REDHAT-BUG-2328523: Medium severity PHP PHP vulnerability
In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, when using streams with configured proxy and "requestfulluri" option, the URI is not properly sanitized which can lead to HTTP request smuggling and allow the attacker to use the proxy to perform arbitrary HTTP requests originating from the server, thus potentially gaining access to resources not normally available to the external user.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
PHPto a version that resolves this vulnerability.Fixed in 8.1.31 - Upgrade
Upgrade
PHPto a version that resolves this vulnerability.Fixed in 8.2.26 - Upgrade
Upgrade
PHPto a version that resolves this vulnerability.Fixed in 8.3.14
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2328523?
REDHAT-BUG-2328523 is classified as a medium severity vulnerability due to its potential for HTTP request smuggling.
How do I fix REDHAT-BUG-2328523?
To fix REDHAT-BUG-2328523, you should upgrade your PHP installation to versions 8.1.31, 8.2.26, or 8.3.14 or later.
What versions of PHP are affected by REDHAT-BUG-2328523?
REDHAT-BUG-2328523 affects PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, and 8.3.* before 8.3.14.
What is HTTP request smuggling in the context of REDHAT-BUG-2328523?
HTTP request smuggling in REDHAT-BUG-2328523 occurs when improperly sanitized URIs allow an attacker to manipulate and send unauthorized requests through a proxy.
Is there a workaround for REDHAT-BUG-2328523?
While upgrading PHP is recommended, temporarily disabling or reconfiguring the use of streams with proxies can mitigate the risk associated with REDHAT-BUG-2328523.