CVE-2018-17082

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-17082
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-17082.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-17082
Downstream
ALPINE (1)
CLSA (2)
DLA (1)
DSA (1)
openSUSE (2)
RHSA (1)
SUSE (5)
UBUNTU (1)
Related
openSUSE (2)
SUSE (5)
Published
2018-09-16T15:29:00Z
Modified
2026-08-07T14:58:39Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a "Transfer-Encoding: chunked" request, because the bucket brigade is mishandled in the php_handler function in sapi/apache2handler/sapi_apache2.c.

Database specific 
{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "8.0"
                },
                {
                    "last_affected":  "8.0"
                },
                {
                    "introduced":  "9.0"
                },
                {
                    "last_affected":  "9.0"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "debian:debian_linux"
        }
    ]
}
References

Affected packages

Git / github.com/php/php-src

Affected ranges

Type
GIT
Repo
https://github.com/php/php-src
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
b0822792c8d4c8d535ea1beb8ea63025496668e7
Introduced
60fffd296abce5fc071f3c173c25a2696cf683c6
Fixed
cff4562e6dfe5db877504f310bf00e00198fbb73
Introduced
0221e9f827632942225586687a33cfd554860d5e
Fixed
7f6558bf5d54cc03ad8cdad3c13188563c24f422
Introduced
8148cbb78841c8ec0759c0836e7f35dec799d300
Fixed
00d2b7a3d28d29383450fc2607c7d4fb91d57a4a
Fixed
23b057742e3cf199612fa8050ae86cae675e214e
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "fixed":  "5.6.38"
        },
        {
            "introduced":  "7.0.0"
        },
        {
            "fixed":  "7.0.32"
        },
        {
            "introduced":  "7.1.0"
        },
        {
            "fixed":  "7.1.22"
        },
        {
            "introduced":  "7.2.0"
        },
        {
            "fixed":  "7.2.10"
        }
    ],
    "source":  [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

Other
POST_64BIT_BRANCH_MERGE
POST_AST_MERGE
POST_PHP7_NSAPI_REMOVAL
POST_PHP7_REMOVALS
POST_PHPNG_MERGE
PRE_64BIT_BRANCH_MERGE
PRE_AST_MERGE
PRE_PHP7_EREG_MYSQL_REMOVALS
PRE_PHP7_NSAPI_REMOVAL
PRE_PHP7_REMOVALS

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-17082.json"
vanir_signatures 
[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "286714666792502187029051883559319256746",
            "length":  3972
        },
        "id":  "CVE-2018-17082-68a51ab8",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/php/php-src/commit/23b057742e3cf199612fa8050ae86cae675e214e",
        "target":  {
            "file":  "sapi/apache2handler/sapi_apache2.c",
            "function":  "php_handler"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "152064786699712677301454464694779181018",
                "29303015709440994030888303854153240592",
                "111547859227363177804637785761047134821",
                "289592337297551983891992604857677649335"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2018-17082-fa554c7b",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/php/php-src/commit/23b057742e3cf199612fa8050ae86cae675e214e",
        "target":  {
            "file":  "sapi/apache2handler/sapi_apache2.c"
        }
    }
]
vanir_signatures_modified 
"2026-08-07T14:58:39Z"