CVE-2017-11143

HIGH

PHP < 5.6.30 - Use-After-Free in WDDX Boolean Deserialization

Title source: llm
STIX 2.1

Description

In PHP before 5.6.31, an invalid free in the WDDX deserialization of boolean parameters could be used by attackers able to inject XML for deserialization to crash the PHP interpreter, related to an invalid free for an empty boolean element in ext/wddx/wddx.c.

References (9)

Core 9
Core References
Mailing List, Patch, Third Party Advisory x_refsource_confirm
http://openwall.com/lists/oss-security/2017/07/10/6
Third Party Advisory x_refsource_confirm
https://www.tenable.com/security/tns-2017-12
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/99553
Issue Tracking, Patch, Vendor Advisory x_refsource_confirm
https://bugs.php.net/bug.php?id=74145
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:1296
Release Notes, Vendor Advisory x_refsource_confirm
http://php.net/ChangeLog-5.php
Vendor Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20180112-0001/
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2018/dsa-4081

Scores

CVSS v3 7.5
EPSS 0.0982
EPSS Percentile 93.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-416 CWE-502
Status published
Products (1)
php/php < 5.6.30
Published Jul 10, 2017
Tracked Since Feb 18, 2026