The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a denial of service (memory consumption and application crash) or possibly have unspecified other impact by triggering crafted operations on array data structures.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a denial of     service (memory consumption and application crash) or possibly have unspecified other impact by triggering     crafted operations on array data structures. (CVE-2017-9119)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the php packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to     string objects that result in a negative length, which allows remote attackers to cause a denial of     service (application crash) or possibly have unspecified other impact by leveraging a script's use of .=     with a long string. (CVE-2017-8923)

  - PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.
    (CVE-2017-9118)

  - The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a denial of     service (memory consumption and application crash) or possibly have unspecified other impact by triggering     crafted operations on array data structures. (CVE-2017-9119)

  - PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and     application crash) or possibly have unspecified other impact via a long string because of an Integer     overflow in mysqli_real_escape_string. (CVE-2017-9120)

  - In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress     'quines' gzip files, resulting in an infinite loop. (CVE-2022-31628)

  - In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site     attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or     `__Secure-` cookie by PHP applications. (CVE-2022-31629)

  - In PHP versions prior to 7.4.33, 8.0.25 and 8.2.12, when using imageloadfont() function in gd extension,     it is possible to supply a specially crafted font file, such as if the loaded font is used with     imagechar() function, the read outside allocated buffer will be used. This can lead to crashes or     disclosure of confidential information. (CVE-2022-31630)

  - The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer     overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties.
    This occurs in the sponge function interface. (CVE-2022-37454)

  - php: PDO::quote() may return unquoted string due to an integer overflow (CVE-2022-31631)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to     string objects that result in a negative length, which allows remote attackers to cause a denial of     service (application crash) or possibly have unspecified other impact by leveraging a script's use of .=     with a long string. (CVE-2017-8923)

  - PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.
    (CVE-2017-9118)

  - The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a denial of     service (memory consumption and application crash) or possibly have unspecified other impact by triggering     crafted operations on array data structures. (CVE-2017-9119)

  - PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and     application crash) or possibly have unspecified other impact via a long string because of an Integer     overflow in mysqli_real_escape_string. (CVE-2017-9120)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5300-2 advisory.

    USN-5300-1 fixed vulnerabilities in PHP. This update provides the corresponding updates for Ubuntu 18.04     LTS and Ubuntu 20.04 LTS.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5300-1 advisory.

    It was discovered that PHP incorrectly handled certain scripts. An attacker could possibly use this issue     to cause a denial of service. (CVE-2015-9253, CVE-2017-8923, CVE-2017-9118, CVE-2017-9120)

    It was discovered that PHP incorrectly handled certain inputs. An attacker could possibly use this issue     to cause a denial of service, or possibly obtain sensitive information. (CVE-2017-9119)

    It was discovered that PHP incorrectly handled certain scripts with XML parsing functions. An attacker     could possibly use this issue to obtain sensitive information. (CVE-2021-21707)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its banner, the version of PHP running on the remote web server is 7.1.x prior to 7.1.5. It is, therefore, affected by the following vulnerabilities :

- A memory allocation issue exists in the zend_string_extend() function in file Zend/zend_string.h when concatenating strings due to a failure to prevent changes to string objects that result in a negative length. An unauthenticated, remote attacker can exploit this to cause a denial of service condition or possibly other unspecified impact. (CVE-2017-8923)

- A memory allocation issue exists in the i_zval_ptr_dtor() function in Zend/zend_variables.h when allocating large amounts of memory. An unauthenticated, remote attacker can exploit this, via crafted operations on array data structures, to cause a denial of service condition. (CVE-2017-9119)

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its banner, the version of PHP running on the remote web server is 7.0.x prior to 7.0.19. It is, therefore, affected by the following vulnerabilities :

- A memory allocation issue exists in the zend_string_extend() function in file Zend/zend_string.h when concatenating strings due to a failure to prevent changes to string objects that result in a negative length. An unauthenticated, remote attacker can exploit this to cause a denial of service condition or possibly other unspecified impact. (CVE-2017-8923)

- A memory allocation issue exists in the i_zval_ptr_dtor() function in Zend/zend_variables.h when allocating large amounts of memory. An unauthenticated, remote attacker can exploit this, via crafted operations on array data structures, to cause a denial of service condition. (CVE-2017-9119)

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its banner, the version of PHP running on the remote web server is 7.1.x prior to 7.1.5. It is, therefore, affected by the following vulnerabilities :

  - A memory allocation issue exists in the     zend_string_extend() function in file Zend/zend_string.h     when concatenating strings due to a failure to prevent     changes to string objects that result in a negative     length. An unauthenticated, remote attacker can exploit     this to cause a denial of service condition or possibly     other unspecified impact. (CVE-2017-8923)

  - A memory allocation issue exists in the     i_zval_ptr_dtor() function in Zend/zend_variables.h when     allocating large amounts of memory. An unauthenticated,     remote attacker can exploit this, via crafted operations     on array data structures, to cause a denial of service     condition. (CVE-2017-9119)

According to its banner, the version of PHP running on the remote web server is 7.0.x prior to 7.0.19. It is, therefore, affected by the following vulnerabilities :

  - A memory allocation issue exists in the     zend_string_extend() function in file Zend/zend_string.h     when concatenating strings due to a failure to prevent     changes to string objects that result in a negative     length. An unauthenticated, remote attacker can exploit     this to cause a denial of service condition or possibly     other unspecified impact. (CVE-2017-8923)

  - A memory allocation issue exists in the     i_zval_ptr_dtor() function in Zend/zend_variables.h when     allocating large amounts of memory. An unauthenticated,     remote attacker can exploit this, via crafted operations     on array data structures, to cause a denial of service     condition. (CVE-2017-9119)

ID	Name	Product	Family	Type	Severity
261057	Linux Distros Unpatched Vulnerability : CVE-2017-9119	Nessus	Misc.	Local	critical
177173	EulerOS Virtualization 3.0.6.0 : php (EulerOS-SA-2023-2243)	Nessus	Huawei Local Security Checks	Local	critical
165862	EulerOS 2.0 SP8 : php (EulerOS-SA-2022-2477)	Nessus	Huawei Local Security Checks	Local	critical
158572	Ubuntu 18.04 LTS / 20.04 LTS : PHP vulnerabilities (USN-5300-2)	Nessus	Ubuntu Local Security Checks	Local	critical
158273	Ubuntu 16.04 ESM : PHP vulnerabilities (USN-5300-1)	Nessus	Ubuntu Local Security Checks	Local	critical
98862	PHP 7.1.x < 7.1.5 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	critical
98841	PHP 7.0.x < 7.0.19 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	critical
100421	PHP 7.1.x < 7.1.5 Multiple Vulnerabilities	Nessus	CGI abuses	Remote	critical
100420	PHP 7.0.x < 7.0.19 Multiple Vulnerabilities	Nessus	CGI abuses	Remote	critical

Detections

Analytics

CVE-2017-9119

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical