Bugzilla – Bug 1103661
VUL-0: CVE-2017-9120: php7 Integer overflow in mysqli_api.c:mysqli_real_escape_string()
Last modified: 2021-09-14 12:46:59 UTC
rh#1611898 PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a long string because of an Integer overflow in mysqli_real_escape_string. References: https://bugzilla.redhat.com/show_bug.cgi?id=1611898 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9120 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9120 https://bugs.php.net/bug.php?id=74544
Created attachment 778808 [details] CVE-2017-9120.php QA REPRODUCER: needs php mysql installed and the reproducer needs a valid mysql connection inside. php CVE-2017-9120.php
Hmm I somewhat dislike when CVE is assigned without cooperation with upstream. php bug 74544 was turned from security to normal type of the bug by upstream and therefore perceived as a marginal security issue if any no worth a CVE. I also tried to reproduce with php 7.2.7 and mariadb without any segfault or valgrind errors. Until more information is known, I will use the patch attached to the bug, as it looks reasonable.
12/php5, 11sp3/php53, 11/php5 and 10sp3/php5 use safe_emalloc(), not affected.
Will submit for 15/php7 and 12/php7.
I believe all fixed.
SUSE-SU-2018:2333-1: An update that fixes two vulnerabilities is now available. Category: security (moderate) Bug References: 1103659,1103661 CVE References: CVE-2017-9120,CVE-2018-14851 Sources used: SUSE Linux Enterprise Software Development Kit 12-SP3 (src): php7-7.0.7-50.44.1 SUSE Linux Enterprise Module for Web Scripting 12 (src): php7-7.0.7-50.44.1
SUSE-SU-2018:2337-1: An update that fixes two vulnerabilities is now available. Category: security (moderate) Bug References: 1103659,1103661 CVE References: CVE-2017-9120,CVE-2018-14851 Sources used: SUSE Linux Enterprise Module for Web Scripting 15 (src): php7-7.2.5-4.6.1
openSUSE-SU-2018:2405-1: An update that fixes two vulnerabilities is now available. Category: security (moderate) Bug References: 1103659,1103661 CVE References: CVE-2017-9120,CVE-2018-14851 Sources used: openSUSE Leap 42.3 (src): php7-7.0.7-43.1 openSUSE Leap 15.0 (src): php7-7.2.5-lp150.2.9.1
released
This is an autogenerated message for OBS integration: This bug (1103661) was mentioned in https://build.opensuse.org/request/show/802846 Factory / php7