The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script's use of .= with a long string.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Huawei Euleros 2_0_sp8 | — | Upgrade phpUpgrade php-ldapUpgrade php-odbcUpgrade php-soapUpgrade php-gdUpgrade php-commonUpgrade php-recodeUpgrade php-pdoUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-processUpgrade php-cliUpgrade php-xml | Oct 11, 2022 | May 12, 2017 |
| Php | — | Upgrade to PHP version 7.1.6 | May 30, 2017 | May 12, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 12, 2017 |
| Rocky_linux | — | Upgrade libzip-develUpgrade php-snmpUpgrade php-pgsqlUpgrade php-pecl-apcuUpgrade php-xmlUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-fpm-debuginfoUpgrade php-odbcUpgrade php-common-debuginfoUpgrade php-commonUpgrade php-ldap-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-dbgUpgrade php-ffiUpgrade php-soap-debuginfoUpgrade libzip-toolsUpgrade php-xml-debuginfoUpgrade php-opcache-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-mbstringUpgrade php-dba-debuginfoUpgrade php-json-debuginfoUpgrade libzip-debuginfoUpgrade php-cliUpgrade php-mbstring-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-debuginfoUpgrade php-intl-debuginfoUpgrade php-soapUpgrade php-gmpUpgrade php-intlUpgrade php-debugsourceUpgrade php-jsonUpgrade php-gmp-debuginfoUpgrade php-ffi-debuginfoUpgrade php-embeddedUpgrade php-dbg-debuginfoUpgrade php-dbaUpgrade libzip-tools-debuginfoUpgrade php-gdUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-odbc-debuginfoUpgrade php-xmlrpcUpgrade php-cli-debuginfoUpgrade php-develUpgrade libzip-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-fpmUpgrade php-pecl-xdebugUpgrade php-pecl-zip-debugsourceUpgrade php-embedded-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade libzipUpgrade php-bcmathUpgrade php-process-debuginfoUpgrade php-opcacheUpgrade php-pecl-apcu-develUpgrade php-pdo-debuginfoUpgrade php-mysqlndUpgrade php-snmp-debuginfoUpgrade phpUpgrade php-processUpgrade php-pecl-rrd-debugsourceUpgrade php-enchantUpgrade php-gd-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-rrdUpgrade php-ldap | Dec 29, 2025 | Dec 27, 2025 |
| Suse | — | Upgrade php7-opcacheUpgrade php72-ctypeUpgrade php72-pear-archive_tarUpgrade php72-imapUpgrade php72-fastcgiUpgrade php72-snmpUpgrade php74-socketsUpgrade php72-zlibUpgrade php72-gettextUpgrade php7-ftpUpgrade php7-snmpUpgrade php7-posixUpgrade php74-opcacheUpgrade php72-develUpgrade php74-enchantUpgrade php72-soapUpgrade php72-pspellUpgrade php7-pear-archive_tarUpgrade php7-embedUpgrade php72-xmlreaderUpgrade php7-curlUpgrade php74-fpmUpgrade php7-domUpgrade php7-soapUpgrade php72-pgsqlUpgrade php7-socketsUpgrade php72-ftpUpgrade php74-tokenizerUpgrade php72-enchantUpgrade php74-xslUpgrade php7-xmlwriterUpgrade php74-gmpUpgrade php74-bz2Upgrade php7-testUpgrade php7-gettextUpgrade php74-fastcgiUpgrade php72-opcacheUpgrade php7-pgsqlUpgrade php74-gettextUpgrade php7-bcmathUpgrade php72Upgrade php72-socketsUpgrade php72-bcmathUpgrade php72-sysvsemUpgrade php74-exifUpgrade php74-gdUpgrade php7-pharUpgrade php7-odbcUpgrade php7-wddxUpgrade php72-exifUpgrade php7-shmopUpgrade php72-fileinfoUpgrade php74-xmlrpcUpgrade php7-tokenizerUpgrade php72-sodiumUpgrade php7-iconvUpgrade php7Upgrade php74-shmopUpgrade php72-readlineUpgrade php72-tidyUpgrade php7-mysqlUpgrade php7-bz2Upgrade php74-snmpUpgrade php74-pdoUpgrade php7-tidyUpgrade php72-sysvmsgUpgrade php72-xmlrpcUpgrade php72-xmlwriterUpgrade php7-enchantUpgrade php74-mysqlUpgrade php72-odbcUpgrade php7-develUpgrade php7-exifUpgrade php7-zipUpgrade php7-pdoUpgrade php74-mbstringUpgrade php72-posixUpgrade php74-ctypeUpgrade php74-opensslUpgrade php72-calendarUpgrade php7-intlUpgrade php74-iconvUpgrade php74-soapUpgrade php74-ftpUpgrade php7-gmpUpgrade php7-pearUpgrade php7-sqliteUpgrade php74-bcmathUpgrade php7-pcntlUpgrade php7-xslUpgrade php72-fpmUpgrade php74-posixUpgrade php72-pearUpgrade php72-ldapUpgrade php74-xmlwriterUpgrade php74-zipUpgrade php74-pcntlUpgrade php7-fpmUpgrade php74-sysvsemUpgrade php7-firebirdUpgrade php74-sysvmsgUpgrade php72-mbstringUpgrade php7-calendarUpgrade php72-sqliteUpgrade php74-sqliteUpgrade php72-domUpgrade php7-sodiumUpgrade php7-ldapUpgrade php72-mysqlUpgrade php7-fileinfoUpgrade php74-domUpgrade php7-dbaUpgrade php7-readlineUpgrade php74-xmlreaderUpgrade php72-wddxUpgrade php72-gmpUpgrade php7-gdUpgrade php72-intlUpgrade apache2-mod_php7Upgrade php7-sysvmsgUpgrade php72-pdoUpgrade php7-opensslUpgrade php72-shmopUpgrade php7-jsonUpgrade php72-zipUpgrade php72-bz2Upgrade php74Upgrade php72-curlUpgrade php7-xmlreaderUpgrade php74-intlUpgrade php74-pgsqlUpgrade php7-xmlrpcUpgrade php74-fileinfoUpgrade php74-sodiumUpgrade php74-develUpgrade php74-calendarUpgrade php7-mbstringUpgrade php74-sysvshmUpgrade php7-fastcgiUpgrade php74-zlibUpgrade php72-tokenizerUpgrade php72-opensslUpgrade php72-sysvshmUpgrade php72-xslUpgrade php72-pharUpgrade php7-zlibUpgrade php74-jsonUpgrade apache2-mod_php74Upgrade php74-ldapUpgrade php7-sysvsemUpgrade php72-iconvUpgrade php72-dbaUpgrade php72-jsonUpgrade php74-odbcUpgrade php74-pharUpgrade php74-readlineUpgrade php74-curlUpgrade php7-ctypeUpgrade php72-gdUpgrade php74-tidyUpgrade php74-dbaUpgrade apache2-mod_php72Upgrade php7-sysvshmUpgrade php72-pcntl | Feb 22, 2022 | May 12, 2017 |
| Ubuntu | — | Upgrade php7.0-cli (Ubuntu Pro)Upgrade php7.2-fpmUpgrade php7.4-cgiUpgrade php7.2-cgiUpgrade php7.2-cliUpgrade php8.0-cgiUpgrade php7.4-cliUpgrade php7.0-cgi (Ubuntu Pro)Upgrade php8.0-cliUpgrade php7.4-fpmUpgrade php8.0-fpmUpgrade php7.0-fpm (Ubuntu Pro) | Feb 23, 2022 | May 12, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub