PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability - CVE-2017-11362 - Vulnerability Database

PHP

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability - CVE-2017-11362

Critical

Reference: CVE-2017-11362

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-11362

Title: PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Overview:

In PHP 7.x before 7.0.21 and 7.1.x before 7.1.7 ext/intl/msgformat/msgformat_parse.c does not restrict the locale length which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact within International Components for Unicode (ICU) for C/C via a long first argument to the msgfmt_parse_message function.