Description

In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check the return value of the OpenSSL sealing function, which could lead to a crash of the PHP interpreter, related to an interpretation conflict for a negative number in ext/openssl/openssl.c, and an OpenSSL documentation omission.

Remediation

References

CVE-2017-11144

Related Vulnerabilities

WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-1897)

Joomla! Core 2.5.x Cross-Site Scripting (2.5.0 - 2.5.18)

WordPress Plugin Advanced Custom Fields (ACF) Multiple Security Bypass Vulnerabilities (5.10.2)

Liferay DXP Insertion of Sensitive Information into Log File Vulnerability (CVE-2025-62262)

WordPress Improper Privilege Management Vulnerability (CVE-2019-20043)

Severity

High

Classification

CVE-2017-11144 CWE-754 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities