UBUNTU-CVE-2016-7398: Critical severity ubuntu/php-pecl-http vulnerability

Q: What must an attacker be able to do to exploit this issue?

An attacker needs to be able to send crafted HTTP requests to an application using the affected PHP pecl-http extension. No authentication or user interaction is required according to the supplied severity vector.

Q: What is the potential impact?

Successful exploitation can crash PHP and may allow arbitrary code execution. The supplied severity vector indicates high impact to confidentiality, integrity, and availability.

Q: Which extension versions are affected?

Affected versions include pecl-http 3.1.0beta2 and earlier for PHP 7, and 2.6.0beta2 and earlier for PHP 5.

Published Sep 6, 2019

Updated

A type confusion vulnerability in the mergeparam() function of phphttpparams.c in PHP's pecl-http extension 3.1.0beta2 (PHP 7) and earlier as well as 2.6.0beta2 (PHP 5) and earlier allows attackers to crash PHP and possibly execute arbitrary code via crafted HTTP requests.

Affected Software

1 affected componentFixes available

ubuntu/php-pecl-http<3.0.1-0ubuntu5+esm1

3.0.1-0ubuntu5+esm1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/php-pecl-http to a version that resolves this vulnerability.
Fixed in 3.0.1-0ubuntu5+esm1

Event History

Sep 6, 2019

CVE Published

via OSV·07:15 PM

Data Sourced

via OSV·07:15 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What must an attacker be able to do to exploit this issue?

An attacker needs to be able to send crafted HTTP requests to an application using the affected PHP pecl-http extension. No authentication or user interaction is required according to the supplied severity vector.

What is the potential impact?