In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serialized object may lead to use-after-free. A remote attacker may exploit this bug to gain arbitrary code execution.
http://blog.checkpoint.com/wp-content/uploads/2016/12/PHP_Technical_Report.pdf
http://www.securityfocus.com/bid/95151
http://www.securitytracker.com/id/1037659
https://access.redhat.com/errata/RHSA-2018:1296
https://bugs.php.net/bug.php?id=73092
Source: MITRE
Published: 2017-01-12
Updated: 2018-05-04
Type: CWE-416
Base Score: 7.5
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Impact Score: 6.4
Exploitability Score: 10
Severity: HIGH
Base Score: 9.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Impact Score: 5.9
Exploitability Score: 3.9
Severity: CRITICAL
OR
cpe:2.3:a:php:php:7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:php:php:7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:php:php:7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:php:php:7.0.3:*:*:*:*:*:*:*
cpe:2.3:a:php:php:7.0.4:*:*:*:*:*:*:*
cpe:2.3:a:php:php:7.0.5:*:*:*:*:*:*:*
cpe:2.3:a:php:php:7.0.6:*:*:*:*:*:*:*
cpe:2.3:a:php:php:7.0.7:*:*:*:*:*:*:*
cpe:2.3:a:php:php:7.0.8:*:*:*:*:*:*:*
cpe:2.3:a:php:php:7.0.9:*:*:*:*:*:*:*
cpe:2.3:a:php:php:7.0.10:*:*:*:*:*:*:*
cpe:2.3:a:php:php:7.0.11:*:*:*:*:*:*:*
cpe:2.3:a:php:php:7.0.12:*:*:*:*:*:*:*
ID | Name | Product | Family | Severity |
---|---|---|---|---|
98856 | PHP 7.1.x < 7.1.1 Multiple Vulnerabilities | Web Application Scanning | Component Vulnerability | high |
98839 | PHP 7.0.x < 7.0.15 Multiple Vulnerabilities | Web Application Scanning | Component Vulnerability | high |
119993 | SUSE SLES12 Security Update : php7 (SUSE-SU-2017:0534-1) | Nessus | SuSE Local Security Checks | high |
99039 | Amazon Linux AMI : php70 (ALAS-2017-812) | Nessus | Amazon Linux Local Security Checks | high |
99003 | Debian DLA-875-1 : php5 security update | Nessus | Debian Local Security Checks | high |
97563 | openSUSE Security Update : php7 (openSUSE-2017-304) | Nessus | SuSE Local Security Checks | high |
97521 | Ubuntu 16.04 LTS / 16.10 : php7.0 regression (USN-3211-2) | Nessus | Ubuntu Local Security Checks | high |
97384 | Ubuntu 16.04 LTS / 16.10 : php7.0 vulnerabilities (USN-3211-1) | Nessus | Ubuntu Local Security Checks | high |
97190 | Ubuntu 12.04 LTS / 14.04 LTS : php5 vulnerabilities (USN-3196-1) | Nessus | Ubuntu Local Security Checks | high |
96801 | PHP 7.1.x < 7.1.1 Multiple Vulnerabilities | Nessus | CGI abuses | high |
96800 | PHP 7.0.x < 7.0.15 Multiple Vulnerabilities | Nessus | CGI abuses | high |
96292 | FreeBSD : PHP -- multiple vulnerabilities (1b61ecef-cdb9-11e6-a9a5-b499baebfeaf) | Nessus | FreeBSD Local Security Checks | high |
9843 | PHP < 7.1.0 Multiple Vulnerabilities | Nessus Network Monitor | Web Servers | critical |