kritisch
CVE-2018-7584
php: Stack-based buffer under-read in php_stream_url_wrap_http_ex() in http_fopen_wrapper.c when parsing HTTP response
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat5.9CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Red Hat (mittel), Amazon (mittel), Oracle (mittel), Ubuntu (mittel).
Beschreibung
In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the php_stream_url_wrap_http_ex function in ext/standard/http_fopen_wrapper.c. This subsequently results in copying a large string.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| alpine 3.4 | php5 | 5.6.34-r0 |
| alpine 3.5 | php5, php7 | 5.6.34-r0 und 1 weitere |
| alpine 3.6 | php5, php7 | 5.6.34-r0 und 1 weitere |
| alpine 3.7 | php5, php7 | 5.6.34-r0 und 1 weitere |
| alpine 3.8 | php5 | 5.6.34-r0 |
| amazon linux 1 | php56, php56-bcmath, php56-cli und 96 weitere | 5.6.35-1.137.amzn1 und 2 weitere |
| debian 7 | php5 | 5.4.45-0+deb7u13 |
| debian 8 | php5 | 5.6.36+dfsg-0+deb8u1 |
| debian 9 | php7.0 | 7.0.30-0+deb9u1 |
| Oracle Linux 7 | php, php-bcmath, php-cli und 22 weitere | 5.4.16-48.el7 |
| Red Hat | php, php-bcmath, php-cli und 24 weitere | kein Fix angegeben |
| ubuntu 14.04 | php5 | 5.5.9+dfsg-1ubuntu4.24 |
Alle 169 Einträge aus 18 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| alpine 3.4 | php5 | 5.6.34-r0 |
| alpine 3.5 | php5 | 5.6.34-r0 |
| alpine 3.5 | php7 | 7.0.28-r0 |
| alpine 3.6 | php5 | 5.6.34-r0 |
| alpine 3.6 | php7 | 7.1.15-r0 |
| alpine 3.7 | php5 | 5.6.34-r0 |
| alpine 3.7 | php7 | 7.1.15-r0 |
| alpine 3.8 | php5 | 5.6.34-r0 |
| amazon linux 1 | php56 | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-bcmath | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-cli | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-common | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-dba | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-dbg | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-debuginfo | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-devel | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-embedded | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-enchant | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-fpm | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-gd | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-gmp | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-imap | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-intl | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-ldap | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-mbstring | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-mcrypt | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-mssql | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-mysqlnd | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-odbc | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-opcache | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-pdo | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-pgsql | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-process | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-pspell | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-recode | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-snmp | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-soap | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-tidy | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-xml | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php56-xmlrpc | 5.6.35-1.137.amzn1 |
| amazon linux 1 | php70 | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-bcmath | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-cli | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-common | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-dba | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-dbg | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-debuginfo | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-devel | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-embedded | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-enchant | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-fpm | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-gd | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-gmp | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-imap | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-intl | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-json | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-ldap | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-mbstring | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-mcrypt | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-mysqlnd | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-odbc | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-opcache | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-pdo | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-pdo-dblib | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-pgsql | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-process | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-pspell | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-recode | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-snmp | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-soap | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-tidy | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-xml | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-xmlrpc | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php70-zip | 7.0.29-1.28.amzn1 |
