Vulnerability Description
In PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the URL parser could be used by attackers to bypass hostname-specific URL checks, as demonstrated by evil.example.com:80#@good.example.com/ and evil.example.com:[email protected]/ inputs to the parse_url function (implemented in the php_url_parse_ex function in ext/standard/url.c).
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Php | Php | <= 5.6.27 |
Related Weaknesses (CWE)
References
- http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=b061fa909de77085d3822a89ab901b9
- http://openwall.com/lists/oss-security/2017/07/10/6Mailing ListPatchThird Party Advisory
- http://php.net/ChangeLog-5.phpRelease NotesVendor Advisory
- http://php.net/ChangeLog-7.phpRelease NotesVendor Advisory
- http://www.securityfocus.com/bid/99552
- https://bugs.php.net/bug.php?id=73192Issue TrackingThird Party Advisory
- https://security.netapp.com/advisory/ntap-20180112-0001/
- http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=b061fa909de77085d3822a89ab901b9
- http://openwall.com/lists/oss-security/2017/07/10/6Mailing ListPatchThird Party Advisory
- http://php.net/ChangeLog-5.phpRelease NotesVendor Advisory
- http://php.net/ChangeLog-7.phpRelease NotesVendor Advisory
- http://www.securityfocus.com/bid/99552
- https://bugs.php.net/bug.php?id=73192Issue TrackingThird Party Advisory
- https://security.netapp.com/advisory/ntap-20180112-0001/
FAQ
What is CVE-2016-10397?
CVE-2016-10397 is a vulnerability with a CVSS score of 7.5 (HIGH). In PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the URL parser could be used by attackers to bypass hostname-specific URL checks, as demonstrated by evil.ex...
How severe is CVE-2016-10397?
CVE-2016-10397 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-10397?
Check the references section above for vendor advisories and patch information. Affected products include: Php Php.