PHP Out-of-bounds Read Vulnerability - CVE-2017-16642 - Vulnerability Database

PHP Out-of-bounds Read Vulnerability - CVE-2017-16642

High

Reference: CVE-2017-16642

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-16642

Title: PHP Out-of-bounds Read Vulnerability

Overview:

In PHP before 5.6.32 7.x before 7.0.25 and 7.1.x before 7.1.11 an error in the date extension39s timelib_meridian handling of 39front of39 and 39back of39 directives could be used by attackers able to supply date strings to leak information from the interpreter related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: this is a different issue than CVE-2017-11145.