CVE-2017-12932

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2017-08-17T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue can have an unspecified impact on the integrity of PHP."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2019-08-19T10:06:08.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "100427", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/100427"}, {"name": "RHSA-2018:1296", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2018:1296"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/php/php-src/commit/1a23ebc1fff59bf480ca92963b36eba5c1b904c4"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://security.netapp.com/advisory/ntap-20180112-0001/"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugs.php.net/bug.php?id=74103"}, {"name": "DSA-4080", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "https://www.debian.org/security/2018/dsa-4080"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://php.net/ChangeLog-7.php"}, {"name": "GLSA-201709-21", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "https://security.gentoo.org/glsa/201709-21"}, {"name": "RHSA-2019:2519", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2019:2519"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2017-12932", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue can have an unspecified impact on the integrity of PHP."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "100427", "refsource": "BID", "url": "http://www.securityfocus.com/bid/100427"}, {"name": "RHSA-2018:1296", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2018:1296"}, {"name": "https://github.com/php/php-src/commit/1a23ebc1fff59bf480ca92963b36eba5c1b904c4", "refsource": "CONFIRM", "url": "https://github.com/php/php-src/commit/1a23ebc1fff59bf480ca92963b36eba5c1b904c4"}, {"name": "https://security.netapp.com/advisory/ntap-20180112-0001/", "refsource": "CONFIRM", "url": "https://security.netapp.com/advisory/ntap-20180112-0001/"}, {"name": "https://bugs.php.net/bug.php?id=74103", "refsource": "CONFIRM", "url": "https://bugs.php.net/bug.php?id=74103"}, {"name": "DSA-4080", "refsource": "DEBIAN", "url": "https://www.debian.org/security/2018/dsa-4080"}, {"name": "http://php.net/ChangeLog-7.php", "refsource": "CONFIRM", "url": "http://php.net/ChangeLog-7.php"}, {"name": "GLSA-201709-21", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201709-21"}, {"name": "RHSA-2019:2519", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:2519"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T18:51:07.351Z"}, "title": "CVE Program Container", "references": [{"name": "100427", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/100427"}, {"name": "RHSA-2018:1296", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "https://access.redhat.com/errata/RHSA-2018:1296"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/php/php-src/commit/1a23ebc1fff59bf480ca92963b36eba5c1b904c4"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://security.netapp.com/advisory/ntap-20180112-0001/"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugs.php.net/bug.php?id=74103"}, {"name": "DSA-4080", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "https://www.debian.org/security/2018/dsa-4080"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://php.net/ChangeLog-7.php"}, {"name": "GLSA-201709-21", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "https://security.gentoo.org/glsa/201709-21"}, {"name": "RHSA-2019:2519", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "https://access.redhat.com/errata/RHSA-2019:2519"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2017-12932", "datePublished": "2017-08-18T03:00:00.000Z", "dateReserved": "2017-08-17T00:00:00.000Z", "dateUpdated": "2024-08-05T18:51:07.351Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "cve@mitre.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:php:php:7.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "DB6890AF-8A0A-46EE-AAD5-CF9AAE14A321", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "6B90B947-7B54-47F3-9637-2F4AC44079EE", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "35848414-BD5D-4164-84DC-61ABBB1C4152", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "2B1F8402-8551-4F66-A9A7-81D472AB058E", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "7A773E8E-48CD-4D35-A0FD-629BD9334486", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "FC492340-79AF-4676-A161-079A97EC6F0C", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "F1C2D8FE-C380-4B43-B634-A3DBA4700A71", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "3EB58393-0C10-413C-8D95-6BAA8BC19A1B", