PHP HTTP Fopen Wrapper Stack Buffer Overflow (CVE-2018-7584)

Related Vulnerabilities: CVE-2018-7584  

Check Point Reference: CPAI-2018-2634 Date Published: 4 Dec 2023 Severity: Critical Last Updated: Monday 04 December, 2023 Source: Industry Reference:CVE-2018-7584
Protection Provided by:

Security Gateway
R81, R80, R77, R75

Who is Vulnerable? PHP 5.6.33 and prior
PHP 7.0.0 and later, prior to 7.0.28
PHP 7.1.0 and later, 7.1.14 and prior
PHP 7.2.0 and later, 7.2.2 and prior Vulnerability Description A stack buffer overflow vulnerability exists in PHP. The vulnerability is due to improper parsing of HTTP responses. A remote attacker could exploit this vulnerability by causing a target PHP server to send a request to an attacker controlled server.