CVE-2017-8923 The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial....
CriticalCVSS 9.8
EPSS 7.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script's use of .= with a long string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | < 7.4.24 | 7.4.24 |
| PHP | >= 8.0.0, < 8.0.11 | 8.0.11 |
References
- 98518 third-party-advisory vdb-entry
- bugs.php.net exploit issue-tracking vendor-advisory
- security.netapp.com