CVE-2018-17082

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-17082
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-17082.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-17082
Downstream
Related
Published
2018-09-16T15:29:00.253Z
Modified
2026-03-15T22:20:03.825018Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a "Transfer-Encoding: chunked" request, because the bucket brigade is mishandled in the phphandler function in sapi/apache2handler/sapiapache2.c.

References

Affected packages

Git / github.com/php/php-src

Affected ranges

Type
GIT
Repo
https://github.com/php/php-src
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
b0822792c8d4c8d535ea1beb8ea63025496668e7
Introduced
60fffd296abce5fc071f3c173c25a2696cf683c6
Fixed
cff4562e6dfe5db877504f310bf00e00198fbb73
Introduced
0221e9f827632942225586687a33cfd554860d5e
Fixed
7f6558bf5d54cc03ad8cdad3c13188563c24f422
Introduced
8148cbb78841c8ec0759c0836e7f35dec799d300
Fixed
00d2b7a3d28d29383450fc2607c7d4fb91d57a4a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5dc92c2117cafc61daaaaa240fd46c3ac33872a4
Fixed
23b057742e3cf199612fa8050ae86cae675e214e
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "5.6.38"
        },
        {
            "introduced": "7.0.0"
        },
        {
            "fixed": "7.0.32"
        },
        {
            "introduced": "7.1.0"
        },
        {
            "fixed": "7.1.22"
        },
        {
            "introduced": "7.2.0"
        },
        {
            "fixed": "7.2.10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0"
        }
    ]
}

Database specific

vanir_signatures 
[
    {
        "digest": {
            "length": 3972.0,
            "function_hash": "286714666792502187029051883559319256746"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2018-17082-68a51ab8",
        "target": {
            "function": "php_handler",
            "file": "sapi/apache2handler/sapi_apache2.c"
        },
        "source": "https://github.com/php/php-src/commit/23b057742e3cf199612fa8050ae86cae675e214e"
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "152064786699712677301454464694779181018",
                "29303015709440994030888303854153240592",
                "111547859227363177804637785761047134821",
                "289592337297551983891992604857677649335"
            ]
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2018-17082-fa554c7b",
        "target": {
            "file": "sapi/apache2handler/sapi_apache2.c"
        },
        "source": "https://github.com/php/php-src/commit/23b057742e3cf199612fa8050ae86cae675e214e"
    }
]
unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-17082.json"