CVE-2016-7398
Summary
by MITRE
A type confusion vulnerability in the merge_param() function of php_http_params.c in PHP's pecl-http extension 3.1.0beta2 (PHP 7) and earlier as well as 2.6.0beta2 (PHP 5) and earlier allows attackers to crash PHP and possibly execute arbitrary code via crafted HTTP requests.
Once again VulDB remains the best source for vulnerability data.
Analysis
by VulDB Data Team • 12/13/2023
Xxx Xxxxxxxxxxxxx Xxx-xxxx-xxxx Xxxxxxxxxx X Xxxxxxxx Xxxx Xxxxxxxxx Xxxx Xxxxxx Xxx Xxx_xxxx_xxxxxx.x Xxxx Xx Xxx'x Xxxx-xxxx Xxxxxxxxx, Xxxxxxxxx Xxxxxxxx Xx Xx X.x.xxxxxx Xxx Xxx X Xxx X.x.xxxxxx Xxx Xxx X. Xxxx Xxxxx Xxxxxx Xxxx Xxxxxxxx Xxxxxxxx Xx Xxxx Xxxxx Xxxxxx Xxxxxxxxx Xxxxxxx Xxxxxxxxxx, Xxxxxxxx X Xxxxxxxx Xxxxx Xxx Xxxxxxxxxxx Xxxxx Xx Xxxxxxxxx Xxxxxxxxxxx Xxxxxxx Xxxxxxxxx Xxxx Xxxxxxxxxx. Xxx Xxxxxxxxxxxxx Xxxxxxxxxxxx Xxxxxxxxx Xx Xxx Xxxxx_xxxxx() Xxxxxxxx Xxxxx Xxxxxxxxx Xxxx Xxxxxxxxxx, Xxxxxx Xx X Xxxxx Xxxxxx Xxx Xxxxxxxxxxxx Xxxxxxx Xxxxxxxxxxx Xxxxxxx Xxxx Xxxxxxxx Xxxx Xxxxxxxxxx Xxxxxxxxx Xxxxxxxxxx.
Xxx Xxxxxxxxx Xxxxxxxxxxxx Xx Xxxx Xxxxxxxxxxxxx Xxxxx Xxxx X Xxxxxxxxxxx Xxxx Xx Xxxx Xxxxxxxxxx Xxx Xxxxxx Xxxxxxxxxx Xxxxxx Xxx Xxxx Xxxxxxxxx Xxxxxxxxxx Xxxxxxxx. Xxxx Xxx Xxxxx_xxxxx() Xxxxxxxx Xxxxxxxxxx Xxxxxxx Xxxx Xxxxxxxx, Xx Xxxxx Xx Xxxxxxxx Xxxxxxxx Xxx Xxxxx Xx Xxxxxxxxxx Xxxxx Xxxxxx, Xxxxxxx Xx X Xxxxxxxxx Xxxxx Xxxxxx Xxxxxxxxxx Xxxxxx. Xxxx Xxxx Xxxxxxxxx Xxxxxx Xxxxxxxxx Xx Xxxxxxxxxx Xxx Xxxxxxxxx Xxxx Xx Xxx Xxx Xxxxxxx Xx Xxxxxxxxxxx Xxxxxxxx Xxxxxx Xxxxxxxxx Xxxx Xxxxxxxxx Xxxx. Xxx Xxxxxxxxxxxxx Xx Xxxxxxxxxx Xxxxx Xxx-xxx Xx X Xxxx Xxxxxxx Xxxxxxxxxxx, Xxxxxx Xxx Xxxxxx Xxxxxxxxxxxx Xxxxxxxx Xxxx Xxxxxxx Xxxxxx Xxxxxxxxxxxx Xxxxxxxxxx Xxxx Xxx Xxxx Xx Xxxxxxxxx Xxxx Xxxxxxxxx.
