Published: 10/07/2017 Updated: 14/01/2018

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 694

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

In PHP prior to 5.6.31, 7.x prior to 7.0.17, and 7.1.x prior to 7.1.3, remote attackers could cause a CPU consumption denial of service attack by injecting long form variables, related to main/php_variables.c.

Vulnerable Product	Search on Vulmon	Subscribe to Product
php php 7.0.0
php php 7.0.1
php php 7.0.8
php php 7.0.9
php php 7.1.0
php php 7.1.1
php php 7.0.4
php php 7.0.5
php php 7.0.12
php php 7.0.13
php php
php php 7.0.6
php php 7.0.7
php php 7.0.14
php php 7.0.15
php php 7.0.16
php php 7.0.2
php php 7.0.3
php php 7.0.10
php php 7.0.11
php php 7.1.2

Several vulnerabilities were found in PHP, a widely-used open source general purpose scripting language: CVE-2017-11142 Denial of service via overly long form variables CVE-2017-11143 Invalid free() in wddx_deserialize() CVE-2017-11144 Denial of service in openssl extension due to incorrect return value check of OpenSSL sealing fun ...

Tenable has released updates for SecurityCenter 532, 540, 542, 545, 550, and 551 to bring the version of PHP included with them to 5631 PHP 5631 addresses multiple vulnerabilities: CVE-2017-11142: In PHP before 5631, 7x before 7017, and 71x before 713, remote attackers could cause a CPU consumption denial of service atta ...

CWE-400 https://github.com/php/php-src/commit/a15bffd105ac28fd0dd9b596632dbf035238fda3 https://github.com/php/php-src/commit/0f8cf3b8497dc45c010c44ed9e96518e11e19fc3 https://bugs.php.net/bug.php?id=73807 http://php.net/ChangeLog-7.php http://php.net/ChangeLog-5.php http://openwall.com/lists/oss-security/2017/07/10/6 http://www.securityfocus.com/bid/99601 https://www.tenable.com/security/tns-2017-12 https://www.debian.org/security/2018/dsa-4081 https://security.netapp.com/advisory/ntap-20180112-0001/https://nvd.nist.gov https://www.debian.org/security/./dsa-4081

CVE-2017-11142

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect