CVE-2017-7272 Server-side request forgery in n/a
An attacker can bypass port restrictions in PHP applications using fsockopen by specifying a port in the hostname argument, leading to Server-Side Request Forgery.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2017-7272?
CVE-2017-7272 is a high-severity server-side request forgery vulnerability in Php Php, published on 27 Mar 2017. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
PHP through 7.1.11 enables potential SSRF in applications that accept an fsockopen or pfsockopen hostname argument with an expectation that the port number is constrained. Because a :port syntax is recognized, fsockopen will use the port number that is specified in the hostname argument, instead of the port number in the second argument of the function.
Weakness: CWE-918
Which versions are affected by CVE-2017-7272?
It affects 1 product.
Linux distribution packages (3)
php53 SUSE:Linux Enterprise Server 11 SP4 | All versions | 5.3.17-111.2 |
php53 SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | All versions | 5.3.17-111.2 |
php53 SUSE:Linux Enterprise Software Development Kit 11 SP4 | All versions | 5.3.17-111.2 |
Products include Php Php.
How do I fix CVE-2017-7272?
Upgrade to a fixed version.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2017-7272 being exploited?
There is no known exploitation of CVE-2017-7272 in the wild and no public exploit code.
Other vulnerabilities in Php Php
Sources
Also known as GHSA-943r-xvqq-r4rh, SUSE-SU-2017:1709-1, UBUNTU-CVE-2017-7272.