulnerability.

Attackers can exploit this issue to cause to obtain sensitive information or crash the application resulting in a denial-of-service condition.

Versions prior to PHP 5.6.30 and 7.0.15 are vulnerable.

PHP CVE-2017-11147 Memory Corruption Vulnerability

The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.

PHP CVE-2017-11147 Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.