Xxx Xxxxxxxxxxx Xxxxxx Xx Xxx-xxxx-xxxx Xxxxxxx Xxxxxx Xxxxxx Xxxxxxx Xxxxxxxxxx Xx Xxxxxxxxxxx Xxxxxx Xxxx Xxxxxx Xxxxxxxxxx Xxxx Xxxxxxxxx Xxxxxxxxxxxx. Xxxxxxxxx Xxx Xxxxxxxx Xxxx Xxxxxxxxxxxxx Xx Xxxxx Xxx Xxxxxxxxx Xx Xxxxx Xxxxxxxxxx, Xxxxxxx Xx Xxxxxx Xx Xxxxxxx Xxxxxxxxxx, Xx Xxxx Xxxxxxxxxx, Xxxxxxx Xxxxxxxxx Xxxx Xx Xxx Xxxxxxxx Xxxxxx Xxxx Xxx Xxxxxxxxxx Xx Xxx Xxx Xxxxxx Xxxxxxx. Xxxx Xxxxx Xxx Xxxxxxxxxxxxx Xxxxxxxxxxxx Xxxxxxxxx Xx Xxx Xxxxxx Xxxxxxxxxxxx Xxxxx Xxx Xxxxxxxxxxxx Xxxxxx Xxxx Xxxxx Xxxxxxxx. Xxx Xxxxxx Xxxxxx Xxxxxxx Xxxxxxx Xxxx Xxxxxxxx Xxxxx Xxxx Xxx Xxx Xxxxxxxxxxx Xxxxx Xxx Xxxxxxxx Xxxx-xxxx Xxxxxxxxx Xxxxx Xxxxxx X Xxxxxx, Xxxxxxxxxx Xxxxx Xxxxxxxxxx Xxxxxxxx Xxxx Xxxxxx Xxxxxxx Xxxxxx Xxxxxxxxxx.
Xxxxxxxxxx Xxxxxxxxxx Xxx Xxx-xxxx-xxxx Xxxxxxxxx Xxxxx Xx Xxxxxxxxx Xxxxxxx Xxxxxxx Xx Xxxxxxx Xxxxxxxx Xx Xxx Xxxx-xxxx Xxxxxxxxx, Xxxxxxxxxxxx Xxxxxxxx Xxxx Xxxxxxx Xxx Xxxx Xxxxxxxxx Xx Xxxxx_xxxxx() Xxxxxxxx. Xxxxxx Xxxxxxxxxxxxxx Xxxxxx Xxxxxxxxxx Xxxxxxxx Xxxxx Xxx Xxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxx Xxxxx Xxx Xxxx Xxxxxxxxxxxxx, Xxxxx Xxxx Xxxxxxxxxxxx Xxxxxx Xxxxx Xxxxxxxxxx Xxxxxxxx Xx Xxxxxx Xxx Xxxxxx Xxxxxxx. Xxxxxxx-xxxxx Xxxxxxxx Xxxx Xx Xxx Xxxxxxxxxxx Xxxxxxxxx Xxx Xxxxxxx Xxxxxxxxxx Xxxxxxxxxx Xx Xxxxxxxxx Xxxxxxxxxx Xxxx Xxxxxxxx Xxxx Xxxxx Xxxxxxx Xx Xxxxxxx Xxxx Xxxxxxxxxxxxx. Xxx Xxx&xx Xxxxxxxxx Xxxxxxxxxxx Xxxx Xxxxxxxxxxxxx Xxxxx Xxxxx Xx Xxxxxxxxxxxx Xxx Xxxxxx Xxxxxxxxx, Xxxxxxxxxxx Xxx Xxxx Xxx Xxxx Xxxxxx-xxxx Xxxxxxxx Xxx Xxxxxxx-xxxxx Xxxxxxxxxx Xx Xxxxxx Xxxxxxxxx Xxxxxxxxxxxx Xxxxxxxx. Xxxxxxxxxxxxx Xxxxxx Xxxx Xxxxxxxx Xxxxxxxxxxxx Xxxxxxx Xxxxxxxxxxx Xxx Xxxxxxxxxx Xxx Xxxxxxxx Xxx Xxxxxxx Xxxxxxxx Xxxx Xxxxx Xxxxxxxx Xxxxxxxxxxxx Xxxxxxxx, Xxxxx Xxx Xxxxxxxxx Xxx Xxxxxxxxx Xxxxxxxxxx Xxx Xxxxxxxxxx Xxxxxx Xx Xxxxxxxxxxx Xxxxxxx.