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.0.8:*:*:*:*:*:*:*", "matchCriteriaId": "751F51CA-9D88-4971-A6EC-8C0B72E8E22B", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.0.9:*:*:*:*:*:*:*", "matchCriteriaId": "37B74118-8FC2-44CB-9673-A83DF777B2E6", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.0.10:*:*:*:*:*:*:*", "matchCriteriaId": "4D56A200-1477-40DA-9444-CFC946157C69", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.0.11:*:*:*:*:*:*:*", "matchCriteriaId": "FD0D1CCC-A857-4C15-899E-08F9255CEE34", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.0.12:*:*:*:*:*:*:*", "matchCriteriaId": "6745CC43-2836-4CD8-848F-EEA08AE9D5AC", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.0.13:*:*:*:*:*:*:*", "matchCriteriaId": "7BEB6696-14F9-4D9B-9974-B682FFBB828E", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.0.14:*:*:*:*:*:*:*", "matchCriteriaId": "04146390-021D-4147-9830-9EAA90D120A7", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.0.15:*:*:*:*:*:*:*", "matchCriteriaId": "5B124547-DC1D-4A92-B8AB-8A1900063786", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.0.16:*:*:*:*:*:*:*", "matchCriteriaId": "F45B2127-CF3D-4D59-9042-AE6DF2908319", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.0.17:*:*:*:*:*:*:*", "matchCriteriaId": "29A450E3-931F-4487-A76D-80A38210297A", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.0.18:*:*:*:*:*:*:*", "matchCriteriaId": "C099A0C4-883D-42ED-8359-FFD3ADD692A3", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.0.19:*:*:*:*:*:*:*", "matchCriteriaId": "ABD07432-5A23-491E-892E-42F0F58307D0", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.0.20:*:*:*:*:*:*:*", "matchCriteriaId": "19627ECC-9342-4917-8FCC-7757339E3242", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.0.21:*:*:*:*:*:*:*", "matchCriteriaId": "8FF89D76-3FB3-42FA-80FF-53C2E222F9E9", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.0.22:*:*:*:*:*:*:*", "matchCriteriaId": "AF27AF4F-68BB-465A-8668-44833A87D023", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "0C68AA43-ED90-4B98-A5F8-4E210C2CC7CD", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "2466D297-9442-40B0-A1A7-F9D166396CF8", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "EADBF7EE-18DC-49F9-BF2F-A09BBAE76F45", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "1726E9B6-A7FA-402B-A911-0CE81C623087", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "C3670FF7-2CA3-41A4-92FE-0123497E4E87", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "1C22CE03-DFE5-4CD3-B229-10B219A55434", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.1.6:*:*:*:*:*:*:*", "matchCriteriaId": "C258AF27-84DF-4FC3-A651-1349BB567FB9", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.1.7:*:*:*:*:*:*:*", "matchCriteriaId": "4E4E7085-5075-4682-BBDD-55BBF828167E", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:7.1.8:*:*:*:*:*:*:*", "matchCriteriaId": "C84BB8CA-DD39-44F6-8C9C-FF1467815B5E", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue can have an unspecified impact on the integrity of PHP."}, {"lang": "es", "value": "Ext/standard/var_unserializer.re en PHP en en sus versiones 7.0.x hasta 7.0.22 y versiones 7.1.x hasta 7.1.8 es propenso a un uso de memoria din\u00e1mica antes de liberaci\u00f3n (heap use after free) al deserializar datos que no son de confianza. Esto est\u00e1 relacionado con el uso incorrecto de la API hash para borrado de claves en una situaci\u00f3n de tama\u00f1o de array no v\u00e1lido. La explotaci\u00f3n de este problema puede tener un impacto sin especificar en la integridad de PHP."}], "id": "CVE-2017-12932", "lastModified": "2026-06-17T01:04:09.673", "metrics": {"cvssMetricV2": [{"acInsufInfo": true, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-08-18T03:29:00.183", "references": [{"source": "cve@mitre.org", "tags": ["Release Notes", "Vendor Advisory"], "url": "http://php.net/ChangeLog-7.php"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/100427"}, {"source": "cve@mitre.org", "url": "https://access.redhat.com/errata/RHSA-2018:1296"}, {"source": "cve@mitre.org", "url": "https://access.redhat.com/errata/RHSA-2019:2519"}, {"source": "cve@mitre.org", "tags": ["Issue Tracking", "Vendor Advisory"], "url": "https://bugs.php.net/bug.php?id=74103"}, {"source": "cve@mitre.org", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/php/php-src/commit/1a23ebc1fff59bf480ca92963b36eba5c1b904c4"}, {"source": "cve@mitre.org", "url": "https://security.gentoo.org/glsa/201709-21"}, {"source": "cve@mitre.org", "url": "https://security.netapp.com/advisory/ntap-20180112-0001/"}, {"source": "cve@mitre.org", "url": "https://www.debian.org/security/2018/dsa-4080"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes", "Vendor