SecuritySpace - CVE-2017-8923

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2017-8923

Description: The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script's use of .= with a long string.

Test IDs: 1.3.6.1.4.1.25623.1.0.854527 1.3.6.1.4.1.25623.1.1.4.2022.0530.1 1.3.6.1.4.1.25623.1.1.4.2022.0699.1

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2017-8923
BugTraq ID: 98518
http://www.securityfocus.com/bid/98518
https://bugs.php.net/bug.php?id=74577

CVE ID:	CVE-2017-8923
Description:	The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script's use of .= with a long string.
Test IDs:	1.3.6.1.4.1.25623.1.0.854527 1.3.6.1.4.1.25623.1.1.4.2022.0530.1 1.3.6.1.4.1.25623.1.1.4.2022.0699.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2017-8923 BugTraq ID: 98518 http://www.securityfocus.com/bid/98518 https://bugs.php.net/bug.php?id=74577