Bugzilla – Bug 1069606
VUL-0: CVE-2017-9228: php5,php53,php7: heap out-of-bounds write occurs in bitset_set_range() during regex compilation
Last modified: 2018-02-12 21:11:26 UTC
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9228 An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitset_set_range() during regular expression compilation due to an uninitialized variable from an incorrect state transition. An incorrect state transition in parse_char_class() could create an execution path that leaves a critical local variable uninitialized until it's used as an index, resulting in an out-of-bounds write memory corruption.
https://github.com/kkos/oniguruma/issues/60
php commit (7.2.0) https://github.com/php/php-src/commit/1c845d295037702d63097e2216b3c5db53f79273
An update workflow for this issue was started. This issue was rated as moderate. Please submit fixed packages until 2017-12-13. When done, reassign the bug to security-team@suse.de. https://swamp.suse.de/webswamp/wf/63910
SUSE-SU-2017:3237-1: An update that solves three vulnerabilities and has one errata is now available. Category: security (moderate) Bug References: 1063815,1067441,1069606,1069631 CVE References: CVE-2017-16642,CVE-2017-9228,CVE-2017-9229 Sources used: SUSE Linux Enterprise Software Development Kit 12-SP3 (src): php7-7.0.7-50.23.1 SUSE Linux Enterprise Software Development Kit 12-SP2 (src): php7-7.0.7-50.23.1 SUSE Linux Enterprise Module for Web Scripting 12 (src): php7-7.0.7-50.23.1
openSUSE-SU-2017:3240-1: An update that solves three vulnerabilities and has one errata is now available. Category: security (moderate) Bug References: 1063815,1067441,1069606,1069631 CVE References: CVE-2017-16642,CVE-2017-9228,CVE-2017-9229 Sources used: openSUSE Leap 42.3 (src): php7-7.0.7-25.1 openSUSE Leap 42.2 (src): php7-7.0.7-14.15.1
SUSE-SU-2017:3277-1: An update that fixes four vulnerabilities is now available. Category: security (moderate) Bug References: 1067090,1067441,1069606,1069631 CVE References: CVE-2017-16642,CVE-2017-4025,CVE-2017-9228,CVE-2017-9229 Sources used: SUSE Linux Enterprise Software Development Kit 12-SP3 (src): php5-5.5.14-109.13.1 SUSE Linux Enterprise Software Development Kit 12-SP2 (src): php5-5.5.14-109.13.1 SUSE Linux Enterprise Module for Web Scripting 12 (src): php5-5.5.14-109.13.1
openSUSE-SU-2017:3329-1: An update that fixes four vulnerabilities is now available. Category: security (moderate) Bug References: 1067090,1067441,1069606,1069631 CVE References: CVE-2017-16642,CVE-2017-4025,CVE-2017-9228,CVE-2017-9229 Sources used: openSUSE Leap 42.3 (src): php5-5.5.14-88.1 openSUSE Leap 42.2 (src): php5-5.5.14-77.15.1
SUSE-SU-2018:0003-1: An update that fixes three vulnerabilities is now available. Category: security (moderate) Bug References: 1067441,1069606,1069631 CVE References: CVE-2017-16642,CVE-2017-9228,CVE-2017-9229 Sources used: SUSE Linux Enterprise Software Development Kit 11-SP4 (src): php53-5.3.17-112.10.1 SUSE Linux Enterprise Server 11-SP4 (src): php53-5.3.17-112.10.1 SUSE Linux Enterprise Debuginfo 11-SP4 (src): php53-5.3.17-112.10.1
released