Advisory"], "url": "http://php.net/ChangeLog-7.php"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/100427"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://access.redhat.com/errata/RHSA-2018:1296"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://access.redhat.com/errata/RHSA-2019:2519"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Vendor Advisory"], "url": "https://bugs.php.net/bug.php?id=74103"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/php/php-src/commit/1a23ebc1fff59bf480ca92963b36eba5c1b904c4"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://security.gentoo.org/glsa/201709-21"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://security.netapp.com/advisory/ntap-20180112-0001/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.debian.org/security/2018/dsa-4080"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-416"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2018:1296", "cpe": "cpe:/a:redhat:rhel_software_collections:3::el6", "package": "rh-php70-php-0:7.0.27-1.el6", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 6", "release_date": "2018-05-03T00:00:00Z"}, {"advisory": "RHSA-2018:1296", "cpe": "cpe:/a:redhat:rhel_software_collections:3::el6", "package": "rh-php70-php-0:7.0.27-1.el6", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUS", "release_date": "2018-05-03T00:00:00Z"}, {"advisory": "RHSA-2018:1296", "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7", "package": "rh-php70-php-0:7.0.27-1.el7", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 7", "release_date": "2018-05-03T00:00:00Z"}, {"advisory": "RHSA-2019:2519", "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7", "package": "rh-php71-php-0:7.1.30-1.el7", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 7", "release_date": "2019-08-19T00:00:00Z"}, {"advisory": "RHSA-2018:1296", "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7", "package": "rh-php70-php-0:7.0.27-1.el7", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 7.3 EUS", "release_date": "2018-05-03T00:00:00Z"}, {"advisory": "RHSA-2018:1296", "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7", "package": "rh-php70-php-0:7.0.27-1.el7", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 7.4 EUS", "release_date": "2018-05-03T00:00:00Z"}, {"advisory": "RHSA-2019:2519", "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7", "package": "rh-php71-php-0:7.1.30-1.el7", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 7.4 EUS", "release_date": "2019-08-19T00:00:00Z"}, {"advisory": "RHSA-2018:1296", "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7", "package": "rh-php70-php-0:7.0.27-1.el7", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 7.5 EUS", "release_date": "2018-05-03T00:00:00Z"}, {"advisory": "RHSA-2019:2519", "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7", "package": "rh-php71-php-0:7.1.30-1.el7", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 7.5 EUS", "release_date": "2019-08-19T00:00:00Z"}, {"advisory": "RHSA-2019:2519", "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7", "package": "rh-php71-php-0:7.1.30-1.el7", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 7.6 EUS", "release_date": "2019-08-19T00:00:00Z"}], "bugzilla": {"description": "php: Heap use after free in ext/standard/var_unserializer.re", "id": "1484837", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1484837"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.1", "cvss3_scoring_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "status": "verified"}, "cwe": "CWE-416", "details": ["ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue can have an unspecified impact on the integrity of PHP."], "name": "CVE-2017-12932", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:5", "fix_state": "Not affected", "package_name": "php", "product_name": "Red Hat Enterprise Linux 5"}, {"cpe": "cpe:/o:redhat:enterprise_linux:5", "fix_state": "Not affected", "package_name": "php53", "product_name": "Red Hat Enterprise Linux 5"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "php", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "php", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/a:redhat:rhel_software_collections:2", "fix_state": "Not affected", "package_name": "rh-php56-php", "product_name": "Red Hat Software Collections"}], "public_date": "2017-02-20T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2017-12932\nhttps://nvd.nist.gov/vuln/detail/CVE-2017-12932"], "threat_severity": "Moderate"}

{}