CVE-2018-17082: XSS

Q: What is the severity of CVE-2018-17082?

The severity of CVE-2018-17082 is classified as medium due to its potential for cross-site scripting (XSS) attacks.

Q: How do I fix CVE-2018-17082?

To resolve CVE-2018-17082, you should upgrade to PHP versions 5.6.38, 7.0.32, 7.1.22, or 7.2.10 or later.

Q: What types of applications are affected by CVE-2018-17082?

CVE-2018-17082 affects any application running on PHP versions prior to the mentioned patched versions.

Q: What attack vector does CVE-2018-17082 exploit?

CVE-2018-17082 exploits an XSS vulnerability through the mishandling of 'Transfer-Encoding: chunked' requests.

Q: Is there a known workaround for CVE-2018-17082?

There are no known workarounds for CVE-2018-17082; upgrading is the recommended solution.

Published Sep 13, 2018

Updated

A cross-site scripting (XSS) vulnerability in Apache2 component of PHP was found. When using 'Transfer-Encoding: chunked', the request allows remote attackers to potentially run a malicious script in a victim's browser. This vulnerability can be exploited only by producing malformed requests and it's believed it's unlikely to be used in practical cross-site scripting attack.

Other sources

Fixed bug (XSS due to the header Transfer-Encoding: chunked). (CVE-2018-17082)

— PHP

The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a "Transfer-Encoding: chunked" request, because the bucket brigade is mishandled in the phphandler function in sapi/apache2handler/sapiapache2.c.

Affected Software

20 affected componentsFixes available

redhat/rh-php71-php<0:7.1.30-1.el7

0:7.1.30-1.el7

redhat/php<5.6.38

5.6.38

redhat/php<7.0.32

7.0.32

redhat/php<7.1.22

7.1.22

redhat/php<7.2.10

7.2.10

PHP PHP<7.0.32

7.0.32

PHP PHP<5.6.38

PHP PHP>=7.0.0<7.0.32

PHP PHP>=7.1.0<7.1.22

PHP PHP>=7.2.0<7.2.10

Debian Debian Linux=8.0

Debian Debian Linux=9.0

NetApp Storage Automation Store

debian/php5

debian/php7.0

debian/php7.1

alpine/php5<5.6.38-r0

5.6.38-r0

alpine/php5<5.6.38-r0

5.6.38-r0

alpine/php7<7.0.32-r0

7.0.32-r0

alpine/php7<7.1.29-r0

7.1.29-r0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/rh-php71-php to a version that resolves this vulnerability.
Fixed in 0:7.1.30-1.el7
Upgrade
Upgrade redhat/php to a version that resolves this vulnerability.
Fixed in 5.6.38
Upgrade
Upgrade redhat/php to a version that resolves this vulnerability.
Fixed in 7.0.32
Upgrade
Upgrade redhat/php to a version that resolves this vulnerability.
Fixed in 7.1.22
Upgrade
Upgrade redhat/php to a version that resolves this vulnerability.
Fixed in 7.2.10
Upgrade
Upgrade PHP to a version that resolves this vulnerability.
Fixed in 7.0.32
Upgrade
Upgrade alpine/php5 to a version that resolves this vulnerability.
Fixed in 5.6.38-r0
Upgrade
Upgrade alpine/php7 to a version that resolves this vulnerability.
Fixed in 7.0.32-r0
Upgrade
Upgrade alpine/php7 to a version that resolves this vulnerability.
Fixed in 7.1.29-r0
Upgrade
Upgrade PHP to a version that resolves this vulnerability.
Fixed in 5.6.38
Upgrade
Upgrade PHP to a version that resolves this vulnerability.
Fixed in 7.1.22
Upgrade
Upgrade PHP to a version that resolves this vulnerability.
Fixed in 7.2.10

Event History

Sep 13, 2018

CVE Published

via PHP·12:00 AM

Sep 16, 2018

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Data Sourced

via OSV·03:29 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

DLA-1509-1

Frequently Asked Questions

What is the severity of CVE-2018-17082?