Skip to content
OpenAdvisories
Unscored CVE-2017-7272 EUVD-2017-16301GHSA-943r-xvqq-r4rh

PHP through 7.1.11 enables potential SSRF in applications that accept an fsockopen or pfsockopen hostname argument with an expectation that…

Published Mar 27, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Package: php5 Package: php7.0 Ecosystem: Ubuntu

Description

PHP through 7.1.11 enables potential SSRF in applications that accept an fsockopen or pfsockopen hostname argument with an expectation that the port number is constrained. Because a :port syntax is recognized, fsockopen will use the port number that is specified in the hostname argument, instead of the port number in the second argument of the function.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 7 php5 5.4.45-0+deb7u8 DLA-875-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu Pro 16.04 LTS php7.0 No fix yet —
Ubuntu Pro 14.04 LTS php5 No fix yet —

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 11 SP4 php53 5.3.17-108.1 SUSE-SU-2017:1709-1, SUSE-SU-2017:1585-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 11 SP4 php53 5.3.17-108.1 SUSE-SU-2017:1709-1, SUSE-SU-2017:1585-1

Advisories 4

References