Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Improper Input Validation Vulnerability - CVE-2017-8923 - Vulnerability Database
PHP

PHP Improper Input Validation Vulnerability - CVE-2017-8923

Critical
Reference: CVE-2017-8923
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-8923
Title: PHP Improper Input Validation Vulnerability
Overview:

The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script39s use of . with a long string.