PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv('HTTP_PROXY') call or (2) a CGI configuration of PHP, aka an "httpoxy" issue.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade php55Upgrade php56 | Aug 22, 2016 | Jul 18, 2016 |
| Centos_linux | — | Upgrade php-gdUpgrade php-mbstringUpgrade php-fpmUpgrade php-processUpgrade php-mysqlUpgrade php-develUpgrade php-cliUpgrade php-mysqlndUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-embeddedUpgrade php-recodeUpgrade php-snmpUpgrade php-dbaUpgrade php-enchantUpgrade php-pspellUpgrade php-soapUpgrade php-intlUpgrade php-commonUpgrade php-odbcUpgrade php-bcmathUpgrade php-ldapUpgrade php-pgsqlUpgrade php-pdoUpgrade phpUpgrade php-imapUpgrade php-ztsUpgrade php-tidy | Oct 19, 2017 | Jul 18, 2016 |
| Debian | — | Upgrade php7.0Upgrade php5 | Jul 27, 2016 | Jul 18, 2016 |
| Drupal | — | Upgrade to Drupal version 8.1.7 | Aug 2, 2017 | Jul 18, 2016 |
| Freebsd | — | Upgrade php70-xmlrpcUpgrade php70-gdUpgrade php55-exifUpgrade php56-snmpUpgrade php56-odbcUpgrade php55-snmpUpgrade php70-snmpUpgrade php70Upgrade php55-gdUpgrade php70-zipUpgrade php70-mcryptUpgrade php55-zipUpgrade php56-bz2Upgrade php70-bz2Upgrade php56-exifUpgrade php56-gdUpgrade php56Upgrade php55-odbcUpgrade php55Upgrade php56-zipUpgrade php56-xmlrpcUpgrade php70-exifUpgrade php70-curlUpgrade php70-odbcUpgrade php55-bz2Upgrade php55-xmlrpc | Dec 10, 2025 | Jul 26, 2016 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Jul 18, 2016 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 27, 2016 | Jul 18, 2016 |
| Oracle Solaris | — | Upgrade web/php-56/extension/php-suhosin-extension to version 0.9.37.1-0.175.3.22.0.2.0 on Solaris 11.3Upgrade web/php-56/extension/php-xdebug to version 2.3.2-0.175.3.22.0.2.0 on Solaris 11.3Upgrade web/php-56 to version 5.6.30-0.175.3.22.0.2.0 on Solaris 11.3 | Jul 19, 2017 | Jul 18, 2016 |
| Oracle_linux | — | Upgrade php-bcmathUpgrade phpUpgrade php-embeddedUpgrade php-imapUpgrade php-tidyUpgrade php-recodeUpgrade php-pdoUpgrade php-ldapUpgrade php-odbcUpgrade php-snmpUpgrade php-gdUpgrade php-mysqlndUpgrade php-enchantUpgrade php-cliUpgrade php-intlUpgrade php-ztsUpgrade php-fpmUpgrade php-xmlUpgrade php-soapUpgrade php-develUpgrade php-mbstringUpgrade php-mysqlUpgrade php-pspellUpgrade php-processUpgrade php-commonUpgrade php-dbaUpgrade php-xmlrpcUpgrade php-pgsql | Nov 9, 2016 | Jul 18, 2016 |
| Php | — | Upgrade to PHP version 5.6.24Upgrade to PHP version 5.5.38Upgrade to PHP version 7.0.9 | Jul 28, 2016 | Jul 18, 2016 |
