Executive brief
A vulnerability in PHP's archive handling component could allow an attacker to crash a web server or exhaust its memory. By providing a specially crafted archive file (PHAR), a remote attacker can trigger a denial-of-service condition, potentially taking websites or applications offline. This affects older versions of PHP that are commonly used in legacy web environments.
Technical details
An integer overflow exists in the 'phar_parse_pharfile' function within 'ext/phar/phar.c' in PHP. The vulnerability is triggered when the engine processes a PHAR archive containing a truncated manifest entry. A remote, unauthenticated attacker can exploit this by providing a malicious archive to a PHP application that performs PHAR operations, leading to an application crash or excessive memory consumption (Denial of Service). The issue was addressed in PHP versions 5.6.30 and 7.0.15.
Affected products
- PHP Group PHP Before 5.6.30, 7.0.x before 7.0.15
Timeline
- 2017-01-19: patched: Fixed in PHP 5.6.30 and 7.0.15
- 2017-01-24: disclosed: Initial NVD publication