Vulnerability Description
main/streams/xp_socket.c in PHP 7.x before 2017-03-07 misparses fsockopen calls, such as by interpreting fsockopen('127.0.0.1:80', 443) as if the address/port were 127.0.0.1:80:443, which is later truncated to 127.0.0.1:80. This behavior has a security risk if the explicitly provided port number (i.e., 443 in this example) is hardcoded into an application as a security policy, but the hostname argument (i.e., 127.0.0.1:80 in this example) is obtained from untrusted input.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Php | Php | >= 7.0.0, < 7.0.16 |
Related Weaknesses (CWE)
References
- https://bugs.php.net/bug.php?id=74192Permissions RequiredVendor Advisory
- https://github.com/php/php-src/commit/bab0b99f376dac9170ac81382a5ed526938d595aPatchThird Party Advisory
- https://bugs.php.net/bug.php?id=74192Permissions RequiredVendor Advisory
- https://github.com/php/php-src/commit/bab0b99f376dac9170ac81382a5ed526938d595aPatchThird Party Advisory
FAQ
What is CVE-2017-7189?
CVE-2017-7189 is a vulnerability with a CVSS score of 7.5 (HIGH). main/streams/xp_socket.c in PHP 7.x before 2017-03-07 misparses fsockopen calls, such as by interpreting fsockopen('127.0.0.1:80', 443) as if the address/port were 127.0.0.1:80:443, which is later tru...
How severe is CVE-2017-7189?
CVE-2017-7189 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-7189?
Check the references section above for vendor advisories and patch information. Affected products include: Php Php.