| Redhat_linux | — | Upgrade php-recodeUpgrade php-xmlrpcUpgrade php-bcmathUpgrade php-fpmUpgrade phpUpgrade php-develUpgrade php-enchantUpgrade php-pdoUpgrade php-embeddedUpgrade php-processUpgrade php-soapUpgrade php-pspellUpgrade php-ldapUpgrade php-dbaUpgrade php-gdUpgrade php-commonUpgrade php-mysqlndNo solution existsUpgrade php-tidyUpgrade php-imapUpgrade php-snmpUpgrade php-intlUpgrade php-ztsUpgrade php-pgsqlUpgrade php-odbcUpgrade php-mysqlUpgrade php-mbstringUpgrade php-cliUpgrade php-xmlUpgrade php-debuginfo | Aug 24, 2016 | Jul 18, 2016 |
| Suse | — | Upgrade php7-pdoUpgrade php7-mbstringUpgrade php7-sysvsemUpgrade php5-mbstringUpgrade php7-iconvUpgrade php5-sysvmsgUpgrade php7-fpmUpgrade php7-pgsqlUpgrade php5-zlibUpgrade php7-bcmathUpgrade php5-suhosinUpgrade php7-fastcgiUpgrade php5-zipUpgrade php7-xmlwriterUpgrade php7-jsonUpgrade php7-shmopUpgrade php5-fileinfoUpgrade php5-ctypeUpgrade php7-develUpgrade php5-xmlrpcUpgrade php5-gdUpgrade php7-odbcUpgrade php5-pearUpgrade php7-sysvmsgUpgrade php7-snmpUpgrade php5-tokenizerUpgrade php5-xslUpgrade php5-pspellUpgrade php7-ftpUpgrade php5-intlUpgrade apache2-mod_php5Upgrade php5-socketsUpgrade php5-posixUpgrade php7-wddxUpgrade php5-fpmUpgrade php7-ldapUpgrade php7-enchantUpgrade apache2-mod_php7Upgrade php5-gettextUpgrade php7-tokenizerUpgrade php7-curlUpgrade php7-calendarUpgrade php7-fileinfoUpgrade php5-opensslUpgrade php7-mysqlUpgrade php5-domUpgrade php5-xmlwriterUpgrade php5-exifUpgrade php5-iconvUpgrade php5-wddxUpgrade php7-pharUpgrade php7-zlibUpgrade php7-ctypeUpgrade php5-imapUpgrade php5-sysvshmUpgrade php7-opensslUpgrade php5-pgsqlUpgrade php7-opcacheUpgrade php7-pear-archive_tarUpgrade php5-sqliteUpgrade php5-sysvsemUpgrade php5-pharUpgrade php5-ldapUpgrade php7-pcntlUpgrade php7-domUpgrade php5-pcntlUpgrade php5-mysqlUpgrade php5-ftpUpgrade php5-bz2Upgrade php5-snmpUpgrade php7-intlUpgrade php7-gmpUpgrade php7-pearUpgrade php5-xmlreaderUpgrade php5-mcryptUpgrade php7-xslUpgrade php5Upgrade php7-socketsUpgrade php7-mcryptUpgrade php7-dbaUpgrade php7-xmlreaderUpgrade php7Upgrade php7-xmlrpcUpgrade php7-gettextUpgrade php7-gdUpgrade php7-posixUpgrade php5-odbcUpgrade php7-imapUpgrade php5-curlUpgrade php5-soapUpgrade php7-exifUpgrade php5-gmpUpgrade php5-jsonUpgrade php5-bcmathUpgrade php7-pspellUpgrade php5-shmopUpgrade php5-calendarUpgrade php5-enchantUpgrade php7-sysvshmUpgrade php7-sqliteUpgrade php5-opcacheUpgrade php7-zipUpgrade php5-dbaUpgrade php7-bz2Upgrade php5-develUpgrade php7-soapUpgrade php5-pdoUpgrade php5-fastcgi | Jul 26, 2016 | Jul 18, 2016 |
| Ubuntu | — | Upgrade php7.0-cliUpgrade libapache2-mod-php7.0Upgrade php5-cliUpgrade php5-cgiUpgrade php7.0-cgiUpgrade libapache2-mod-php5Upgrade php5-fpmUpgrade php7.0-fpm | Aug 2, 2016 | Jul 18, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub