[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248268

 
 

909

 
 

195051

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS-2018-982

ID: oval:org.secpod.oval:def:1600861Date: (C)2018-04-03   (M)2022-07-20
Class: PATCHFamily: unix




Stack-based buffer under-read in ext/standard/http_fopen_wrapper.c:php_stream_url_wrap_http_ex function when parsing HTTP response allows denial of service:In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the php_stream_url_wrap_http_ex function in ext/standard/http_fopen_wrapper.c. This subsequently results in copying a large string

Platform:
Amazon Linux AMI
Product:
php71
Reference:
ALAS-2018-982
CVE-2018-7584
CVE    1
CVE-2018-7584
CPE    2
cpe:/o:amazon:linux
cpe:/a:php:php71

© SecPod Technologies