CVE-2017-12932
Vulnerability from cvelistv5
Published
2017-08-18 03:00
Modified
2024-08-05 18:51
Severity ?
Summary
ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue can have an unspecified impact on the integrity of PHP.
References
cve@mitre.orghttp://php.net/ChangeLog-7.phpRelease Notes, Vendor Advisory
cve@mitre.orghttp://www.securityfocus.com/bid/100427Third Party Advisory, VDB Entry
cve@mitre.orghttps://access.redhat.com/errata/RHSA-2018:1296
cve@mitre.orghttps://access.redhat.com/errata/RHSA-2019:2519
cve@mitre.orghttps://bugs.php.net/bug.php?id=74103Issue Tracking, Vendor Advisory
cve@mitre.orghttps://github.com/php/php-src/commit/1a23ebc1fff59bf480ca92963b36eba5c1b904c4Patch, Third Party Advisory
cve@mitre.orghttps://security.gentoo.org/glsa/201709-21
cve@mitre.orghttps://security.netapp.com/advisory/ntap-20180112-0001/
cve@mitre.orghttps://www.debian.org/security/2018/dsa-4080
Impacted products
n/an/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:51:07.351Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "100427",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100427"
          },
          {
            "name": "RHSA-2018:1296",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1296"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/php/php-src/commit/1a23ebc1fff59bf480ca92963b36eba5c1b904c4"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20180112-0001/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=74103"
          },
          {
            "name": "DSA-4080",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4080"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-7.php"
          },
          {
            "name": "GLSA-201709-21",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201709-21"
          },
          {
            "name": "RHSA-2019:2519",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2519"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-08-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue can have an unspecified impact on the integrity of PHP."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-08-19T10:06:08",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "100427",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100427"
        },
        {
          "name": "RHSA-2018:1296",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1296"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/php/php-src/commit/1a23ebc1fff59bf480ca92963b36eba5c1b904c4"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20180112-0001/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=74103"
        },
        {
          "name": "DSA-4080",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4080"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-7.php"
        },
        {
          "name": "GLSA-201709-21",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201709-21"
        },
        {
          "name": "RHSA-2019:2519",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2519"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-12932",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue can have an unspecified impact on the integrity of PHP."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "100427",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100427"
            },
            {
              "name": "RHSA-2018:1296",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1296"
            },
            {
              "name": "https://github.com/php/php-src/commit/1a23ebc1fff59bf480ca92963b36eba5c1b904c4",
              "refsource": "CONFIRM",
              "url": "https://github.com/php/php-src/commit/1a23ebc1fff59bf480ca92963b36eba5c1b904c4"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20180112-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20180112-0001/"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=74103",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=74103"
            },
            {
              "name": "DSA-4080",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4080"
            },
            {
              "name": "http://php.net/ChangeLog-7.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-7.php"
            },
            {
              "name": "GLSA-201709-21",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201709-21"
            },
            {
              "name": "RHSA-2019:2519",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2519"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-12932",
    "datePublished": "2017-08-18T03:00:00",
    "dateReserved": "2017-08-17T00:00:00",
    "dateUpdated": "2024-08-05T18:51:07.351Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2017-12932\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2017-08-18T03:29:00.183\",\"lastModified\":\"2018-05-04T01:29:03.847\",\"vulnStatus\":\"Modified\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue can have an unspecified impact on the integrity of PHP.\"},{\"lang\":\"es\",\"value\":\"Ext/standard/var_unserializer.re en PHP en en sus versiones 7.0.x hasta 7.0.22 y versiones 7.1.x hasta 7.1.8 es propenso a un uso de memoria din\u00e1mica antes de liberaci\u00f3n (heap use after free) al deserializar datos que no son de confianza. Esto est\u00e1 relacionado con el uso incorrecto de la API hash para borrado de claves en una situaci\u00f3n de tama\u00f1o de array no v\u00e1lido. La explotaci\u00f3n de este problema puede tener un impacto sin especificar en la integridad de PHP.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\",\"baseScore\":7.5},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":true,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB6890AF-8A0A-46EE-AAD5-CF9AAE14A321\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B90B947-7B54-47F3-9637-2F4AC44079EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"35848414-BD5D-4164-84DC-61ABBB1C4152\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2B1F8402-8551-4F66-A9A7-81D472AB058E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7A773E8E-48CD-4D35-A0FD-629BD9334486\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FC492340-79AF-4676-A161-079A97EC6F0C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1C2D8FE-C380-4B43-B634-A3DBA4700A71\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3EB58393-0C10-413C-8D95-6BAA8BC19A1B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"751F51CA-9D88-4971-A6EC-8C0B72E8E22B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"37B74118-8FC2-44CB-9673-A83DF777B2E6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D56A200-1477-40DA-9444-CFC946157C69\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FD0D1CCC-A857-4C15-899E-08F9255CEE34\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6745CC43-2836-4CD8-848F-EEA08AE9D5AC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7BEB6696-14F9-4D9B-9974-B682FFBB828E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"04146390-021D-4147-9830-9EAA90D120A7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B124547-DC1D-4A92-B8AB-8A1900063786\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F45B2127-CF3D-4D59-9042-AE6DF2908319\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.17:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"29A450E3-931F-4487-A76D-80A38210297A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.18:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C099A0C4-883D-42ED-8359-FFD3ADD692A3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.19:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ABD07432-5A23-491E-892E-42F0F58307D0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"19627ECC-9342-4917-8FCC-7757339E3242\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.21:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8FF89D76-3FB3-42FA-80FF-53C2E222F9E9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.0.22:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AF27AF4F-68BB-465A-8668-44833A87D023\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0C68AA43-ED90-4B98-A5F8-4E210C2CC7CD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2466D297-9442-40B0-A1A7-F9D166396CF8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EADBF7EE-18DC-49F9-BF2F-A09BBAE76F45\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1726E9B6-A7FA-402B-A911-0CE81C623087\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.1.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C3670FF7-2CA3-41A4-92FE-0123497E4E87\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.1.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1C22CE03-DFE5-4CD3-B229-10B219A55434\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.1.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C258AF27-84DF-4FC3-A651-1349BB567FB9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.1.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4E4E7085-5075-4682-BBDD-55BBF828167E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:php:php:7.1.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C84BB8CA-DD39-44F6-8C9C-FF1467815B5E\"}]}]}],\"references\":[{\"url\":\"http://php.net/ChangeLog-7.php\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/100427\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1296\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2519\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://bugs.php.net/bug.php?id=74103\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Vendor Advisory\"]},{\"url\":\"https://github.com/php/php-src/commit/1a23ebc1fff59bf480ca92963b36eba5c1b904c4\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201709-21\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://security.netapp.com/advisory/ntap-20180112-0001/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.debian.org/security/2018/dsa-4080\",\"source\":\"cve@mitre.org\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.