REDHAT-BUG-1611890: Medium severity php vulnerability

Published Aug 3, 2018

Updated

PHP through is vulnerable to an out of bounds access in the phppcre.c:phppcrereplaceimpl() function. An attacker could exploit this by calling pregreplace() with crafted arguments.

Upstream Bug:

https://bugs.php.net/bug.php?id=74604

Affected Software

1 affected component

The PHP Group PHP

Event History

Aug 3, 2018

Data Sourced

via Red Hat·02:16 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1611890?

The vulnerability REDHAT-BUG-1611890 is considered critical due to its potential for exploitation via crafted arguments in preg_replace().

How do I fix REDHAT-BUG-1611890?

To fix REDHAT-BUG-1611890, update your PHP installation to the latest version that addresses this out of bounds access vulnerability.

Who is affected by REDHAT-BUG-1611890?

Any users or applications running vulnerable versions of PHP may be affected by REDHAT-BUG-1611890.

What kind of attack does REDHAT-BUG-1611890 enable?

REDHAT-BUG-1611890 enables attackers to potentially exploit the system by causing an out of bounds access in the php_pcre.c function.

What function in PHP is related to REDHAT-BUG-1611890?

The function related to REDHAT-BUG-1611890 is preg_replace(), which can be exploited with crafted arguments.