| amazon linux 1 | php71 | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-bcmath | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-cli | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-common | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-dba | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-dbg | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-debuginfo | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-devel | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-embedded | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-enchant | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-fpm | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-gd | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-gmp | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-imap | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-intl | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-json | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-ldap | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-mbstring | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-mcrypt | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-mysqlnd | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-odbc | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-opcache | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-pdo | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-pdo-dblib | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-pgsql | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-process | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-pspell | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-recode | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-snmp | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-soap | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-tidy | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-xml | 7.1.15-1.31.amzn1 |
| amazon linux 1 | php71-xmlrpc | 7.1.15-1.31.amzn1 |
| debian 7 | php5 | 5.4.45-0+deb7u13 |
| debian 8 | php5 | 5.6.36+dfsg-0+deb8u1 |
| debian 9 | php7.0 | 7.0.30-0+deb9u1 |
| Oracle Linux 7 | php | 5.4.16-48.el7 |
| Oracle Linux 7 | php-bcmath | 5.4.16-48.el7 |
| Oracle Linux 7 | php-cli | 5.4.16-48.el7 |
| Oracle Linux 7 | php-common | 5.4.16-48.el7 |
| Oracle Linux 7 | php-dba | 5.4.16-48.el7 |
| Oracle Linux 7 | php-devel | 5.4.16-48.el7 |
| Oracle Linux 7 | php-embedded | 5.4.16-48.el7 |
| Oracle Linux 7 | php-enchant | 5.4.16-48.el7 |
| Oracle Linux 7 | php-fpm | 5.4.16-48.el7 |
| Oracle Linux 7 | php-gd | 5.4.16-48.el7 |
| Oracle Linux 7 | php-intl | 5.4.16-48.el7 |
| Oracle Linux 7 | php-ldap | 5.4.16-48.el7 |
| Oracle Linux 7 | php-mbstring | 5.4.16-48.el7 |
| Oracle Linux 7 | php-mysql | 5.4.16-48.el7 |
| Oracle Linux 7 | php-mysqlnd | 5.4.16-48.el7 |
| Oracle Linux 7 | php-odbc | 5.4.16-48.el7 |
| Oracle Linux 7 | php-pdo | 5.4.16-48.el7 |
| Oracle Linux 7 | php-pgsql | 5.4.16-48.el7 |
| Oracle Linux 7 | php-process | 5.4.16-48.el7 |
| Oracle Linux 7 | php-pspell | 5.4.16-48.el7 |
| Oracle Linux 7 | php-recode | 5.4.16-48.el7 |
| Oracle Linux 7 | php-snmp | 5.4.16-48.el7 |
| Oracle Linux 7 | php-soap | 5.4.16-48.el7 |
| Oracle Linux 7 | php-xml | 5.4.16-48.el7 |
| Oracle Linux 7 | php-xmlrpc | 5.4.16-48.el7 |
| Red Hat | php | kein Fix angegeben |
| Red Hat | php-bcmath | kein Fix angegeben |
| Red Hat | php-cli | kein Fix angegeben |
| Red Hat | php-common | kein Fix angegeben |
| Red Hat | php-dba | kein Fix angegeben |
| Red Hat | php-devel | kein Fix angegeben |
| Red Hat | php-embedded | kein Fix angegeben |
| Red Hat | php-enchant | kein Fix angegeben |
| Red Hat | php-fpm | kein Fix angegeben |
| Red Hat | php-gd | kein Fix angegeben |
| Red Hat | php-imap | kein Fix angegeben |
| Red Hat | php-intl | kein Fix angegeben |
| Red Hat | php-ldap | kein Fix angegeben |
| Red Hat | php-mbstring | kein Fix angegeben |
| Red Hat | php-mysql | kein Fix angegeben |
| Red Hat | php-odbc | kein Fix angegeben |
| Red Hat | php-pdo | kein Fix angegeben |
| Red Hat | php-pgsql | kein Fix angegeben |
| Red Hat | php-process | kein Fix angegeben |
| Red Hat | php-pspell | kein Fix angegeben |
| Red Hat | php-recode | kein Fix angegeben |
| Red Hat | php-snmp | kein Fix angegeben |
| Red Hat | php-soap | kein Fix angegeben |
| Red Hat | php-tidy | kein Fix angegeben |
| Red Hat | php-xml | kein Fix angegeben |
| Red Hat | php-xmlrpc | kein Fix angegeben |
| Red Hat | php-zts | kein Fix angegeben |
| ubuntu 14.04 | php5 | 5.5.9+dfsg-1ubuntu4.24 |
| ubuntu 14.04-ESM | php5 | 5.5.9+dfsg-1ubuntu4.24 |
| ubuntu 16.04 | php7.0 | 7.0.28-0ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | php7.0 | 7.0.28-0ubuntu0.16.04.1 |
| ubuntu 17.10 | php7.1 | 7.1.15-0ubuntu0.17.10.1 |
| ubuntu 18.04 | php7.2 | 7.2.3-1ubuntu1 |
| ubuntu 18.04-ESM | php7.2 | 7.2.3-1ubuntu1 |
Referenzen
- http://php.net/ChangeLog-7.php
- http://www.securityfocus.com/bid/103204
- http://www.securitytracker.com/id/1041607
- https://access.redhat.com/errata/RHSA-2019:2519
- https://access.redhat.com/security/cve/CVE-2018-7584
- https://bugs.php.net/bug.php?id=75981
- https://github.com/php/php-src/commit/523f230c831d7b33353203fa34aee4e92ac12bba
- https://linux.oracle.com/cve/CVE-2018-7584.html
Alle 21 Referenzen
- https://linux.oracle.com/errata/ELSA-2020-1112.html
- https://lists.debian.org/debian-lts-announce/2018/03/msg00030.html
- https://lists.debian.org/debian-lts-announce/2018/06/msg00005.html
- https://nvd.nist.gov/vuln/detail/CVE-2018-7584
- https://ubuntu.com/security/notices/USN-3600-1
- https://ubuntu.com/security/notices/USN-3600-2
- https://usn.ubuntu.com/3600-1/
- https://usn.ubuntu.com/3600-2/
- https://www.cve.org/CVERecord?id=CVE-2018-7584
- https://www.debian.org/security/2018/dsa-4240
- https://www.exploit-db.com/exploits/44846/
- https://www.tenable.com/security/tns-2018-03
- https://www.tenable.com/security/tns-2018-12